328 matches found
CVE-2021-34486
CVE-2021-34486 Windows Etw LPE solo probado en windows 20H2 x64 ed2k://|file|cnwindows10businesseditionsversion20h2updatedmarch2021x64dvdca61aaaa.iso|6074574848|B6741C4E4B09337471B02DC95E953992|/ gracias @yongchuank https://www.pixiepointsecurity.com/blog/advisory-cve-2021-34486.html...
pywintrace
ETW Event Tracing for Windows ETW es una facilidad de rastreo que permite a un usuario registrar eventos en un archivo o búfer. Una descripción general de ETW se puede encontrar aquí. La arquitectura básica incluye un Proveedor, un Controlador y un Consumidor. El controlador define y controla una...
sysmon-config
sysmon-config | Un archivo de configuración de Sysmon para que todos lo bifurquen Esta es una plantilla de archivo de configuración de Sysmon de Microsoft Sysinternals con un seguimiento de eventos predeterminado de alta calidad. El archivo debería funcionar como un excelente punto de partida par...
Fuck-Etw
「⚙️」Bypass ETW y Desenganche de Ntdll Bypass del seguimiento de eventos de Windows ETW y desenganche de ntdll. root@kitploit: |\ /| | \ /\ \ /|\ /| | /| || /| \ / /| / | | | | | | || | | / / | | | | | | | | | | | || | | | | | | | | | | | | | || | | \ \ | | | | || || | | | || /| / \ | /\ | |...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Tracing: Verify event formats that use "%p.." syntax. The trace event verifier checks the formats of trace events to ensure that they do not reference memory that is not part of the event itself, or data that will never be freed...
New Avalon Malware Framework Packs CrownX Ransomware Capabilities
Cybersecurity researchers have discovered a previously undocumented modular malware framework codenamed Avalon that's distributed by means of a multi-stage phishing chain capable of bypassing traditional security controls. Avalon combines credential collection, lateral movement, remote access,...
EUVD-2026-34742
Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted ETW event. Chromium security severity: Low...
DEBIAN-CVE-2026-11281
Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted ETW event. Chromium security severity: Low...
CVE-2026-11281
Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted ETW event. Chromium security severity: Low...
CVE-2026-11281
Integer overflow in Chromoting in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted ETW event. Chromium security severity: Low...
Endpoint Security Agent: A Comprehensive Approach to Real-Time System Monitoring and Threat Detection
As cyber threats continue to evolve in complexity and frequency, robust endpoint protection is essential for organizational security. This paper presents "Endpoint Security Agent: A Comprehensive Approach to Real-time System Monitoring and Threat Detection" a modular, real-time security solution...
EUVD-2021-18844
Malware in sbrugna...
EUVD-2021-11019
Malware in sbrugna...
EUVD-2021-13230
Malware in sbrugna...
EUVD-2021-13859
Malware in sbrugna...
EUVD-2021-15114
Malware in sbrugna...
EUVD-2021-13656
Malware in sbrugna...
EUVD-2021-21141
Malware in sbrugna...