TamperingSyscalls

TamperingSyscalls TamperingSyscalls è un progetto inedito in 2 parti composto da argument spoofing e recupero delle syscall, che abusano entrambi di EH per aggirare gli EDR. Questo progetto include entrambe queste tecniche per fornire una soluzione alternativa alle syscall dirette. Manomissione...

hwbp4mw

Questo articolo era originariamente per VX-Underground Black Mass Halloween Edition 2022. Motori di hooking: Motore di hooking hwbp x86/x64 thread-safe c Libreria di breakpoint PAGEGUARD/hwbp c++20 Libreria hwbp esempio DLL c++20 Tecnica generica di evasione user-land x64 che utilizza i registri ...

x86-JTAG-Information

x86 JTAG जानकारी अवलोकन डीबगर हार्डवेयर Intel Applied Microsystems CodeTAP ASSET InterTech American Arium ECM-6 ECM-S2 ECM-20 TRC-20 ECM-50 ECM-700 revA5 ECM-XDP ECM-XDP3 revB2 ECM-XDP3e ECM-CCC ASSET InterTech International Test Technologies µMaster MicroMaster ASSET InterTech PCT...

OpenPLC-CVE-2021-31630-RCE

OpenPLC v3 认证远程代码执行 CVE-2021-31630 这是一个现代 Python 3.13+ 兼容的概念验证漏洞利用程序，用于 CVE-2021-31630，该漏洞存在于 OpenPLC v3 中，允许认证用户上传包含恶意代码的自定义硬件层，从而导致在主机上远程执行代码（RCE）。 原始漏洞发现和报告由 Fellipe Oliveira 提供。 此重新实现和现代化版本使用 httpx、CLI 工具、日志记录和更安全的检测技术。 漏洞利用概述 漏洞：CVE-2021-31630 组件：OpenPLC v3 Web 服务器 影响：认证远程代码执行 RCE...

cve-2021-31630

Этот скрипт автоматически эксплуатирует уязвимость в OpenPLC Web Server v3. Вы сможете создавать автоматическую реверс-оболочку reverse shell на сервере, не прибегая к ручным техникам. Описание CVE-2021-31630 Инъекция команд в Open PLC Webserver v3 позволяет удалённым злоумышленникам выполнять...

amradio

Système de radiodiffusion AM d'urgence Un système de radiodiffusion AM à 12 canaux utilisant le FPGA Red Pitaya pour la transmission d'alertes d'urgence dans les tunnels sans personnel. Pourquoi la radio AM dans un tunnel ? Pendant la construction et la maintenance, les véhicules équipés de radio...

XenoboxX

مجموعة أدوات الصندوق الرملي العتادي غالباً ما تستخدم البرمجيات الخبيثة تقنيات مضادة للآلات الافتراضية، والتي يمكن أن تتفاوت في صعوبة اكتشافها ومعادلتها. بينما يُعتبر دمج إجراءات مضادة للكشف في مختبراتنا خياراً شائعاً، يجب علينا أيضاً التفكير في استخدام صندوق رملي عتادي حقيقي، حتى لو بدا ذلك غريبا...

VectoredOverloading

VectoredOverloading Vectored Overloading é uma técnica de injeção PE local que foi observada pela primeira vez no malware KidKadi. Funciona manipulando o carregamento de uma DLL legítima usando Breakpoints de Hardware HWBP e Tratamento de Exceção Vetorizado VEH para alterar o objeto de seção da D...

csaf

The Cyber Security Awareness Framework CSAF is a structured approach aimed at enhancing cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective cybersecurity awareness programs, covering key areas such as...

bpflock

bpflock - Lock Linux machines bpflock - eBPF driven security for locking and auditing Linux machines. Note: bpflock is currently in experimental stage , it may break, options and security semantics may change, some BPF programs will be updated to use Cilium ebpf library. Sections 1. Introduction...

hbp-attack-demo

fork da https://github.com/veritas501/hbpattackdemo hbpattack demo Riferimento al blog P0: https://googleprojectzero.blogspot.com/2022/12/exploiting-CVE-2022-42703-bringing-back-the-stack-attack.html Ho buttato giù un modulo vuln, fingendo di avere una primitiva di scrittura in un indirizzo...

hardware-compliance-handbook

Base de Conhecimento sobre Conformidade de Hardware Uma referência aberta e com factos verificados sobre as leis da UE que regem a segurança cibernética de hardware e IoT — CRA, RED, NIS2 e a Lei da Cibersegurança/EUCC, num só sítio em vez de quatro. Preparado pela Platanor Technologies...

CVE-2026-18349

Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 allows Hardware Fault Injection. This issue affects SAMA5D4...

CVE-2026-18349

CVE-2026-18349 is an improper protection against voltage and clock glitches vulnerability in the Microchip SAMA5D4 that enables Hardware Fault Injection . The CVSS 4.0 score is 7.3 (HIGH) , with a physical attack vector and high attack complexity , but all impact metrics (confidentiality, integri...

EUVD-2026-64951

Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 allows Hardware Fault Injection. This issue affects SAMA5D4...

CVE-2026-18349 SAMA5D44 Fault Injection Vulnerability

Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 allows Hardware Fault Injection. This issue affects SAMA5D4...

systempi

systempi Echtzeit-Systemüberwachungs-Dashboard für den Raspberry Pi für Linux-Terminals mit Live-Telemetrie, Hardware-Gesundheitsanalyse und flackerarmem Rendering. FUNKTIONEN Echtzeit-Überwachung von CPU, RAM, Swap, Datenträger und Netzwerk Raspberry-Pi-Hardwaretelemetrie über vcgencmd Erkennung...

LazyHook

Übersicht LazyHook ist ein heimliches API-Hooking-Framework, das Host Intrusion Prevention Systems HIPS durch Call-Stack-Spoofing umgeht. Durch die Nutzung von CPU-Level-Hardware-Breakpoints und Vectored Exception Handling wird beliebiger Code so ausgeführt, als stamme er von vertrauenswürdigen,...

IoT-Vulnerability-Research-Public

Sicurezza Hardware e Ricerca sulle Vulnerabilità Questo repository funge da archivio pubblico centralizzato per la mia ricerca indipendente sulle vulnerabilità, audit hardware e Coordinated Vulnerability Disclosures CVD. Tutti gli script proof-of-concept, le estrazioni di firmware e gli smontaggi...

openentropy

openentropy Misura e operazionalizza l'entropia hardware per ricerca e sicurezza. Raccogli entropia da fonti hardware del dispositivo, analizza la qualità delle fonti con test statistici e fornisci output grezzo o condizionato tramite interfacce CLI, Rust, Python e HTTP...