laravel-crypto-killer

Laravel crypto killer Una herramienta diseñada para explotar malas implementaciones de los mecanismos de descifrado en aplicaciones Laravel. Esta herramienta fue diseñada inicialmente para crear payloads dirigidos a la función decrypt de Laravel del paquete Illuminate\Encryption. También puede...

AES-Killer

AES Killer Burpsuite 插件 Burpsuite 插件，用于实时解密 AES 加密的流量 要求 Burpsuite 已测试环境 Burpsuite 2021.4 Windows 10 Ubuntu & PopOS 功能说明 IProxyListener 解密请求并加密响应，IHttpListener 加密请求并解密响应。 Burp（包括 Repeater、Intruder 和 Scanner）看到的是解密后的流量，但客户端/移动应用和服务器看到的是加密版本。 注意： 当前支持 AES/CBC/PKCS5Padding 和 AES/ECB/PKCS5Padding...

GhostDriver

GhostDriver 👻 Acerca de GhostDriver es una herramienta de eliminación de AV construida en Rust que utiliza BYOVD. Cómo empezar 1. Instala Rust desde rust-lang.org 2. Clona: git clone https://github.com/BlackSnufkin/GhostDriver.git 3. Compila: cargo build --release --target=x8664-pc-windows-msvc 4...

msmap

MSMAP Msmap is a Memory WebShell Generator. Compatible with various Containers, Components, Encoder, WebShell / Proxy / Killer and Management Clients. 简体中文 The idea behind I, The idea behind II, The idea behind III Feature WIP Function Dynamic Menu Automatic Compilation Generate Script Lite Mode...

SCREEN_KILLER

.. raw:: html .. image:: ./pictures/scrk.png :width: 700px :alt: Project .. raw:: html KILLER PROJECT .. contents:: :local: :depth: 1 ============= 介绍 screenshot pentest OSCP 此脚本旨在在渗透测试参与和OSCP期间捕获屏幕截图。 重要提示：屏幕截图功能不再允许在考试中使用，但终端日志记录允许在考试中使用。 如果您喜欢这个工具，并为了我个人开发其他工具的积极性，请给一个+1星 。...

Killer

KILLER TOOL EDR规避 这是一个用于学习绕过安全工具的AV/EDR规避工具，目前该工具是FUD（免杀）的。 功能特性： 模块踩踏（Module Stomping）用于内存扫描规避 通过新鲜ntdll副本进行DLL解除挂钩 IAT隐藏与混淆及API解除挂钩 ETW修补用于绕过某些安全控制 包含沙箱规避技术和基本反调试 通过XOR完全混淆（函数-密钥-Shellcode） Shellcode反转并加密 将载荷移至空闲内存，无需使用API GetProcAddress和GetModuleHandle的实现（由@cocomelonc提供） 运行时不会创建新线程，支持x64和x86架构...

CVE-2021-26258

Este repositorio contiene herramientas y archivos complementarios para la PoC de CVE-2021-26258. Consulte la entrada del blog para obtener detalles sobre la vulnerabilidad. Lista de archivos : rn.stg.original: archivo .stg original que viene con Intel Killer rn.xml.original: archivo .xml extraído...

Amsi-Killer

Bypass de AMSI de por vida Escaneo de Opcodes obtenemos la dirección exacta de la instrucción de salto buscando el primer byte de cada instrucción; esta técnica es efectiva incluso ante actualizaciones o modificaciones del conjunto de datos objetivo. por ejemplo : | 48:85D2 | test rdx, rdx | | 74...

CentOS Linux 7 [TuxCare] Security Update: iwl100-firmware / iwl1000-firmware / iwl105-firmware / etc Multiple Vulnerabilities (CENTOS7:CLSA-2024:1720777265)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2024:1720777265 advisory. - Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow a privileged user to potentially...

OESA-2026-4032 rabbitmq-server security update

RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable implementation of an AMQP broker. Security Fixes: RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP...

OESA-2026-4031 rabbitmq-server security update

RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable implementation of an AMQP broker. Security Fixes: RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP...

OESA-2026-4030 rabbitmq-server security update

RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable implementation of an AMQP broker. Security Fixes: RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP...

OESA-2026-4029 rabbitmq-server security update

RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable implementation of an AMQP broker. Security Fixes: RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP...

OESA-2026-4028 rabbitmq-server security update

RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable implementation of an AMQP broker. Security Fixes: RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP...

CVE-2026-93241

In the Linux kernel, the following vulnerability has been resolved: memcg: bypass the reclaim and oom killer for dying tasks once oomreaper is done At Meta, we are seeing instances where an OOM killed job is stuck in the exit path for several hours. In one particular case, the job was stuck for...

CVE-2026-93241

The Linux kernel contains a vulnerability in memcg where dying tasks can bypass reclaim and the oom killer once the oom_reaper has finished its task. This occurs because the oom_reaper is a best-effort, one-shot process; if it fails to acquire the mmap_lock in read mode (e.g., due to a sibling th...

CVE-2026-77619

Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads a 32-bit compressed-frame length from the network and uses it to size an in-memory buffer without an upper bound. An unauthenticated remote peer that can reach the default 0.0.0.0:5044...

CVE-2026-77619 Vector: Unauthenticated denial of service in the `logstash` source via unbounded memory allocation.

Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads a 32-bit compressed-frame length from the network and uses it to size an in-memory buffer without an upper bound. An unauthenticated remote peer that can reach the default 0.0.0.0:5044...

CVE-2026-77619

CVE-2026-77619 affects the logstash source in Vector (versions 0.15.0 through 0.57.0). The vulnerability stems from the source reading a 32-bit compressed-frame length from the network and sizing an in-memory buffer without an upper bound . An unauthenticated remote peer reaching the default 0.0....

PT-2026-96792

Name of the Vulnerable Software and Affected Versions Vector versions 0.15.0 through 0.56.0 Description The logstash source reads a 32-bit compressed-frame length from the network and uses it to size an in-memory buffer without an upper bound. An unauthenticated remote peer accessing the default...