exploit-development
Everything tagged "exploit-development".
ExifTool DjVu Injection notes 2 min 25 Jul 2026 ExifTool parses the annotation chunk of a DjVu file and passes its contents through a Perl `eval`, so metadata inside the file becomes code. Fixing Public Exploits notes 14 min 22 Jul 2026 Exploits from searchsploit or GitHub rarely run as-is. Metasploit notes 1 min 08 Sept 2026 The msfconsole workflow: find the module, set the addresses, run it. ImageMagick notes 4 min 07 Aug 2026 ImageMagick picks a coder from a file's contents, not its extension, and it shells out in more places than decoding pixels. Text4Shell notes 1 min 08 Sept 2026 Apache Commons Text 1.5 through 1.9 (CVE-2022-42889, fixed in 1.10) expands `${prefix:name...}` lookups in any string passed through its default StringSubstitutor, and the `script` lookup hands the expression to the JVM's JavaScript engine, so `${script:javascript:...}` runs arbitrary Java. SearchSploit notes 1 min 18 Jul 2026 SearchSploit searches the local Exploit-DB copy included with Kali.
nothing matches that filter.