r/ExploitDev • • 45m ago

New JavaScript obfuscation technique: Formatting a script can turn it into a different program

Thumbnail trustsig.eu
• Upvotes

A formatter, minifier or deobfuscator can be made to turn one script into another.

You can go try out all 186 techniques with this script: https://divergence.trustsig.eu/

Or try the Tetris-Snake demo here: https://divergence-game.trustsig.eu/


r/ExploitDev • • 21h ago

Gigabyte kernel driver LPE

6 Upvotes

hi this is my research, https://github.com/mein-0/KnockGiga


r/ExploitDev • • 20h ago

Deep-Dive into Android Binder UaF (CVE-2023-20938) using Time-Travel Debugging

Thumbnail
eshard.com
3 Upvotes

r/ExploitDev • • 17h ago

VigilOSS - Harness to help hunt for bugs in a structured smart way

2 Upvotes

Hi. To preface, I am not selling anything, and I am not suggesting to mindlessly use this tool.

I started initially using Claude to hunt on some programs, and from there built a harness so that I could work on an engagement for a long duration without losing progress, to make the process repeatable and high quality ( high quality submissions, final findings that can be trusted ), and several other things along the way.

Yes this is a AI created project, but from hundreds of hours and testing, and over 8 months. Yes you will find some weird Python code, and maybe some weird things in the prompts, its 80/20.

Please still review everything, you may have to have the Operator re-dispatch specific agents to re-verify things, or to QC the final submissions, human in the loop is so very important.

I have not added GLM 5.3, I know many people are starting to use it for black box engagements, I will be working on that soon.

Project - https://github.com/VigilOSS/Vigil