Lucene search
+L

611 matches found

Kitploit
Kitploit
added 2026/09/11 6:31 a.m.8 views

Kernel_VADInjector

驱动 DLL 注入器 驱动 DLL 注入器 描述 驱动 DLL 注入器是一个强大的工具,允许用户使用他们喜欢的映射器加载他们选择的驱动程序。通过利用未签名驱动程序加载器(如 KDmapper)的功能,该注入器是在 Windows 10 2004 x64 进程上构建和测试的。 驱动部分: 该驱动程序挂钩一个名为 xKdEnumerateDebuggingDevices 的补丁保护安全函数,用于与我们的用户模式进程通信。这种方法在流行的反作弊系统中很容易被检测到,因此我们更进一步,将用户模式线程困在内核中,以恢复原始函数地址的方式进行通信,从而绕过函数完整性检查。...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 6:31 a.m.5 views

RemoteDLLInjector

介绍 这是一个可用于 DLL 注入的工具: 从 RemoteDLLInjector 执行的那一刻起,它将提供为实现 DLL 注入所执行的完整步骤。 如果 DLL 成功注入,它将返回一个具有该进程权限的 meterpreter 会话。因此,权限高于标准进程的进程可能被滥用,以实现权限提升。...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 4:57 a.m.41 views

invoker

Invoker Penetration testing utility and antivirus assessment tool. Built with Visual Studio Community 2022 v17.5.4 64-bit and tested on Windows 10 Enterprise OS 64-bit. Made for educational purposes. I hope it will help! This repository started to have known signatures and I don't have time to...

6.2AI score
SaveExploits0References12
Kitploit
Kitploit
added 2026/09/11 3:05 a.m.13 views

maalik

Maalik Network Pivoting and Post Exploitation Framework. Features Console Features Desktop notification on new session. Kill Online session easily. Build Maalik Client, Fhdawn easily. Configurable values in settings.ini Root shell. Multithreaded, Get multiple sessions. Maalik is extremenly easy t...

6AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/11 2:43 a.m.15 views

ShimMe

ShimMe 来自 DEFCON 32 演讲 "SHIM me what you got - Manipulating Shim and Office for Code Injection" 的工具 Office 注入器 - 调用 OfficeClickToRun 服务中的 RPC 方法,将 DLL 注入到由任务计划程序服务启动、以 NT AUTHORITY\SYSTEM 身份运行的挂起进程中,从而实现从管理员到 SYSTEM 的权限提升。 Shim 注入器 - 将未公开记录的 shim 数据结构写入另一个进程的内存,使 apphelp.dll 对该进程应用 “Inject Dll”...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 1:48 a.m.12 views

Remote-DLL-Injection-with-Timer-based-Shellcode-Execution

基于定时器 Shellcode 执行的远程 DLL 注入 文档已更新,修正了之前错误的进程注入标题! ⚠ 仅供教育研究使用 本仓库包含的安全研究内容仅用于教育目的 和 授权使用 。 请负责任地使用,并遵守所有适用的法律法规。 概述 基于定时器 Shellcode 执行的远程 DLL 注入 是一种利用 Windows 线程池执行 shellcode 的技术。该技术采用经典的 DLL 注入与 CreateThreadpoolTimer 相结合的方式,借助合法的系统线程在内存中运行 shellcode,隐蔽性强,很可能绕过现代防御机制。 这种方法引入了一种基于定时器 Shellcode...

6.3AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 12:41 a.m.11 views

GoRedOps

GoRedOps Telegram: https://t.me/ebytelabs GoRedOps is a collection of Golang projects designed specifically for red teamers and offensive security operations. This repository provides various tools and techniques essential for penetration testing, exploitation, and security research. Table of...

6.3AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 12:22 a.m.5 views

GoDefender

🛡️ GoDefender 🛡️ A powerful Go-based security toolkit designed to detect and defend against debugging, virtualization, and DLL injection attacks. GoDefender provides comprehensive protection mechanisms to make reverse engineering and analysis significantly more difficult. ⚠️ WINDOWS ONLY - Designed...

5.9AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/11 12:21 a.m.12 views

DumpChromeSecrets

!IMPORTANT This project is no longer maintained. Please useDumpBrowserSecrets instead, which supports Chrome, Edge, Brave, Firefox, Opera, Opera GX, and Vivaldi. DumpChromeSecrets Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsi...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/10 8:59 p.m.8 views

ncloader

Ncloader Una utilidad simple de inyección de DLL El diseño actual implementa la conocida técnica de inyección de DLL: VirtualAllocEx asigna memoria para la cadena en el proceso remoto WriteProcessMemory escribe la "ruta/al/archivo/dll" en la memoria asignada de forma remota CreateRemoteThread con...

6AI score
SaveExploits0
NVD
NVD
added 2026/08/11 5:17 p.m.8 views

CVE-2025-48506

Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution...

4.6CVSS0.00148EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/11 5:02 p.m.9 views

CVE-2025-48506

Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution...

4.6CVSS5.7AI score0.00148EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/11 5:02 p.m.13 views

EUVD-2025-210687

Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution...

4.6CVSS5.7AI score0.00148EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/11 5:02 p.m.49 views

CVE-2025-48506

Technical details about CVE-2025-48506 are not publicly available in the provided documents. Monitor for updates from AMD/NVD for affected products, versions, impact, and remediation.

4.6CVSS5.7AI score0.00148EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/11 5:02 p.m.42 views

CVE-2025-48506

Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution...

4.6CVSS0.00148EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/11 12:00 a.m.11 views

PT-2026-70362

Name of the Vulnerable Software and Affected Versions Vitis Unified affected versions not specified Description Uncontrolled search paths in the installation path on local Windows machines allow for DLL injection. This occurs when an application searches for a Dynamic Link Library DLL—a shared...

4.6CVSS5.5AI score0.00148EPSS
SaveExploits0References3
Amd
Amd
added 2026/08/11 12:00 a.m.15 views

Vitis™ Vulnerabilities

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-43606| Observable Timing Discrepancy in the Vitis™ Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagneti...

8.5CVSS5.5AI score0.00148EPSS
SaveExploits0
Metasploit
Metasploit
added 2026/07/10 7:02 p.m.61 views

FTP Fetch, Reverse All-Port TCP Stager

Fetch and execute an x86 payload from an FTP server. Try to connect back to the attacker, on all possible ports 1-65535, slowly Module Options...

6.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/06/05 7:31 p.m.17 views

CVE-2025-62628

Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code execution...

7CVSS5.7AI score0.00109EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/20 7:38 a.m.20 views

MAL-2026-4581 Malicious code in idlidosa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c6cba2c58d95d705af7dc5bb1c630129127835fb1ef15d4ccf43ec2818bf632 The package is purpose-built tooling to defeat exam-proctoring / lockdown software, with multiple installer-machine integrity harms triggered when th...

5.4AI score
SaveExploits0References5
Rows per page
Query Builder