nebusec/cybermeowfia

CyberMeowfia is a collection of proof of concept code and exploits for security vulnerabilities, known as CVEs, that were discovered by a security research group called Nebula Security, also referred to as VEGA. The README itself is short and mostly acts as an index pointing to longer writeups published on the group's own website and Twitter account, rather than explaining the code in this repository directly. The README lists several pieces of recent research. One entry, called GhostLock, describes a use after free bug in the stack that the group says has existed across all Linux distributions for fifteen years, affecting the Linux kernel. Another, called Longinus, describes a single vulnerability that breaks through two separate security boundaries at once inside Chrome's V8 JavaScript engine and its renderer sandbox, tied to a specific CVE number. A third writeup explains how a missing write barrier in V8 can turn into remote code execution in Chrome. A fourth describes exploiting a bug in the Linux kernel's Netfilter component, which the researchers submitted to Google's kernelCTF program and were paid a ten thousand five hundred dollar bounty for. The README also mentions a public bug list of over 885 entries hosted on the group's website, and points to a specific GitHub issue for followup discussion on the IonStack research mentioned above. Beyond these links and short descriptions, the README does not explain the internal structure of this repository, how to build the proof of concept code, or what license governs its use, so anyone using the code here would need to consult the linked writeups or the repository's contents directly for that detail.