7782 matches found
ChromeSHELFLoader
Chrome SHELF Loader An exploit for CVE-2020-6418 implementing a SHELF Loader. Published as part of Tmp.0ut volume 2...
packer-tutorial
Table of Contents 1. What is a packer? : An introduction into the purpose of packers and a guide through what the development necessities of a packer are. 2. Prerequisites : Tools needed to work with this tutorial. 3. Getting a taste : A demonstration of what you will be building with this...
D1rkLdr
D1rkLdr Shellcode Loader with Indirect Dynamic syscall Implementation , shellcode in MAC format, API resolving from PEB, Syscall calll and syscall instruction address resolving at run time...
freeBokuLoader
freeBokuLoader A simple BOF that tries to free the memory region where the User Defined Reflective Loader is stored. As the name implies, it was tested against BokuLoader, but should work with most if not all UDRLs. Usage beacon freeBokuLoader...
COFFLoader
COFF Loader This is a quick and dirty COFF loader AKA Beacon Object Files. Currently can run un-modified BOF's so it can be used for testing without a CS agent running it. The only exception is that the injection related beacon compatibility functions are just empty. The main goal is to provide a...
PE-Obfuscator
PE-Obfuscator PE obfuscator with Evasion in mind , needs Admin Privilege in order to load RTCore64 driver. Video: https://user-images.githubusercontent.com/123980007/234171901-c1eb735e-ceca-481d-9310-02ba30f6836b.mp4 The Obfuscator : - Gets xored Fileless PE from a remote server - Drop the Loader...
Jormungandr
Jormungandr Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel. The only supported type of COFF is an x64 kernel COFF meaning, a COFF that uses functions from either NTOSKRNL or SSDT. This project is not supported to r...
Percino
Percino Evasive Golang Loader Percino is a Golang loader that execute shellcode utilizing the process hollowing technique with anti-sandbox and anti-analysis measures. The shellcode is encrypted with the Triple DES 3DES encryption algorithm. Full EDR bypass with any C2 Framework. Tested with Coba...
CVE-2022-29464
CVE-2022-29464 LOADER Install and execute the app on the server user@domain: pip3 install colored user@domain: git clone https://github.com/sh4den/CVE-2022-29464-loader.git user@domain: cd ./CVE-2022-29464-loader/ user@domain: python3 main.py Disclamer This repository is for academic purposes, th...
cve-2019-17558-apache-solr-rce
Apache Solr RCE CVE-2019-17558 - CTF Write-up Practical exploitation of a Velocity Template Injection vulnerability in Apache Solr, progressing from a failure in an automated tool Metasploit to a successful manual exploitation. This write-up documents the complete reasoning of the exercise,...
DEBIAN-CVE-2026-108093
A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without ensuring the parasite data is present before dereferencing it. Opening a specially crafted XCF file with a zero-size simulation parasite can cause a NULL pointer dereference and...
CVE-2026-108093
A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without ensuring the parasite data is present before dereferencing it. Opening a specially crafted XCF file with a zero-size simulation parasite can cause a NULL pointer dereference and...
CVE-2026-108093
A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without ensuring the parasite data is present before dereferencing it. Opening a specially crafted XCF file with a zero-size simulation parasite can cause a NULL pointer dereference and...
CVE-2026-108093
A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without ensuring the parasite data is present before dereferencing it. Opening a specially crafted XCF file with a zero-size simulation parasite can cause a NULL pointer dereference and...
EUVD-2026-95913
A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without ensuring the parasite data is present before dereferencing it. Opening a specially crafted XCF file with a zero-size simulation parasite can cause a NULL pointer dereference and...
CVE-2026-108093
A NULL pointer dereference vulnerability exists in GIMP within the XCF loader . The issue occurs because the loader processes image-simulation-intent and image-simulation-bpc parasites without verifying that the data is present before dereferencing it. An attacker can cause a denial of service (D...
CVE-2026-108093 Gimp: gimp: denial of service via null pointer dereference in xcf simulation parasite loading
A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without ensuring the parasite data is present before dereferencing it. Opening a specially crafted XCF file with a zero-size simulation parasite can cause a NULL pointer dereference and...
CVE-2026-108093
A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without ensuring the parasite data is present before dereferencing it. Opening a specially crafted XCF file with a zero-size simulation parasite can cause a NULL pointer dereference and...
Sensitive Information Disclosure
Docling is vulnerable to sensitive information disclosure. The vulnerability is due to the HTML image resource loader forwarding configured headers to remote image URLs without restricting them to the source document’s origin, which allows an attacker to expose configured credentials, such as API...
CVE-2026-108093: NULL Pointer Dereference
A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without ensuring the parasite data is present before dereferencing it. Opening a specially crafted XCF file with a zero-size simulation parasite can cause a NULL pointer dereference and...