Z0FCourse_ReverseEngineering

Curso de Ingeniería Inversa Este curso tiene como objetivo llevar a una persona desde principiante hasta nivel intermedio el nivel avanzado realmente solo se logra con la experiencia en ingeniería inversa. Si bien este curso se centra en Windows de 64 bits, el conocimiento técnico se aplica a...

kdmp-parser

kdmp-parser This C++ library parses Windows kernel full dumps .dump /f in WinDbg, BMP dumps .dump /ka in WinDbg as well as more recent dump types that were introduced in 2022. The library supports loading 64-bit dumps and provides read access to things like: The context record, The exception...

cuckoo-modified

Esta es una versión muy modificada de Cuckoo Sandbox proporcionada bajo GPL. Ofrece una serie de ventajas sobre el Cuckoo original: Nombres de archivos y registro completamente normalizados Análisis de 64 bits Manejo de la redirección del sistema de archivos WoW64 Muchos hooks adicionales de API...

CVE-2019-9791

Exploit chain for CVE-2019-9791 & CVE-2019-11708 against Firefox 65.0 Works against Firefox 65.0 on windows 64bit. CVE-2019-11708 part is taken from exploit by 0vercl0k: https://github.com/0vercl0k/CVE-2019-11708 The exploit uses CVE-2019-9791 to obtain read/write primitive in content process the...

pe_to_shellcode

petoshellcode Convierte un PE para que pueda ser inyectado como un shellcode normal. Al mismo tiempo, el archivo de salida sigue siendo un PE válido. Soporta tanto PEs de 32 como de 64 bits Autores:@hasherezade y @hh86 Objetivo El objetivo de este proyecto es proporcionar la posibilidad de genera...

hollows_hunter

hollowshunter Hollows Hunter is a command-line application based on PE-sieve passive memory scanner. Recognizes and dumps a variety of potentially malicious implants replaced/implanted PEs, shellcodes, hooks, in-memory patches. While in case of PE-sieve you can select the process only by its PID,...

Huan

Huan Huan es un generador de cargadores PE cifrados que desarrollé para aprender la estructura de archivos PE y los procesos de carga de PE. Cifra el archivo PE que se ejecutará con diferentes claves cada vez y lo incrusta en una nueva sección del binario del cargador. Actualmente, funciona con...

avml

AVML Acquire Volatile Memory for Linux Summary A portable volatile memory acquisition tool for Linux. AVML is an X8664 userland volatile memory acquisition tool written in Rust, intended to be deployed as a static binary. AVML can be used to acquire memory without knowing the target OS distributi...

Fix-WinVerifyTrustSignatureValidationVuln

Fix-WinVerifyTrustSignatureValidationVuln Fix WinVerifyTrust Signature Validation Vulnerability, CVE-2013-39001, QID-3783322 This Fix is intended for 64-bit Windows Computers This PowerShell code is one way to fix the vulnerability - aside from creating a .reg file and using reg import to import...

CVE-2016-7255

CVE-2016-7255 Se utiliza para explotar cve-2016-7255 en versiones de 64 bits de Windows, probado en Workstation 7 SP1, 8.1, 10 anterior a la compilación 1607 y Server 2012 R2. Uso cve-2016-7255 cve-2016-7255.exe 7 - Windows 7 SP1 cve-2016-7255.exe 81 - Windows 8.1 cve-2016-7255.exe 10 - Windows 1...

CVE-2021-31955-POC

CVE-2021-31955 POC de Divulgación de Información del Kernel de Windows El exploit funciona en todos los objetivos vulnerables de 64 bits. sistema sin parche sistema parcheado...

cs_yara

csyara Check Cobalt Strike Yara Rules 参考链接 https://github.com/CCob/BeaconEye BeaconEye Bug Fix: https://wbglil.gitbook.io/cobalt-strike/cobalt-strike-gong-ji-fang-yu/untitled-1 rule from https://raw.githubusercontent.com/CCob/BeaconEye/master/BeaconEye.cs beaconEye.yar root@kitploit: rule...

iovyroot

iovyroot Un outil root basé sur la vulnérabilité CVE-2015-1805 Il supporte les architectures 32 et 64 bits mais nécessite des adresses noyau absolues voir offsets.c La preuve de concept a été réalisée par idler1984 https://github.com/idl3r/testcode...

heappy

🙂 Heappy: a happy heap editor Heappy is an editor based on gdb/gef that helps you to handle the heap during your exploitation development. The project should be considered a didactic tool useful to understand the evolution of the heap during the process life cycle. It has been created to simplify...

yalu102

yalu102 Un jailbreak iOS en cours de développement pour les appareils 64 bits créé par qwertyoruiopz et marcograssi. Veuillez utiliser l'onglet « Issues » uniquement pour les problèmes relatifs au code. Si vous avez besoin d'aide, veuillez rechercher sur /r/jailbreak avant d'y poser une question...

exe_to_dll

EXEtoDLL Convertit un EXE afin qu'il puisse être chargé comme une DLL. Prend en charge les DLL 32 et 64 bits Inspiré par l'idée de@guywhataguy. En savoir plus ici. Téléchargement Les versions stables sont disponibles dans releases. Les versions de test peuvent être téléchargées depuis le serveur ...

CVE-2020-0796-LPE-POC

CVE-2020-0796-LPE-POC Privilege Escalation POC 64-bit environment...

CVE-2026-90043 zram: fix slot lock bit position on big-endian 64-bit

In the Linux kernel, the following vulnerability has been resolved: zram: fix slot lock bit position on big-endian 64-bit The slot lock is a bit operation on the whole lock word, which flags and actime alias as two u32s. On little-endian the lock bit lands in the position ZRAMENTRYLOCK reserves i...

EUVD-2026-80651

In the Linux kernel, the following vulnerability has been resolved: zram: fix slot lock bit position on big-endian 64-bit The slot lock is a bit operation on the whole lock word, which flags and actime alias as two u32s. On little-endian the lock bit lands in the position ZRAMENTRYLOCK reserves i...

Linux Distros Unpatched Vulnerability : CVE-2026-90043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zram: fix slot lock bit position on big-endian 64-bit The slot lock is a bit operation on the whole lock word, which flags and actime alias as two u32s. On...