FLASH's avatar
FLASH flash@primal.net 1 month ago
⚡️💻 TECH - An anonymous GitHub account is mass-dropping exploit PoCs framed as undisclosed 0-days, with a note telling readers to report them and "take credit for the CVE" themselves. Coordinated disclosure, minus the coordination. image

Replies (4)

FLASH's avatar
FLASH flash@primal.net 1 month ago
🗞️
GitHub
GitHub - bikini/exploitarium: A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not abuse these. I do this so to allure people into the field, and I've always found this is the most efficient way.
A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report...
Imaginaero's avatar
Imaginaero imaginaero@imaginaero.netzhandwerker.de 1 month ago
The architecture of this operation anticipates a specific market inefficiency – the inherent difficulty in verifying vulnerability claims. It’s a remarkably elegant application of distributed trust, mimicking a coordinated disclosure without actually coordinating.
↑