Z0FCourse_ReverseEngineering

Curso de Ingeniería Inversa Este curso tiene como objetivo llevar a una persona desde principiante hasta nivel intermedio el nivel avanzado realmente solo se logra con la experiencia en ingeniería inversa. Si bien este curso se centra en Windows de 64 bits, el conocimiento técnico se aplica a...

Huan

Huan Huan es un generador de cargadores PE cifrados que desarrollé para aprender la estructura de archivos PE y los procesos de carga de PE. Cifra el archivo PE que se ejecutará con diferentes claves cada vez y lo incrusta en una nueva sección del binario del cargador. Actualmente, funciona con...

hollows_hunter

hollowshunter Hollows Hunter is a command-line application based on PE-sieve passive memory scanner. Recognizes and dumps a variety of potentially malicious implants replaced/implanted PEs, shellcodes, hooks, in-memory patches. While in case of PE-sieve you can select the process only by its PID,...

cuckoo-modified

Esta es una versión muy modificada de Cuckoo Sandbox proporcionada bajo GPL. Ofrece una serie de ventajas sobre el Cuckoo original: Nombres de archivos y registro completamente normalizados Análisis de 64 bits Manejo de la redirección del sistema de archivos WoW64 Muchos hooks adicionales de API...

heappy

🙂 Heappy: a happy heap editor Heappy is an editor based on gdb/gef that helps you to handle the heap during your exploitation development. The project should be considered a didactic tool useful to understand the evolution of the heap during the process life cycle. It has been created to simplify...

avml

AVML Acquire Volatile Memory for Linux Summary A portable volatile memory acquisition tool for Linux. AVML is an X8664 userland volatile memory acquisition tool written in Rust, intended to be deployed as a static binary. AVML can be used to acquire memory without knowing the target OS distributi...

exe_to_dll

EXEtoDLL Convierte un EXE para que pueda cargarse como una DLL. Compatible con DLLs de 32 y 64 bits Inspirado por la idea de@guywhataguy. Lea más aquí. Descarga Las compilaciones estables están disponibles en releases. Las compilaciones de prueba se pueden descargar desde el servidor de...

kdmp-parser

kdmp-parser This C++ library parses Windows kernel full dumps .dump /f in WinDbg, BMP dumps .dump /ka in WinDbg as well as more recent dump types that were introduced in 2022. The library supports loading 64-bit dumps and provides read access to things like: The context record, The exception...

pe_to_shellcode

petoshellcode Convierte un PE para que pueda ser inyectado como un shellcode normal. Al mismo tiempo, el archivo de salida sigue siendo un PE válido. Soporta tanto PEs de 32 como de 64 bits Autores:@hasherezade y @hh86 Objetivo El objetivo de este proyecto es proporcionar la posibilidad de genera...

Fix-WinVerifyTrustSignatureValidationVuln

Fix-WinVerifyTrustSignatureValidationVuln Fix WinVerifyTrust Signature Validation Vulnerability, CVE-2013-39001, QID-3783322 This Fix is intended for 64-bit Windows Computers This PowerShell code is one way to fix the vulnerability - aside from creating a .reg file and using reg import to import...

cs_yara

csyara Check Cobalt Strike Yara Rules 参考链接 https://github.com/CCob/BeaconEye BeaconEye Bug Fix: https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-gong-ji-fang-yu/untitled-1 rule from https://raw.githubusercontent.com/CCob/BeaconEye/master/BeaconEye.cs beaconEye.yar root@kitploit: rule...

iovyroot

iovyroot CVE-2015-1805 취약점을 기반으로 한 루트 도구 CVE-2015-1805 vulnerability 32비트와 64비트를 지원하지만 절대 커널 주소가 필요합니다 offsets.c 참조 PoC는 idler1984가 작성했습니다 https://github.com/idl3r/testcode...

CVE-2016-7255

CVE-2016-7255 Used to exploit cve-2016-7255 in 64 bit versions of Windows, tested on Workstation 7 SP1, 8.1, 10 prior to build 1607, and Server 2012 R2. To use cve-2016-7255 cve-2016-7255.exe 7 - Windows 7 SP1 cve-2016-7255.exe 81 - Windows 8.1 cve-2016-7255.exe 10 - Windows 10 prior to build 160...

CVE-2021-31955-POC

CVE-2021-31955 Windows Kernel Information Disclosure POC The exploit works on all 64-bit vulnerable targets. unpatched system patched system...

yalu102

yalu102 64ビットデバイス向けの「開発中」のiOS脱獄ツール。qwertyoruiopz と marcograssi によって作成されました。 「Issues」タブはコード関連 の問題のみにご使用ください。サポートが必要な場合は、質問を投稿する前に /r/jailbreak で検索してください。 対応デバイスとiOSバージョン デバイス| バージョン ---|--- iPad Pro| iOS 10.0.0 - iOS 10.2 iPhone 6S| iOS 10.0.0 - iOS 10.2 iPhone SE| iOS 10.0.0 - iOS 10.2 iPhone 5S|...

CVE-2019-9791

Firefox 65.0을 대상으로 하는 CVE-2019-9791 및 CVE-2019-11708 익스플로잇 체인 Windows 64비트의 Firefox 65.0에서 작동합니다. CVE-2019-11708 부분은 0vercl0k의 익스플로잇에서 가져왔습니다: https://github.com/0vercl0k/CVE-2019-11708 이 익스플로잇은 CVE-2019-9791을 사용하여 콘텐츠 프로세스에서 읽기/쓰기 프리미티브를 얻은 다음, CVE-2019-11708을 사용하여 메인 프로세스가 임의의 URL을 로드하도록 합니다. 부...

CVE-2020-0796-LPE-POC

CVE-2020-0796-LPE-POC Privilege Escalation POC 64-bit environment...

bugstropics

Hunting Bugs in the Tropics This is a repo with the slides used in my presentation "Hunting Bugs in the Tropics" at DEFCON30. It includes the Python script used to calculate the support password based on the private key obtained by breaking Aruba support's EC public key, due to its weak size 64...

The vulnerability of the free_hotplug_page_range() function in the arch/arm64/mm/mmu.c module of the ARM 64-bit kernel support for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the freehotplugpagerange function in the arch/arm64/mm/mmu.c module of the ARM 64-bit kernel support for the Linux operating system is related to improper resource release. Exploiting this vulnerability could allow an attacker to cause a service failure...

OpenSovix

CVE-2025-46285 – Tiefgehende Sicherheitslückenanalyse und Proof-of-Concept Wichtiger Haftungsausschluss: Die folgenden Inhalte dienen ausschließlich der Sicherheitsbildung, defensiven Forschung und der Analyse von Sicherheitslücken. Testen oder nutzen Sie diese Sicherheitslücke nicht in nicht...