pwndbg

pwndbg pwndbg /paʊnˈdiˌbʌɡ/ is a GDB and LLDB plug-in that makes debugging suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers. It has a boatload of features, see our Features page and CHEATSHEET feel free to prin...

Gh0st-light

Gh0st-light 간소화된 옛것 Gh0st3.6 기반...

Malicious code in css-light-dark-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856c154d7855924568c88181f172f46e84aac202bd6cb29974eb2ffaa3ec3ea7 The package presents itself as a trivial CSS polyfill index.js exports an empty object but ships thunderboltRegistry.js, which on load runs a...

notionterm

notionterm Embed reverse shell inNotion pages. Hack while taking notes FOR ➕: Hiding attacker IP in reverse shell No direct interaction between attacker and target machine. Notion is used as a proxy hosting the reverse shell Demo/Quick proof insertion within report High available and shareable...

AntimalwareBlight

Use this PowerShell module to execute PowerShell code at the antimalware-light protection level. This code was highlighted in the Living Off the Walled Garden: Abusing the Features of the Early Launch Antimalware Ecosystem REcon talk as well as Black Hat USA 2022. This module needs to run elevate...

RunAsWinTcb

RunAsWinTcb 概要 RunAsWinTcbは、ユーザーランドのエクスプロイトを使用して、WinTcb-Lightの保護レベルでDLLを実行します。 脆弱性とエクスプロイトの機能の概要はこちらで確認できます： https://tastypepperoni.medium.com/running-exploit-as-protected-process-ligh-from-userland-f4c7dfe63387 使い方 コマンド: RunAsWinTcb.exe POCDLL.dll Windows Defenderの停止:...

dc34-vault

DC34 vault アプリケーション !WARNING バッジに独自のファームウェアを書き込むと、ライト暗号化キーが消去され、バッジが開発者モードになります。 注意: このリポジトリは現在孤立しており、まもなくアーカイブされます。xous-core に統合されたためです。このリポジトリは、カンファレンス前に非公開にする必要があったため、bunnie の GitHub リポジトリにのみ存在していました。現在は公開されているため、xous-core の一部として保守されます。今後の PR はすべて xous-core に送ってください。Tetris PR...

PPLFault

PPLFault 著者: Gabriel Landau（Elastic Security）。 Black Hat Asia 2023 で発表された PPLdump は死んだ。PPLdump 万歳！ より。 PPLFault 2024-02 更新: Microsoft は 2024 年 2 月 13 日に PPLFault にパッチを適用しました。関連する議論はこのスレッド を参照してください。 Windows コード整合性の TOCTOU を悪用して、WinTcb-Light として任意のコード実行を実現し、指定されたプロセスをダンプします。エクスプロイトの詳細については、私の スライド...

CVE-2026-21006-Zigbee-Light-Link-Factory-Reset-Exploit

CVE-2026-21006 – Zigbee Light Link ファクトリーリセットエクスプロイト プログラムコード Python Zigbee シミュレーション zigbeefactoryreset.py - Simulated Zigbee coordinator sending factory reset command import time class ZigbeeDevice: def initself: self.networkkey = b'secret' def receivecommandself, cmdid: if cmdid == 0x00: Factor...

PPLdump

PPLdump ⚠️ 2022-07-24 - Windows 10 21H2 10.0.19044.1826 2022년 7월 업데이트 기준으로 PPLdump에 구현된 익스플로잇은 더 이상 작동하지 않습니다. NTDLL의 패치로 인해 이제 PPL이 Known DLL을 로드할 수 없습니다. 자세한 정보는 여기를 참조하세요. 이 도구는 James Forshaw@tiraniddo가 블로그 게시물에서 처음 논의한 사용자 영역userland 익스플로잇을 구현하여, 관리자 권한으로 모든 PPL의 메모리를 덤프할 수 있습니다. 이 도구에 관한 두 개의...

CVE-2026-97181

GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs...

CVE-2026-97181 ezGlobal｜GPM LIGHT - Sensitive Data Exposure

GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs...

CVE-2026-97181

The GPM LIGHT software developed by ezGlobal contains a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs , potentially leading to the disclosure of sensitive information. No specific version numbers, root causes, or remediation steps are prov...

CVE-2026-97181 ezGlobal｜GPM LIGHT - Sensitive Data Exposure

GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs...

EUVD-2026-85814

GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs...

CVE-2026-97181: Exposure of Sensitive System Information to an Unauthorized Control Sphere

GPM LIGHT developed by ezGlobal has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can directly access system logs...

PT-2026-97725

Name of the Vulnerable Software and Affected Versions GPM LIGHT affected versions not specified Description Unauthenticated remote attackers can directly access system logs, leading to sensitive data exposure. Recommendations At the moment, there is no information about a newer version that...

[SECURITY] [DSA 6509-1] gimp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6509-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 20, 2026 https://www.debian.org/security/faq -...

Debian dsa-6509 : gimp - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6509 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6509-1 [email protected] https://www.debian.org/securit...

CVE-2026-90249: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes The IIO core does not filter duplicate writes to the event enable attribute, so writing the same value twice invokes writeeventconfig twice. Enabling twice...