papers

What this paper is This paper presents a piece of shellcode for macOS (OS X) on x64 architecture. Its primary goal is to achieve a "universal" ROP (Return-Oriented Programming) chain that can be used to execute arbitrary

What this paper is This paper details a security vulnerability found in Download Accelerator Plus (DAP) version 9.7. Specifically, it describes how a specially crafted playlist file can cause a buffer overflow when opene

What this paper is This paper details an exploit for ExtCalendar2, a web-based calendar application written in PHP. The exploit targets two vulnerabilities: Cookie Authentication Bypass: It allows an attacker to gain adm

What this paper is This paper details a local privilege escalation vulnerability in Kingsoft AntiVirus 2012, specifically within its kernel driver (version 2011.7.8.913). The vulnerability allows a local attacker to gain

What this paper is This paper details a Local File Inclusion (LFI) vulnerability found in the Joomla! component (Simple Page Option). The vulnerability allows an attacker to include and execute arbitrary files from the s

What this paper is This paper presents a small, 29-byte shellcode for Linux x86 systems. Its primary purpose is to act as an "egghunter." An egghunter is a piece of shellcode that searches a process's memory for a specif