This is your work, valued

SG

JS @breaktoprotect

Expert
@breaktoprotect

Any post which include but not limited to codes, documentations or comments are my own. Proof of concept codes are meant only for educational purposes.

breaktoprotect.net

CVE-2017-12615. POC Exploit for Apache Tomcat 7.0.x CVE-2017-12615 PUT JSP vulnerability.

112

CVE-2017-16778-Intercom-DTMF-Injection. A coordinated disclosure and security advisory on Fermax Intercom DTML Injection vulneraiblity. Special thanks to Fermax International for prompt responses and allowing details to be publicized.

22

shellcarver. Carve shellcode within the memory using restrictive character set

9

pixelcat. Transfer files via screens of GUI remote desktop apps (e.g. RDP, VNC, Citrix, etc)

3

dbg_scripts_tips. Make our lives easier when debugging during exploitation development or reverse engineering

2

rfd_js. A quick and dirty POC for Reflected File Download

2

keido. A scheduling system for consultants, made by a consultant (or ex-consultant)

1

test-fastmcp. To test and demonstrate MCP capabilities through the use of FastMCP on both co-pilot LLMs and local LLMs via LM Studio.

1

jira-vuln-mgmt. A setup to manage vulnerabilities on Jira and allow automation of creation and closing of Jira tickets based on scan reports.

1