Skip to content
View d4ytox's full-sized avatar
0 followers · 5 following

Block or report d4ytox

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
d4ytox/README.md

Security researcher / Penetration tester

I publish proof-of-concept exploits for vulnerabilities that are already public and patched.

Focus    C Python Linux Windows

Website

Pinned Loading

  1. CVE-2022-44384 CVE-2022-44384 Public

    Authenticated arbitrary file upload to RCE in rConfig <= 3.9.6. Working Python 3 rewrite of the public PoC

    Python 1

  2. CVE-2021-22204 CVE-2021-22204 Public

    ExifTool arbitrary code execution via a crafted DjVu image (versions 7.44 to 12.23). PoC builds a pure DjVu payload with djvumake, so the attacker machine needs no vulnerable ExifTool.

    Python 1

  3. CVE-2021-3156 CVE-2021-3156 Public

    Baron Samedit (CVE-2021-3156): sudo heap-based buffer overflow giving local root. PoC packaged with a static/musl launcher so it runs against older-glibc (2.31) targets.

    C 1

  4. tomcat-manager-war-rce tomcat-manager-war-rce Public

    Authenticated WAR-upload to RCE on Apache Tomcat Manager. Needs manager-gui credentials. Builds the WAR in memory from a single JSP (no msfvenom), handles the CSRF nonce + JSESSIONID pairing, and d…

    Python 1

  5. CVE-2021-22205 CVE-2021-22205 Public

    Unauthenticated RCE in GitLab CE/EE from 11.9 (fixed in 13.8.8, 13.9.6, 13.10.3) via the bundled ExifTool (CVE-2021-22204). Pure-Python DjVu builder, no djvulibre. Unauth and authenticated vectors,…

    Python 1

  6. NetExec NetExec Public

    Forked from Pennyw0rth/NetExec

    The Network Execution Tool

    Python