CVE-2023-4863

Awesome Fuzzing Resources 记录一些fuzz的工具和论文。githubcom/secfigo/Awesome-Fuzzing可能很多人看过，我也提交过一些Pull Request，但是觉得作者维护不是很勤快：有很多过时的信息，新的信息没有及时加入，整体结构也很乱。而且很多paper细节太模糊又不开源，其实也没有参考意义，不用去浪

CVE-2023-4683 - Test

CVE-2023-4683-Test This repo holds an easy to use POC for CVE-2023-4683 Just git clone this repo and either extract webp-test or run setup-webp-testsh webp-test already has the necessary files (git commit 7ba44f80f3b94fc0138db159afea770ef06532a0 of chromiumgooglesourcecom/webm/libwebp/), and a specially crafted badwebp and badwebppng files located in the webp_te

CVE-2023-4863 # checkout webp git clone chromiumgooglesourcecom/webm/libwebp/ webp_test cd webp_test/ # checkout vulnerable version git checkout 7ba44f80f3b94fc0138db159afea770ef06532a0 # enable AddressSanitizer sed -i 's/^EXTRA_FLAGS=*/& -fsanitize=address/' makefileunix # build webp make -f makefileunix cd examples/ # fetch mistymntnco

SVG Images with XSS in them

naughty images SVG Images with XSS in them A collection of SVG XSS samples I created, found or recreated Some of them may not work 0x are pure xss 1x require user interaction 2x are DOS 3x are other shenanigans CVE-2023-4863 PoC copy blogisoscelescom/the-webp-0day/ webp/ contains a copy of the PoC webp out-of-bound write Unfortunately it doesn't have an exp

Experimental Wheels for Python for Windows on ARM64

Experimental Wheels for Python for Windows on ARM64 This repository provides experimental binary wheels for open-source extension packages for Python for Windows on ARM64 The files are experimental (meaning: unofficial, informal, unrecognized, unsupported, no warranty, no liability, provided "as is") and made available for testing and evaluation purposes They are no

Scans an executable and determines if it was wrapped in an Electron version vulnerable to the Chromium vulnerability CVE-2023-4863/ CVE-2023-5129

Find-VulnerableElectronVersion Scans an executable and determines if it was wrapped in an Electron version vulnerable to the Chromium vulnerability CVE-2023-4863/ CVE-2023-5129 using the Sysinternals tool Strings Only supported on Windows devices Requires Sysinternals to be installed: learnmicrosoftcom/en-us/sysinternals/downloads/sysinternals-suite Example syntax:

Find Electron Apps Vulnerable to CVE-2023-4863 / CVE-2023-5129

Find Electron Apps Vulnerable to CVE-2023-4863 / CVE-2023-5129 This PowerShell script downloads Sysinternals Strings, recursively searches for strings within all exe files across all drives, and compares the Electron version found with known patched versions below to determine vulnerability to CVE-2023-4863 / CVE-2023-5129 Note: The script downloads stringszip to C:\Windows

BAD-WEBP-CVE-2023-4863

BAD-WEBP-CVE-2023-4863 BAD-WEBP-CVE-2023-4863

GlideWebpDecoder A port version of githubcom/zjupure/GlideWebpDecoder which use libwebp version 132 code to fix CVE-2023-4863 implementation 'comgithubtougee:GlideWebpDecoder:001'

A tool for finding vulnerable libwebp(CVE-2023-4863)

中文 | EN CVE-2023-4863 libwebp dependency check tools This tool checks if your server's application or process that is affected by CVE-2023-4863 libwebp Heap buffer overflow (Version above 050) Run this script in your production environment carefully Result Screen Shot Scan Result Table of Contents How it works Working Scenarios Getting Started Communicatio

CVE-2023-4863/CVE-2023-41064 A POC for CVE-2023-4863 NOT an exploit Shout to @benhawkes who discovered the right set of code_lengths to trigger this vulnerability! Please consult Ben's blog post for more information! blogisoscelescom/the-webp-0day/

Triggering the famous libweb 0day vuln with libfuzzer

CVE-2023-4863 Triggering the famous libweb 0day vuln with libfuzzer Note : This is not a standard / stable harness yet!

libwebp CVE-2023-4863 A Vulnerability to Hack The World - CVE-2023-4863 Finding The webp Vulnerability in 8s (Fuzzing with AFL++)

C implementation of libwebp 0-click vulnerability

CVE-2023-4863-POC C implementation of libwebp 0-click vulnerability

A PowerShell module for querying the National Vulnerability Database

PoshCVE A PowerShell module for querying the National Vulnerability Database Search for CVEs by ID, vendor, product, and more Installation Install from the Powershell Gallery by running the following command: Install-Module -Name PoshCVE -Scope CurrentUser Usage Get-CVE Parameters: ID Specifies the ID of the CVE entry to retrieve

This tool calculates tricky canonical huffman histogram for CVE-2023-4863.

Huffman table hacking tool This tool calculates tricky canonical huffman histogram, which is able to trigger OOB (Out Of Band) write for vulnerable libwebp library (ie libwebp <= 131) This vulnerability is known as CVE-2023-4863 or CVE-2023-41064 We can overflow the pre-allocated huffman table by at most 132 entries The rationale is that libwebp assumes the huffm

ELEGANTBOUNCER is a detection tool for file-based mobile exploits.

ELEGANTBOUNCER ELEGANTBOUNCER is a detection tool for file-based mobile exploits It employs an innovative approach for advanced file-based threat identification, eliminating the need for in-the-wild samples and outperforming traditional methods based on regular expressions or IOCs At present, it primarily targets the identification of mobile vulnerabilities such as FORCEDENTR

Full native ImageMagick-7 bindings for Node.js native & WASM - showcase for SWIG Node-API

magickwandjs formerly known as node-magickwand This package is a full native port of the ImageMagick-7 C++ library to both Nodejs native and browser WASM using SWIG Node-API + emnapi Unlike all other ImageMagick npm packages, it does not use the CLI to interact with the utilities, but offers direct access to the full C++ API It supports both synchronous and multithreade

PoC A collection of proof-of-concept codes from DARKNAVY CVE-2023-32434 Target: iOS && macOS Version: before iOS 1651 && macOS 1341 CVE-2023-4863 Target: Chrome Renderer Version: 119060220 Blog Post: Part 1, Part 2

Awesome List of my own!

Awesome Stars A curated list of my GitHub stars! Generated by starred Contents AGS Script ASL ActionScript Ada Agda Arc Arduino Assembly Awk Batchfile Bikeshed Bluespec Brainfuck C C# C++ CMake CSS Chapel Cirru Clojure CoffeeScript Common Lisp Coq Crystal Cuda Cython D Dart Dockerfile Eagle Earthly Elixir Elm Emacs Lisp Erlang F# F* Fennel Forth Fortran Frege G-code GLSL G