Lucene search
+L

382 matches found

Kitploit
Kitploit
•added 2026/09/29 2:37 a.m.•12 views

Sharperner

Sharperner Sharperner es una herramienta escrita en CSharp que genera un dropper .NET con shellcode ofuscado mediante AES y XOR. El ejecutable generado puede posiblemente evadir la verificación de firmas, pero no puedo asegurar que pueda evadir el escaneo heurístico. Características Binario PE...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 9:50 p.m.•19 views

DarkWidow

DarkWidow Una herramienta Dropper personalizable dirigida a Windows. Menciones honorables: 1. BlackHat Asia, 2024 - Call For Tools 2. BlackHat USA, 2024 - Call For Tools 3. BlackHat SecTor, 2024 - Call For Tools 4. BlackHat Europe, 2024 - Call For Tools 5. Wild West Hacking Fest 2024 - Arsenal...

6AI score
SaveExploits0References10
Kitploit
Kitploit
•added 2026/09/28 9:13 p.m.•16 views

VectorKernel

VectorKernel PoCs para investigación o educación en técnicas de rootkits en modo kernel. Actualmente enfocado en el sistema operativo Windows. Todos los módulos son compatibles solo con sistemas operativos de 64 bits de la familia x64. Entorno Todos los módulos se prueban en Windows 11 x64. Para...

6.1AI score
SaveExploits0References11
Kitploit
Kitploit
•added 2026/09/28 8:01 p.m.•15 views

DumpBrowserSecrets

DumpBrowserSecrets Extrae datos almacenados en navegadores como tokens de actualización, cookies, credenciales guardadas, tarjetas de crédito, entradas de autocompletar, historial de navegación y marcadores de navegadores modernos basados en Chromium y Gecko Chrome, Microsoft Edge, Firefox, Opera...

5.9AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/28 5:00 p.m.•15 views

mortar

Mortar Loader Técnica de evasión de red teaming para derrotar y desviar la detección y prevención de productos de seguridad. Mortar Loader realiza el cifrado y descifrado de PE/Shellcode dentro de los flujos de memoria y lo ejecuta aprovechando varias técnicas de inyección. Mortar es capaz de...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/28 5:34 a.m.•13 views

InjectProc

InjectProc La inyección de procesos es un método muy popular para ocultar el comportamiento malicioso del código y es muy utilizado por los creadores de malware. Existen varias técnicas que se usan comúnmente: inyección de DLL, reemplazo de procesos también conocido como process hollowing,...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/27 11:01 p.m.•13 views

edrEvasionWorkshop

edrEvasionWorkshop Workshop materials for “Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel” , presented at DEF CON 34 and BSidesLV 2026. This workshop explores custom malware development, EDR Architecture & Evasion, C2 customization, and kernel-level techniques using...

5.9AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 10:10 p.m.•10 views

Driver-HideKernelThread-IoCancelIrp

Driver-HideKernelThread-IoCancelIrp not my code. only for saving https://bbs.pediy.com/thread-272795.htm Principle Set the thread entry address to IoCancelIrp and the context to the irp you created. Then the thread will call IoCancelIrp. when called, will perform the operation of canlcelling the...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 9:13 a.m.•11 views

Agent-Tesla-APC-Injection-Token-Manipulation-Registry-Persistence-Analysis

1. Native API & APC Injection The x64dbg memory dump reveals that Agent Tesla uses Native API NT API calls for low-level operations, including APC Asynchronous Procedure Call injection. Key Functions Observed: NtQueueApcThread – Injects code into a target thread via APC. NtReadVirtualMemory –...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 12:22 a.m.•13 views

DumpChromeSecrets

!IMPORTANT This project is no longer maintained. Please useDumpBrowserSecrets instead, which supports Chrome, Edge, Brave, Firefox, Opera, Opera GX, and Vivaldi. DumpChromeSecrets Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsi...

6AI score
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/24 4:32 a.m.•12 views

VortexCry-Ransomware-Release

VortexCry-Ransomware VortexCry is an advanced ransomware that utilizes multi-stage process injection such as Process Hollowing and APC Injection and kernel driver loading via the CVE-2019-16098 vulnerability. It is capable of encrypting files, destroying system recovery functionalities, and...

