avatar
oxasploits
one zero day at a time
  • HOME
  • ABOUT
  • SPONSORS
  • SERVICES
  • CATEGORIES
  • PROJECTS
  • EXPLOITS
  • GITHUB
  • PRIVACY
Home
Archives
2026
  • 16 Jan Using a shared library to hijack sudos call to read to lift users passwords
2025
  • 12 Jul Assigning a valid SSL cert to HTTPS secure a VPN host
2023
  • 11 Oct Designing an OpenAI powered IRC Chat Bot for Fun and Profit
  • 14 Jun Peripheral network reconnaissance OSINT
  • 01 May Bluetooth HCI HID Controller abuse RCE exploit
  • 24 Feb Writing the shortest valid C quine
  • 05 Jan Crack Bitcoin wallet.dat passwords using John
2022
  • 16 Dec Backdoors embedded along side installers
  • 15 Nov Enumerating SUID files targeted for priv esc
  • 05 Nov Lock binaries in memory using vmtouch cache
  • 20 Oct The importance of autonomous backups
  • 12 Sep Anatomy of a hardened Apache2 configuration
  • 30 Aug Jekyll minification optimization
  • 16 Aug Chipmonk with NUT to event script power outages
  • 30 Jul SQLi, PHP, XPath, and LDAP injection bypass
  • 25 May Deliverance Fuzzing File Descriptors
  • 04 Apr Cracking hashed passwords with John the Ripper
  • 08 Feb CVE-2019-15947 Bitcoin Core crashes contain wallets
  • 18 Jan Fuzzotron and Radamsa pcap testcases
  • 11 Jan Elasticsearch Elastic Agent and Kibana
  • 04 Jan I Hacked a Bank and Got Arrested in 2012
2021
  • 30 Dec Iptables Configuration Tips and Tricks
  • 08 Dec Simple x86_64 buffer overflow in gdb
  • 17 Nov Bash wildcard expansion globbing abuse
  • 14 Sep A shadow-utils BoF whitepaper
  • 16 Jun Networks with OpenVPN and Suricata
  • 05 Jun The time I enumerated every GitHub admin
  • 06 May Web app exploitation techniques
  • 15 Apr Advanced Fuzzing Techniques in ansvif
  • 30 Mar Creating a secured terminal paste tool
  • 24 Mar Dirty Tor exit to wallet.dat theft
  • 22 Mar CVE-2017-5816 HP iMC PLAT RCE Whitepaper
  • 18 Mar CVE-2006-3392 Webmin <1.29 pivot RCE Whitepaper
Recently Updated
  • Using a shared library to hijack sudos call to read to lift users passwords
Trending Tags
exploit vulnerabilities PoC 0day code-injection config perl RCE walkthrough bitcoin


  

© 2026 Marshall Whittaker. Some rights reserved.

I don't make extensive use of cookies, I just wanted to give the GDPR the finger.
Just can't bring myself to give a shit about some third world shithole's laws, lol.

| Home | Services | About | GitHub |
| Exploits | Services | Sponsors | Privacy |
| Status | Franklin | SPaste | Projects |