efiguard-detected

efiguard-detect EfiGuard가 patchguard를 죽였는지 확인하는 가장 멍청한 방법입니다. 작동 방식 efiguard는 런타임에 SetVariable 백도어를 남깁니다. 사용자 모드에서 ntoskrnl 베이스의 2바이트를 읽도록 요청하여 확인합니다. MZ가 반환되면 백도어가 활성화된 것이며, efiguard가 제 역할을 한 것이고 pg는 죽은 것입니다. 제한사항 사용자가 기본 DSE 우회 방법DSEDISABLESETVARIABLEHOOK을 선택한 경우에만 작동합니다. 이는 기본값입니다. 대신...

Black-Angel-Rootkit

Black Angel Rootkit Black Angel은 Windows 11/10 x64 커널 모드 루트킷입니다. DSE가 활성화된 상태에서도 루트킷을 로드할 수 있으며 전체 기능을 유지합니다. 레드 팀을 위해 설계되었습니다. 루트킷 기능 루트킷은 DSE를 우회하기 위해 kdmapper와 함께 로드할 수 있으며, Black Angel 로더는 아직 제대로 작동하지 않을 수 있습니다. 콜백 지원과 같은 전체 드라이버 기능을 유지하기 위해 driver-hijack 프로젝트가 사용됩니다. DSE 우회 테스트 서명을 켤 필요 없음 K...

DSE-Patcher

DSE-Patcher https://www.codeproject.com/Articles/5348168/Disable-Driver-Signature-Enforcement-with-DSE-Patc...

SandboxBootkit

SandboxBootkit ntoskrnl.exe にパッチを適用し、DSE/PatchGuard を無効化するために Windows Sandbox 上でテストされたブートキットです。実装の詳細についてはブログ記事があります。 はじめに 最新リリースをダウンロードしてアーカイブを展開します Installer.exe を実行します Windows Sandbox を起動します 注意 : リリースの一部が Windows Defender によってウイルスとして検出される可能性があります。これは誤検知であるため、除外設定を追加する必要があるかもしれません。 トラブルシューティング...

CVE-2023-21768-DSE-Bypass

포크됨 이 프로젝트는 다음에서 포크되었습니다: WindowsLPEAFDCVE-2023-21768 . 업데이트 이 프로젝트는 chompie1337 익스플로잇에서 업데이트되었으며, DSE를 비활성화하고, 서명되지 않은 드라이버를 로드한 후 DSE를 활성화합니다...

llvm:llvm-opt-fuzzer--x86_64-dse: New-delete-type-mismatch in std::__1::vector<std::__1::unique_ptr<llvm::detail::PassConcept<llvm::Function,

Detailed Report: https://oss-fuzz.com/testcase?key=5365654174367744 Project: llvm Fuzzing Engine: honggfuzz Fuzz Target: llvm-opt-fuzzer--x8664-dse Job Type: honggfuzzasanllvm Platform Id: linux Crash Type: New-delete-type-mismatch Crash Address: 0x7c7ff70f0c40 Crash State:...

CVE-2026-11884

A heap buffer overflow flaw was found in 389 Directory Server. When serializing objectclass definitions, the ocsuperior SUP field length is omitted from buffer size calculations in readschemadse and schemaoctostring, but the field is still written via strcat. An attacker with Directory Manager...

CVE-2026-11884 389-ds-base: 389-ds-base: heap buffer overflow in schema objectclass serialization due to missing oc_superior in size calculation

A heap buffer overflow flaw was found in 389 Directory Server. When serializing objectclass definitions, the ocsuperior SUP field length is omitted from buffer size calculations in readschemadse and schemaoctostring, but the field is still written via strcat. An attacker with Directory Manager...

AcidBox Malware Uncovered Using Repurposed VirtualBox Exploit

Advanced malware, dubbed AcidBox, has been identified by researchers who say a mysterious cybergang used it twice against Russian organizations as far back as 2017. In a report released Wednesday, Palo Alto Networks’ Unit 42 sheds new light onto attacks against the popular open-source...

EfiGuard - Disable PatchGuard And DSE At Boot Time

EfiGuard is a portable x64 UEFI bootkit that patches the Windows boot manager, boot loader and kernel at boot time in order to disable PatchGuard and Driver Signature Enforcement DSE. Features Currently supports all EFI-compatible versions of Windows x64 ever released, from Vista SP1 to Server...

Secret Net 7 and Secret Net Studio 8 - Local Privilege Escalation

Secret Net 7 and Secret Net Studio 8 - Local Privilege Escalation Source: https://github.com/Cr4sh/secretnetexpl Secret Net 7 and Secret Net Studio 8 local privileges escalation exploit. 0day vulnerabilities in sncc0.sys kernel driver of Secrity Code products allows attacker to perform local...

Secret Net 7 and Secret Net Studio 8 - Privilege Escalation

Exploit for windows platform in category local exploits Source: https://github.com/Cr4sh/secretnetexpl Secret Net 7 and Secret Net Studio 8 local privileges escalation exploit. 0day vulnerabilities in sncc0.sys kernel driver of Secrity Code products allows attacker to perform local privileges...

Secret Net 7 and Secret Net Studio 8 - Local Privilege Escalation

Source: https://github.com/Cr4sh/secretnetexpl Secret Net 7 and Secret Net Studio 8 local privileges escalation exploit. 0day vulnerabilities in sncc0.sys kernel driver of Secrity Code products allows attacker to perform local privileges escalation from Guest to Local System. Also, attacker that...

ldapsearch notes

I seem to find open LDAP servers on the Internet more often than I should. Here are some notes on using ldapsearch Installing ldapsearch on Ubuntu 1 | apt-get install ldap-utils ---|--- Root-DSE object nmap includes a script to gather info from a LDAP root-dse object . We can also use ldapsearch ...

DEBIAN-CVE-2013-1897

The dosearch function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11.20 and 1.3.x before 1.3.0.5 does not properly restrict access to entries when the nsslapd-allow-anonymous-access configuration is set to rootdse and the BASE search scope is used, which allows remote...