j4k0m

godkiller

Vulnerabilities you my miss during a penetration testing.

discord-theory-I

My attempt to reverse the Discord nitro token generation function.

Born2beroot

This project aims to introduce you to the wonderful world of virtualization.

CVE-2021-24499

Mass exploitation of CVE-2021-24499 unauthenticated upload leading to remote code execution in Workreap theme.

huntfer

An automation tool to help you to find weak functions in your target source code for potential attacks.

glimpse-into-web-penetration-testing

A glimpse into web penetration testing example, that I did me and @Edd13Mora in our free time, for beginners to have an idea about websec.

CVE-2021-41773

Exploitation of CVE-2021-41773 a Directory Traversal in Apache 2.4.49.

minitalk

A small data exchange program using UNIX signals.

snowcrash-writeup

This project aims to make you discover, through several little challenges, cyber security in various fields.

really-good-cybersec

A really good cybersec reading materials.

secdojo-23jan

SecDojo 23jan CTF writeup.

CVE-2018-18925

Exploitation of CVE-2018-18925 a Remote Code Execution against the Git self hosted tool: Gogs.

CVE-2019-5420

A vulnerability can allow an attacker to guess the automatically generated development mode secret token.

Ruby2.x-RCE-Deserialization

Code execution by using a Ruby Universal Gadget when an attacker controls the data passed to Marshal.load().

RyouYoo

3DPrint-Lite-1.9.1.4-File-Upload

Analysis of WordPress 3D Print Lite 1.9.1.4 - arbitrary file upload vulnerability.

CVE-2018-0114

Exploitation of a vulnerability in Cisco's node-jose, a JavaScript library created to manage JWT.

spring4shell-secdojo

A write-up for SecDojo Spring4shell lab.

thnb-ctf-writeups

Writeups for the challenges I made for THNB national CTF

CBC-MAC

Exploitation of signature of non-fixed size messages with CBC-MAC challenge on Pentesterlab.

CVE-2018-11235

Auto malicious git repository creation to exploit CVE-2018-11235 a Remote Code Execution using Git Sub module.

loader-CVE-2020-14343

A web application vulnerable to CVE-2020-14343 insecure deserialization leading to command execution in PyYAML package.

CVE-2018-6574

Remote command execution in Golang go get command allows an attacker to gain code execution on a system by installing a malicious library.

liffy

Local file inclusion exploitation tool

solidity-hacking

Hacking smart contracts training

Struts-s2-045

Exploit script of Remote Code Execution in Struts 2 application.

42docs

Documentation on MiniLibX and curriculum projects

em

j4k0m.github.io

My blog..

rengine

test