liamsnyk Goto Github PK

aaro-bugs

Vulnerabilities, exploits, and PoCs

altoroj

WARNING: This app contains security vulnerabilities. AltoroJ is a sample banking J2EE web application. It shows what happens when web applications are written with consideration of app functionality but not app security. It's a simple and uncluttered platform for demonstrating and learning more about real-life application security issues.

awsgoat

AWSGoat : A Damn Vulnerable AWS Infrastructure

buffer-overflow-attack

This is an example buffer overflow attack on a small vulnerable C program.

buffer_overflow_example

Code to Demonstrate Buffer Overflow Vulnerability in Simple Authentication Apps

c-goof

Vulnerable C++ project

core

Dovecot mail server

cpp-goof

cve-2021-4034

Proof of concept for pwnkit vulnerability

cve-2022-0847

Linux Kernel Local Privilege Escalation Vulnerability CVE-2022-0847.

cve-2022-21894

baton drop (CVE-2022-21894): Secure Boot Security Feature Bypass Vulnerability

cve-stockpile

Master list of all my vulnerability discoveries. Mostly 3rd party kernel drivers.

damn_vulnerable_c_program

An example C program which contains vulnerable code for common types of vulnerabilities. It can be used to show fuzzing concepts.

damn_vulnerable_device_driver

Damn vulnerable linux device driver for people to play with.

devil

Developer's Image Library (DevIL) is a cross-platform image library utilizing a simple syntax to load, save, convert, manipulate, filter, and display a variety of images with ease. It is highly portable and has been ported to several platforms.

docker-goof

A demo repo showcasing Snyk's Docker offering

dotnet-goof

dvws

OWSAP Damn Vulnerable Web Sockets (DVWS) is a vulnerable web application which works on web sockets for client-server communication.

evince

Read-only mirror of https://gitlab.gnome.org/GNOME/evince

exploit-cve-2017-7494

SambaCry exploit and vulnerable container (CVE-2017-7494)

exploit-workshop

A step by step workshop to exploit various vulnerabilities in Node.js and Java applications

fuzzgoat

A vulnerable C program for testing fuzzers.

go-goof

hijackableapp

vulnerable app, legit and evil DLLs for sideloading attack PoCs

imagemagick6

🧙‍♂️ ImageMagick 6

insecure-deserialisation-net-poc

A small webserver vulnerable to insecure deserialization

iotgoat

IoTGoat is a deliberately insecure firmware created to educate software developers and security professionals with testing commonly found vulnerabilities in IoT devices.

java-goof

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

juice-shop1

Run Juice Shop and Snyk Kubernetes Monitor Locally on Apple Silicon (M1) Mac