7.8CVSS7.8AI score0.19839EPSS
SaveExploits5
SUSE CVE
SUSE CVE
•added 2026/08/18 5:02 p.m.•15 views

SUSE CVE-2026-33633

Kitty is a cross-platform GPU based terminal. Versions 0.46.2 and below contain a heap buffer overflow in loadimagedata that allows any process which can write to the terminal's stdin to crash kitty immediately. The vulnerability is triggered by a single APC graphics protocol command with a PNG...

8.8CVSS5.8AI score0.00458EPSS
SaveExploits1References3
NVD
NVD
•added 2026/07/19 4:17 p.m.•16 views

CVE-2026-63973

In the Linux kernel, the following vulnerability has been resolved: net: mana: Add NULL guards in teardown path to prevent panic on attach failure When queue allocation fails partway through, the error cleanup frees and NULLs apc-txqp and apc-rxqs. Multiple teardown paths such as manaremove,...

0.00215EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/07/15 9:21 p.m.•23 views

EUVD-2026-44821

Sandboxie-Plus is an open source sandbox-based isolation software for Windows. Prior to 1.17.6, GuiServer::WndHookRegisterSlave in Sandboxie/core/svc/GuiServer.cpp stores attacker-supplied hthread and hproc fields from a GUIWNDHOOKREGISTER request without validating that the thread belongs to the...

7.7CVSS6.4AI score0.00152EPSS
SaveExploits0References2
OSV
OSV
•added 2026/07/15 9:21 p.m.•15 views

CVE-2026-45313 Sandboxie-Plus: Sandboxie APC Injection Sandbox Escape

Sandboxie-Plus is an open source sandbox-based isolation software for Windows. Prior to 1.17.6, GuiServer::WndHookRegisterSlave in Sandboxie/core/svc/GuiServer.cpp stores attacker-supplied hthread and hproc fields from a GUIWNDHOOKREGISTER request without validating that the thread belongs to the...

7.7CVSS6.4AI score
SaveExploits0References4
CVE
CVE
•added 2026/07/15 9:21 p.m.•66 views

CVE-2026-45313

Summary: Sandboxie-Plus on Windows contains a local privilege escalation in GuiServer.cpp prior to v1.17.6. The GuiServer::WndHookRegisterSlave handler stores attacker-supplied hthread and hproc from GUI_WND_HOOK_REGISTER without validating thread belonging to the sandbox or the function pointer’...

7.7CVSS6.4AI score0.00152EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/05/19 7:10 p.m.•16 views

CVE-2026-33633

A flaw was found in Kitty, a cross-platform GPU based terminal. A remote attacker, by sending a specially crafted APC graphics protocol command with a large PNG payload to the terminal's standard input stdin, could trigger a heap buffer overflow in the loadimagedata function. This vulnerability...

8.8CVSS6.3AI score0.00458EPSS
SaveExploits1References2
OSV
OSV
•added 2026/05/19 6:16 p.m.•14 views

UBUNTU-CVE-2026-33633

Kitty is a cross-platform GPU based terminal. Versions 0.46.2 and below contain a heap buffer overflow in loadimagedata that allows any process which can write to the terminal's stdin to crash kitty immediately. The vulnerability is triggered by a single APC graphics protocol command with a PNG...

8.8CVSS5.9AI score0.00458EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2026/05/19 6:16 p.m.•17 views

CVE-2026-33633

Kitty is a cross-platform GPU based terminal. Versions 0.46.2 and below contain a heap buffer overflow in loadimagedata that allows any process which can write to the terminal's stdin to crash kitty immediately. The vulnerability is triggered by a single APC graphics protocol command with a PNG...

8.8CVSS6AI score0.00458EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/05/19 5:36 p.m.•12 views

CVE-2026-33633

Kitty is a cross-platform GPU based terminal. Versions 0.46.2 and below contain a heap buffer overflow in loadimagedata that allows any process which can write to the terminal's stdin to crash kitty immediately. The vulnerability is triggered by a single APC graphics protocol command with a PNG...

7.5CVSS5.9AI score0.00458EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder