Voidgate

VOIDGATE विवरण: एक तकनीक जिसका उपयोग AV/EDR मेमोरी स्कैनर को बायपास करने के लिए किया जा सकता है। इसका उपयोग व्यक्तिगत एन्क्रिप्टेड असेंबली निर्देशों के ऑन-द-फ्लाई डिक्रिप्शन को निष्पादित करके जाने-माने और पहचाने गए शेलकोड जैसे msfvenom को छिपाने के लिए किया जा सकता है, जिससे उस विशिष्ट मेमोरी पेज...

CVE-2023-3640

SCTF2023kernelpwn SCTF 2023 कर्नेल pwn अलग बात: थोड़ा विज्ञापन। मैं 2024 बैच का स्नातक छात्र हूँ, इस साल की शरदकालीन भर्ती में भाग ले रहा हूँ, संपर्क करने के लिए स्वागत है sycrop इस समस्या में दो बिंदुओं की जाँच करनी है। 1. cpu entry area mapping क्षेत्र के आरंभिक बिंदुओं में कुछ ऐसे पते होते हैं...

RustChain

Descrição Este é um PoC simples de como ocultar artefatos de memória usando uma cadeia ROP em combinação com breakpoints de hardware. A cadeia ROP alterará as proteções da página de memória do módulo principal para N/A enquanto estiver em suspensão isto é, quando a função Sleep é chamada. Para...

TamperingSyscalls

TamperingSyscalls TamperingSyscalls एक 2-भाग वाला नया प्रोजेक्ट है जिसमें argument spoofing और syscall retrieval शामिल हैं, जो दोनों EDRs को विफल करने के लिए EH का दुरुपयोग करते हैं। यह प्रोजेक्ट इन दोनों परियोजनाओं को शामिल करता है ताकि direct syscalls का एक वैकल्पिक समाधान प्रदान किया जा सके।...

PatchlessCLRLoader

PatchlessCLRLoader PatchlessCLRLoader est un fork d'InlineExecute-Assembly permettant de charger des assemblies .NET et de rediriger la sortie vers un mailslot. Je l'ai réécrit en un chargeur autonome avec les implémentations suivantes : Payload chiffré AES Support de payload sans fichier Bypass...

mora-hwbp

Mora-HWBP — ربط تتبع AMSI / WLDP / ETW عبر نقاط الإيقاف للأجهزة نموذج إثبات مفهوم POC لأبحاث أمنية يوضح ربط الدوال عبر نقاط إيقاف الأجهزة سجلات تصحيح المعالج كبديل لأساليب الترقيع التقليدية للذاكرة في الكود. الغرض والنطاق هذا المستودع منشور بشكل صارم لأغراض الأبحاث الأمنية الدفاعية، وتعليم فرق...

AMSI-patches-learned-till-now

AMSI-patches-learned-till-now मैंने अपने अब तक सीखे गए सभी AMSI पैच का दस्तावेजीकरण किया है। ❗ AMSI पैच के बारे में अब तक की मेरी सीख। यह मेरी कंपनी की संपत्ति नहीं है! अस्वीकरण: यह कोड अब तक Evasive चकमा देने वाला होने के लिए नहीं है! केवल एक अवधारणात्मक दृष्टिकोण है। लिंक्स: 1...

CVE-2021-47006 ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook

In the Linux kernel, the following vulnerability has been resolved: ARM: 9064/1: hwbreakpoint: Do not directly check the event's overflowhandler hook The commit 1879445dfa7b "perf/core: Set event's default ::overflowhandler" set a default event-overflowhandler in perfeventalloc, and replace the...

UVI-2021-1000450 ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook

ARM: 9064/1: hwbreakpoint: Do not directly check the event's overflowhandler hook This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.191 by...

The vulnerability of the `modify_user_hw_breakpoint()` function in the Linux operating system allows a hacker to execute arbitrary code.

The vulnerability of the modifyuserhwbreakpoint function in the Linux operating system is related to incorrect error handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2018-1000199

An address corruption flaw was discovered in the Linux kernel built with hardware breakpoint CONFIGHAVEHWBREAKPOINT support. While modifying a h/w breakpoint via 'modifyuserhwbreakpoint' routine, an unprivileged user/process could use this flaw to crash the system kernel resulting in DoS OR to...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2018-1266)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.5.1 : kernel (EulerOS-SA-2018-1263)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual SDM was mishandle...

EulerOS Virtualization 2.5.0 : kernel (EulerOS-SA-2018-1266)

According to the version of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An address corruption flaw was discovered in the Linux kernel built with hardware breakpoint CONFIGHAVEHWBREAKPOINT support. While...

Amazon Linux 2 : kernel (ALAS-2018-1023)

A weakness was found in the Linux kernel's implementation of random seed data. Programs, early in the boot sequence, could use the data allocated for the seed before it was sufficiently generated. CVE-2018-1108 A flaw was found in the way the Linux kernel handled exceptions delivered after a stac...

Amazon Linux AMI : kernel (ALAS-2018-1023)

A weakness was found in the Linux kernel's implementation of random seed data. Programs, early in the boot sequence, could use the data allocated for the seed before it was sufficiently generated. CVE-2018-1108 A flaw was found in the way the Linux kernel handled exceptions delivered after a stac...

Important: kernel

Issue Overview: A weakness was found in the Linux kernel's implementation of random seed data. Programs, early in the boot sequence, could use the data allocated for the seed before it was sufficiently generated. CVE-2018-1108 A flaw was found in the way the Linux kernel handled exceptions...

kernel: ptrace() incorrect error handling leads to corruption and DoS

An address corruption flaw was discovered in the Linux kernel built with hardware breakpoint CONFIGHAVEHWBREAKPOINT support. While modifying a h/w breakpoint via 'modifyuserhwbreakpoint' routine, an unprivileged user/process could use this flaw to crash the system kernel resulting in DoS OR to...

kernel: ptrace() incorrect error handling leads to corruption and DoS

An address corruption flaw was discovered in the Linux kernel built with hardware breakpoint CONFIGHAVEHWBREAKPOINT support. While modifying a h/w breakpoint via 'modifyuserhwbreakpoint' routine, an unprivileged user/process could use this flaw to crash the system kernel resulting in DoS OR to...

Microsoft Office 2007 - mso.dll Arbitrary Free (MS15-081)

Microsoft Office 2007 - mso.dll Arbitrary Free MS15-081 Source: https://code.google.com/p/google-security-research/issues/detail?id=417&can=1 The following crash was observed in Microsoft Office 2007 with Microsoft Office File Validation Add-In disabled and Application Verifier enabled for testin...