tr4mpass: Multi-path iOS exploitation framework for A5-A17 with checkm8/checkm9 and forensic gatheri
Redacted research on Thunderbolt PCIe DMA bypass via firmware spoofing and commodity adapters. Privately disclosed to Riot Games (HackerOne #35330606) on Jan 29, 2026. Closed ineligible as "physical facilities" after 6 days with no human response. Shared defensively to help anticheat teams strengthen hardware protections against cheating.
Advanced, multi-path iOS exploitation framework (A5-A17). Integrates checkm8/checkm9 bootloader exploits, dyld memory corruption, and SparseRestore bypasses with automated forensic gathering and system repair suites.
This script will pull and analyze syscalls in given application(s) allowing for easier security research purposes
Open-source iOS forensic workstation & zero-day research platform: 77 public exploit routes, 36 CVEs, own BFU decryption stack, DFU fuzzing campaign - the honest Cellebrite-class alternative
🐉 Experience a detailed showcase of exploit discovery, analysis, reproduction, and documentation of five XSS vulnerabilities impacting an outdated WordPress version. 🔍💻📄
Verifizierte Linux-Kernel-LPE-Forschung 2026 (Copy Fail, DirtyFrag, DirtyClone) + Detektions-Skripte
DirtyChains: 6 CVE page-cache write / LPE chains in one binary, GTK3 frontend, 740 prebuilt kernel offset tables
Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.
PHP2SHELL — remote scanner + research PoC for CVE-2026-109618 / CVE-2026-109619: the PHP rfc1867 pre-request OOM RCE pair (PHP 5.4.0–8.5.11, fixed in 8.5.12). Reverse-engineered from the 8.5.11→8.5.12 diff, verified against both builds.
n8n Ni8mare - Unauthenticated Arbitrary File Read to RCE Chain (CVSS 10.0)
To associate your repository with the exploit-research topic, visit your repo's landing page and select "manage topics."