10701 matches found
RedTeam-Physical-Tools
Red Team – Physical Security – Covert Entry – EDC A curated list of commercially available tools commonly referenced in authorized physical security assessments, red teaming, and covert entry training. Legal & Ethics: Use only with written authorization and in accordance with local laws. Many too...
HvLoader
HvLoader Overview HvLoader.efi is an EFI application for loading an external hypervisor loader. HvLoader.efi loads a given hypervisor loader binary DLL, EFI, etc., and calls it's entry point passing HvLoader.efi ImageHandle. This way the hypervisor loader binary has access to HvLoader.efi's comma...
patchkit
patchkit Patches an ELF binary using one or more simple Python scripts. Usage: patch patchdir|file... patchdir Contains one or more Python patch files, which will be executed in alphabetical order against a binary. Patch Examples Nopping an address, injecting an assembly function, and hooking the...
DOCxNGINxFX
WORDLISTxGENERATORxFX Version 1.0 Version 2.0 WORDLISTxGENERATORxFX renamed to DOCxNGINxFX Version 3.0 DOCxNGINxFX I wrote this to give somethink back to the great and powerful open source community all out there that shares their knowledge or frameworks and from whom I have learned so much. The...
PageTableInjection
PageTableInjection Code Injection, Inject malicious payload via pagetables pml4. Introduction This is just a proof-of-concept of the page table injection technique to inject malicious code into the arbitrary user processes. On Windowsand some modern OSes, every process has a its PML4 a.k.a...
music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on master
Summary StsdAtom.get in lib/mp4/AtomToken.ts parses an MP4 stsd sample description box's entry table by advancing a cursor with off += size - 4, where size is a 32-bit, attacker-controlled per-entry length read straight from the file. When size == 0, that advance is 0, so a file declaring a huge...
NPM: music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on master
NPM: music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop DoS — unreleased regression on master vulnerability discovered by ? in WordPress Npm music-metadata versions 11.16.0...
EUVD-2026-95245
music-metadata is a metadata parser for audio and video media files. In the public development revision introduced after 11.14.0, a development-branch regression in the MP4 stsd sample-description parser allows an attacker-controlled sample-entry size of zero to prevent the StsdAtom.get cursor fr...
blanket
blanket Blanket is a sandbox escape targeting iOS 11.2.6, although the main vulnerability was only patched in iOS 11.4.1. It exploits a Mach port replacement vulnerability in launchd CVE-2018-4280, as well as several smaller vulnerabilities in other services, to execute code inside the ReportCras...
CVE-2026-3786
NVD-CVE-2026-3786 https://nvd.nist.gov/vuln/detail/CVE-2026-3786...
Craft-CMS-3.0.25---Cross-Site-Scripting
Craft-CMS-3.0.25 - クロスサイトスクリプティング Craft CMS 3.0.25 - クロスサイトスクリプティングの脆弱性 CVE-CVE-2018-20418 https://vulners.com/cve/CVE-2018-20418 概念実証 コンソールタブから新しいタイトルを保存することで、クロスサイトスクリプティング（XSS）を実行できます。 POST /admin-panel-path/index.php?p=admin/actions/entries/save-entry HTTP/1.1 Host: IP:PORT User-Agent:...
drow
drow 설명 TL;DR drow는 ELF 실행 파일빌드 후에 코드를 삽입하고 진입점을 후킹하는 데 사용되는 명령줄 유틸리티입니다. 수정되지 않은 ELF 실행 파일을 입력으로 받아 런타임에 실행되는 사용자 제공 페이로드가 포함된 수정된 ELF를 내보냅니다. 약간 더 자세히 ... Drow는 새 패치된 ELF를 생성하기 위해 다음 단계를 수행합니다: 1. 수정되지 않은 대상 ELF 실행 파일과 사용자 제공 페이로드위치 독립적인 블롭를 매핑합니다. 2. 프로그램 헤더를 파싱하여 첫 번째 실행 가능 세그먼트를 찾습니다. 3. 섹션...
firstexecution
firstexecution 예상된 진입점 외부에서 코드를 실행하는 다양한 방법의 모음...
tarnish
tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...
analyzeMFT
AnalyzeMFT 상태 : Windows, macOS, Linux에서 Python 3.8-3.12를 대상으로 한 모든 테스트가 통과했습니다. 빠른 시작 Install pip install analyzeMFT Basic usage python analyzeMFT.py -f MFTFILE -o output.csv --csv Generate test MFT for testing python -c "from src.analyzeMFT.testgenerator import createtestmft;...
scenester
Scenester Scenester - 複数のユーザーエージェントを指定してウェブサイトを視覚的にスナップショットするツール。アプリケーションへのさまざまなエントリーポイントの発見を支援するために設計されています。 NCC Group Plc によりオープンソースとして公開 - http://www.nccgroup.com/ 開発者: Sharique Shaikh、sharique dot shaikh at nccgroup dot com https://www.github.com/nccgroup/scenester AGPL のもとで公開。詳細については LICENSE...
PoC-CVE-2020-9715
CVE-2020-9715 EDR 검증 PoC Adobe Acrobat Reader DC의 EScript.api ESObject 캐시에서 발생하는 Use-after-free 취약점입니다. 공인된 레드팀 EDR 테스트 전용입니다. 취약점 Adobe Acrobat Reader DC = 2020.009.20063. EScript 엔진은 데이터 ESObject를 원래 인코딩ANSI 또는 유니코드을 유지하는 키로 캐시합니다. 삭제 시 항상 유니코드 키가 생성되므로 ANSI 이름의 항목은 캐시에서 제거되지 않습니다. GC가 기본 객체를 해...
spybrowse
BrowseSpy Be sure to change the ftp variables throughout the code, these variables contain the username, password, & IP address of the FTP server which receives the files. This code will do the following: 1. Copy itself into the %TMP% directory & name itself ursakta.exe 2. Add a registry entry to...
WordPress Database Addon For WPForms ( wpforms entries ) plugin < 1.1.1 - Arbitrary Form Entry Deletion vulnerability
Arbitrary Form Entry Deletion vulnerability discovered by Rik de Kok in WordPress Plugin Database Addon For WPForms wpforms entries versions 1.1.1...