cs-token-vault

Cobalt Strike 用 Token Vault BOF この Beacon Object File BOF は、窃取・複製した Windows アクセストークンをインメモリ上に保存する機能を提供します。これにより、以下のことが可能になります。 窃取済みトークンを再複製せずにホットスワップ/再利用する。 ユーザーがログアウトした場合に備えて、トークンを後で使えるよう保存しておく。 インストール 1. 最新リリースの build をダウンロードするか、make all でビルドします。 2. token-vault.cna アグレッサスクリプトを Cobalt Strike...

Modules

Moduli Moduli utilizzati dal framework Havoc. Powerpick Implementazione di Powerpick per il framework Havoc. InvokeAssembly Implementazione di InvokeAssembly per il framework Havoc. Template Questo è il modello di base per i moduli. Puoi usarlo per scrivere i tuoi moduli per il framework Havoc...

cobaltstrike-headless

Headless Strike Script Aggressor che trasforma il client aggressor headless in un client Cobalt Strike per lo più funzionante. Utilizzo connettiti al tuo teamserver tramite l'utility headless aggressor integrata ./agscript root@kitploit: ./agscript host port user password carica il file .cna...

BOF_Collection

BOFCollection Vari BOF per Cobalt Strike Requisiti beacon.h Per istruzioni di compilazione e panoramica sui BOF help-bof ActiveDirectory GetDomainInfo.c Restituisce informazioni sul dominio corrente e sul controller di dominio. inline-execute GetDomainInfo.o Raccolta GetClipboard.c Stampa qualsia...

Defender_Exclusions-BOF

Defender-Ausschlüsse BOF Was Ein BOF zur Ermittlung der Windows Defender-Ausschlüsse: Erweiterungen Prozesse Ordner Warum Beispiele für die Verwendung des C++-Compilers zur Erstellung von BOFs, ohne dass zwischengeschaltete vtable-Dereferenzierungen erforderlich sind. Erstellen root@kitploit: cd...

ContextMenuHijack

ContextMenuHijack L'idea originale che mi ha ispirato viene da @NinjaParanoid: ContextMenuHijack è una semplice tecnica di persistenza che utilizza il COM hijacking basato sul comportamento umano: quando fai clic con il tasto destro su un file/cartella in Esplora file per aprire il menu...

MemFiles

MemFiles DICHIARAZIONE DI NON RESPONSABILITÀ: Questo progetto è complesso e se non si capisce come funziona e non lo si testa adeguatamente, si rischia di mandare in crash i Beacon e perdere l'accesso! Ti consiglio vivamente di leggere tutta la documentazione fino alla sezione "Dettagli tecnici,...

freeBokuLoader

freeBokuLoader Ein einfacher BOF, der versucht, den Speicherbereich freizugeben, in dem der User Defined Reflective Loader gespeichert ist. Wie der Name schon andeutet, wurde er gegen BokuLoader getestet, sollte aber mit den meisten, wenn nicht allen UDRLs funktionieren. Verwendung root@kitploit:...

COFFLoader

COFF Loader Questo è un loader COFF veloce e sporco noto anche come Beacon Object Files. Attualmente può eseguire BOF non modificati, quindi può essere usato per test senza che un agente CS lo esegua. L'unica eccezione è che le funzioni di compatibilità beacon relative all'iniezione sono...

pybof

PyBOF Execute Beacon Object files por meio do python carregamento e execução em memória de BOFs O PyBOF permite que o Python3 carregue Beacon Object Files via bytes e execute uma função BOF alvo em um interpretador Python Uso Básico Executar um BOF simples sem argumentos obrigatórios root@kitploi...

Malicious code in @medisend/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5857b17f9935d83581e1a24e6d990211fe86631143c7025c3123d1274e7d28 package.json declares a postinstall lifecycle script that runs curl at install time and transmits the installer's hostname via $hostname as a query...

Malicious code in hydration-ui-dim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64f9565680b71c54ed88e29ed3950f1561764f4b86a260a3ebb5eadb528edfa3 On import 'hydration-ui-dim', dist/index.mjs runs a top-level async IIFE that chmods dist/internal/calc-math.dat to 0755 and spawns it detached via...

CVE-2026-74661

A flaw was found in the mac802154 component of the Linux kernel. This use-after-free vulnerability allows a local attacker to potentially cause a system crash denial of service or execute arbitrary code. The issue arises when the beacon worker attempts to access memory that has already been freed...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: ath9khtc: Abort software beacon handling if disabled. A malicious USB device can send an WMISWBAEVENTID event from an ath9khtc-managed device before beaconing is enabled. This causes a device-by-zero error in the driver,...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: rt2x00 – The beacon queue is restarted when a hardware reset occurs. When a hardware reset is triggered, all registers are reset, causing all queues to be stopped in the hardware interface. However, mac80211 does not...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Do not finalize the CSA in IBSS mode if the state is disconnected. When we are not connected to a channel, sending the “switch” announcement doesn’t make any sense. The BSS list is empty in that case. This causes...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drivers: staging: rtl8192e: Fixed a deadlock in rtllibbeaconsstop. There is a deadlock in rtllibbeaconsstop, as shown below: Thread 1 | Thread 2 | rtllibsendbeacon rtllibbeaconsstop | modtimer spinlockirqsave //1 | Wait for a whi...

Astra Linux – Vulnerabilities in Linux, Linux-6.1, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: wfx: Fixed a possible NULL pointer dereferencing in wfxsetmfpap. Since 'ieee80211beaconget' may return NULL, wfxsetmfpap should check the return value before examining the skb data. Therefore, the latter function should...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: cfg80211: A use-after-free issue was addressed in the cmpbss function. This issue was introduced due to a quirky behavior of the bssfree function introduced in commit 776b3580178f „cfg80211: Properly track hidden SSID...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Staging: rtl8723bs: Fixed an out-of-bounds read during the parsing of the OnBeacon Extended Supported Rates ESR extension. The handling of the ESR extension during the OnBeacon phase involves accessing p + 1 + ielen and p + 2 +...