Fix-WinVerifyTrustSignatureValidationVuln

Fix-WinVerifyTrustSignatureValidationVuln Fix WinVerifyTrust Signature Validation Vulnerability, CVE-2013-39001, QID-3783322 This Fix is intended for 64-bit Windows Computers This PowerShell code is one way to fix the vulnerability - aside from creating a .reg file and using reg import to import...

kdmp-parser

kdmp-parser This C++ library parses Windows kernel full dumps .dump /f in WinDbg, BMP dumps .dump /ka in WinDbg as well as more recent dump types that were introduced in 2022. The library supports loading 64-bit dumps and provides read access to things like: The context record, The exception...

hollows_hunter

hollowshunter Hollows Hunter is a command-line application based on PE-sieve passive memory scanner. Recognizes and dumps a variety of potentially malicious implants replaced/implanted PEs, shellcodes, hooks, in-memory patches. While in case of PE-sieve you can select the process only by its PID,...

azurelinux

Azure Linux 4 An open-source Linux distribution built and optimized forAzure, with sources derived from Fedora Linux. Azure Linux provides a secured, reliable operating system for virtual machines, containers, and bare-metal platforms. Azure Linux is built on a robust open-source foundation from...

Z0FCourse_ReverseEngineering

Reverse Engineering Course This course aims to take an individual from beginner to intermediate advanced is really only achieved through experience in reverse engineering. While this course focuses on Windows 64-bit, the technical knowledge applies to 32-bit Windows and the theory to any OS. The...

heappy

🙂 Heappy: a happy heap editor Heappy is an editor based on gdb/gef that helps you to handle the heap during your exploitation development. The project should be considered a didactic tool useful to understand the evolution of the heap during the process life cycle. It has been created to simplify...

cuckoo-modified

This is a heavily modified version of Cuckoo Sandbox provided under the GPL. It offers a number of advantages over the upstream Cuckoo: Fully-normalized file and registry names 64-bit analysis Handling of WoW64 filesystem redirection Many additional API hooks Service monitoring Correlates API cal...

bugstropics

Hunting Bugs in the Tropics This is a repo with the slides used in my presentation "Hunting Bugs in the Tropics" at DEFCON30. It includes the Python script used to calculate the support password based on the private key obtained by breaking Aruba support's EC public key, due to its weak size 64...

CVE-2021-31955-POC

CVE-2021-31955 Windows Kernel Information Disclosure POC The exploit works on all 64-bit vulnerable targets. unpatched system patched system...

CVE-2019-9791

Exploit chain for CVE-2019-9791 & CVE-2019-11708 against Firefox 65.0 Works against Firefox 65.0 on windows 64bit. CVE-2019-11708 part is taken from exploit by 0vercl0k: https://github.com/0vercl0k/CVE-2019-11708 The exploit uses CVE-2019-9791 to obtain read/write primitive in content process the...

Huan

Huan Huan is an encrypted PE Loader Generator that I developed for learning PE file structure and PE loading processes. It encrypts the PE file to be run with different keys each time and embeds it in a new section of the loader binary. Currently, it works on 64 bit PE files. How It Works? First,...

yalu102

yalu102 A "work in progress" iOS jailbreak for 64-bit devices created by qwertyoruiopz and marcograssi. Please use the "Issues" tab for code related issues only. If you need support please search on /r/jailbreak before posting a question there. Supported Devices and iOS versions Device| Version...

cs_yara

csyara Check Cobalt Strike Yara Rules 参考链接 https://github.com/CCob/BeaconEye BeaconEye Bug Fix: https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-gong-ji-fang-yu/untitled-1 rule from https://raw.githubusercontent.com/CCob/BeaconEye/master/BeaconEye.cs beaconEye.yar rule CobaltStrike strings:...

CVE-2016-7255

CVE-2016-7255 Used to exploit cve-2016-7255 in 64 bit versions of Windows, tested on Workstation 7 SP1, 8.1, 10 prior to build 1607, and Server 2012 R2. To use cve-2016-7255 cve-2016-7255.exe 7 - Windows 7 SP1 cve-2016-7255.exe 81 - Windows 8.1 cve-2016-7255.exe 10 - Windows 10 prior to build 160...

quipu

Quipu A desktop workbench for writing, validating, compiling, and testing YARA rules. Quipu pronounced “KEE-poo” brings a project explorer, a YARA-aware editor, the YARA-X compiler, and focused scan results into one local application. It embeds both YARA-X and its language server, so you do not...

CVE-2020-0796-LPE-POC

CVE-2020-0796-LPE-POC Privilege Escalation POC 64-bit environment...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.18.55 and 7.2.9. This vulnerability stems from a default insufficient size of the kernel stack in 64-bit kernels, which may lead to a kernel stack overflow and trigger a kernel crash...

Linux Distros Unpatched Vulnerability : CVE-2026-102699

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. 1 XSA-437 CVE-2023-34321 addresse...

AZL-110307 CVE-2026-87863 affecting package tensorflow 2.16.1-11

An authenticated HTTPS origin can supply an HSTS max-age value that the parser accepts, but time serialization later fails to process. On 64-bit systems, extreme max-age values compute an absolute expiry within standard time integer limits that exceeds calendar time structure bounds. During cache...

EUVD-2026-105311

An authenticated HTTPS origin can supply an HSTS max-age value that the parser accepts, but time serialization later fails to process. On 64-bit systems, extreme max-age values compute an absolute expiry within standard time integer limits that exceeds calendar time structure bounds. During cache...