The vulnerability of the Serial Wire Debug interface (SWD) in the highly integrated wireless system on chip (SoC) Realtek RTL8762C allows a hacker to circumvent existing security restrictions and expose sensitive information.

The vulnerability of the Serial Wire Debug SWD interface in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to improper protection against voltage and clock failures. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions and...

CVE-2021-3129

CVE-2021-3129 Laravel debug rce Usage Execute docker-compse up -d to start the environment. Access port 8888 and click generate key on the homepage to reproduce. A few points about the docker environment: Copied .env.example to .env to enable debug environment Disabled phar.readonly in php.ini...

CVE-2021-3129

CVE-2021-3129 CVE-2021-3129-Laravel Debug mode remote code execution vulnerability Affected versions and conditions Laravel = 8.4.2 Ignition 2.5.2 Environment setup docker pull vulhub/laravel:8.4.2 exp usage Download and execute in the same directory as exploit.py: git clone...

UnconfuserEx

UnConfuserEx A tool for deobfuscating C binaries protected with ConfuserEx2. This was originally a private project that I decided to make public after it had no real use to me anymore. The removal of protections was focused on one specific binary I was reversing and they seemed to be using a...

gattacker

A Node.js package for BLE Bluetooth Low Energy Man-in-the-Middle & more. Prerequisites see: https://github.com/sandeepmistry/noble https://github.com/sandeepmistry/bleno Install npm install gattacker Usage Configure Running both components Set up variables in config.env: NOBLEHCIDEVICEID : noble...

x86-JTAG-Information

x86 JTAG Information Overview Debugger Hardware Intel Applied Microsystems CodeTAP ASSET InterTech American Arium ECM-6 ECM-S2 ECM-20 TRC-20 ECM-50 ECM-700 revA5 ECM-XDP ECM-XDP3 revB2 ECM-XDP3e ECM-CCC ASSET InterTech International Test Technologies µMaster MicroMaster ASSET InterTech PCT...

naga

naga malware detonation..actually running in debug/verbose mode .. video-1 https://github.com/user-attachments/assets/40a30755-164e-4b7d-a1d7-b0df4ea20d1b shot-1 shot-2 shot-3 shot-4...

showstopper

ShowStopper - Anti-Debug tricks exploration tool Contributed by Check Point Software Technologies LTD. Programmed by Yaraslau Harakhavik Overview The ShowStopper project is a tool to help malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that...

pylane

pylane 简体中文 Pylane is a python vm injector with debug tools, based on gdb and ptrace. Pylane uses gdb to trace python process, inject and run some code in its python vm. Usage use inject command to inject a python script in an process: pylane inject use shell command to inject an interactive shel...

patator

Patator Patator was written out of frustration from using Hydra, Medusa, Ncrack, Metasploit modules and Nmap NSE scripts for password guessing attacks. I opted for a different approach in order to not create yet another brute-forcing tool and avoid repeating the same shortcomings. Patator is a...

FuckJsonp-RCE-CVE-2022-26809-SQL-XSS-FuckJsonp

The tracing method of this honeypot targets red team members using mobile hotspots. The honeypot directly obtains the attacker's phone number for tracing. It catches them every time. Red team members, be careful. First, when you open the website, it monitors whether the F12 console is opened. If...

acltoolkit

acltoolkit acltoolkit is an ACL abuse swiss-army knife. It implements multiple ACL abuses. Table of Contents acltoolkit Table of Contents Installation Usage Commands get-objectacl set-objectowner give-genericall give-dcsync add-groupmember set-logonscript Installation pip install acltoolkit-ad or...

CVE-2023-27703

CVE-2023-27703 CVE-2023-27703 An Android version of pikpak version V1.29.2 element debugging interface leakage vulnerability fix at pikpak 1.30.1 Suggested description The Android version of pikpak v1.29.2 was discovered to contain an information leak via the debug interface. Additional Informati...

tangalanga

Tangalanga Zoom Conference scanner. This scanner will check for a random meeting id and return information if available. Install First try to see if there's any prebaked version for the date: https://github.com/elcuervo/tangalanga/releases. This versions already have a token ready to use. Either...

CVE-2022-3168-adb-unexpected-reverse-forwards

The reverse tunnel feature in Android Debug Bridge adb was vulnerable as it allowed malicious adb daemons to open connections to arbitrary host/ports and unix domain sockets on the host. Attacker window where the rogue daemon is running: $ ./adbroguedaemon.py Victim window a GCE VM in this exampl...

CVE-2024-44000

EN GenCookieSessionHijack is a PoC tool designed to exploit insecurely exposed debug logs from WordPress sites and extract session cookies. This allows the attacker to hijack active admin sessions and gain unauthorized access to the WordPress admin dashboard. Features Extract cookies from WordPre...

unicorn-bios

unicorn-bios About Basic BIOS emulator/debugger for Unicorn Engine. Written to debug the XEOS Operating System boot sequence. Usage: Usage: unicorn-bios OPTIONS BOOTIMG Options: --help / -h: Displays help. --memory / -m: The amount of memory to allocate for the virtual machine in megabytes...

graphql-cop

GraphQL Cop - Security Audit Utility for GraphQL About GraphQL Cop is a small Python utility to run common security tests against GraphQL APIs. GraphQL Cop is perfect for running CI/CD checks in GraphQL. It is lightweight, and covers interesting security issues in GraphQL. GraphQL Cop allows you ...

c0ntextomy

c0ntextomy an informal fallacy and a type of false attribution in which a passage is removed from its surrounding matter in such a way as to distort its intended meaning Wikipedia - Contextomy A Proof of Concept demonstrating the vulnerability with a debug session hijack, remote code execution, a...

DiaSymbolView

DiaSymbolView DiaSymbolView is a tool for visually inspecting debug information recorded in .pdb files. It relies on MSDIA API and presents a hierarchy of debug symbols and their 200+ properties. You can download the binaries from the releases page. To build the tool yourself, follow instructions...