CVE-2019-19470-RedTeamRD

CVE-2019-19470-RedTeamRD Questo repository contiene il codice e le istruzioni per replicare l'exploit CVE-2019-19470 scoperto da CODEWHITE. Qui si trova il codice sorgente degli esempi che ho utilizzato nel meetup di HackTheBox per spiegare il mio processo di apprendimento e creazione di questo...

Remote-BOF-Runner

Remote BOF Runner Ein Havoc-Erweiterungsframework für die Remote-Ausführung von Beacon Object Files BOFs unter Verwendung eines mit Crystal Palace erstellten PIC-Loaders. Übersicht Remote BOF Runner ermöglicht die sichere Ausführung von BOFs in beliebigen Prozessen durch Nutzung des Crystal Palac...

Windows-Non-Paged-Pool-Overflow-Exploitation

Indice Indice Introduzione Introduzione alle Named-Pipes Sfruttamento Spraying del pool non paginato Divulgazione di memoria/Lettura arbitraria Controllo completo sui dati dell'overflow Controllo limitato sui dati dell'overflow Scrittura arbitraria Liberazione arbitraria di oggetti...

pipe_finder

Pipe Finder 1.0 Script automatizzato per cercare nomi di pipe disponibili nel protocollo SMB Schermate Requisiti metasploit-framework wget locate pipeauditv2.rb module https://github.com/peterpt/pipeauditorfb - Verrà installato al primo avvio Installa i Requisiti apt-get install...

PipeViewer

Ein GUI-Tool zum Anzeigen von Windows Named Pipes und zur Suche nach unsicheren Berechtigungen. Das Tool wurde im Rahmen einer Forschung zu Docker Named Pipes veröffentlicht: „Breaking Docker Named Pipes SYSTEMatically: Docker Desktop Privilege Escalation – Part 1“ „Breaking Docker Named Pipes...

CVE-2022-25365

CVE-2022-25365 Die Privilegienausweitung-Schwachstelle in Docker Desktop für Windows Referenz: https://www.cyberark.com/resources/threat-research-blog/breaking-docker-named-pipes-systematically-docker-desktop-privilege-escalation-part-1 Dateiliste poc.py Programmiert von followboy1999...

DFShell

root@kitploit: ██████╗ ███████╗██████╗ ███████╗██╗ ██╗███████╗██╗ ██║ ██╔══██╗██╔════╝██╔════╝██║ ██║██╔════╝██║ ██║ ██║ ██║█████╗ ███████╗███████║█████╗ ██║ ██║ ██║ ██║██╔══╝ ╚════██║██╔══██║██╔══╝ ██║ ██║ ██████╔╝██║ ███████║██║ ██║███████╗███████╗███████╗ ╚═════╝ ╚═╝ ╚══════╝╚═╝...

pipe-intercept

pipe-intercept Abfangen der Kommunikation von Windows Named Pipes mithilfe von Burp oder ähnlichen HTTP-Proxy-Tools Named Pipes sind für die Interprozesskommunikation unter Windows sehr verbreitet. Sie werden in vielen Anwendungen eingesetzt, einschließlich des Windows Remote Procedure Call RPC...

CVE-2026-14478

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability...

CVE-2026-14478 Incorrect Permission Assignment in Autodesk Installer Named Pipes

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability...

EUVD-2026-57238

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability...

CVE-2026-14478

The CVE-2026-14478 issue concerns Autodesk's installer named pipes. A malicious executable run on a victim machine could allow a local, low-privilege attacker to inject unauthenticated IPC messages into these named pipes, and to modify pipe permissions or ownership, with potential impact to confi...

PT-2026-71096

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A local low-privileged attacker can execute a maliciously created executable on a victim's machine to inject unauthenticated Inter-Process Communication IPC...

GHSA-3WFC-MGPM-9RQ6 comm: FIFO/pipe inputs are drained before comparison (data loss / hang)

The comm utility in uutils coreutils incorrectly consumes data from non-regular file inputs before performing comparison operations. The arefilesidentical function opens and reads from both input paths to compare content without first verifying if the paths refer to regular files. If an input pat...

📄 FIFOFox: Windows Named-Pipe Weak Permission and Access Control Validation

This C-based framework analyzes Windows named pipes for insecure permission configurations and weak access controls that could introduce privilege boundary issues. The code collects metadata about target pipes, inspects security descriptors and DACL configurations, checks for potentially unsafe...

FIFOFox: Windows Named-Pipe Security Auditor and Fuzzer

FIFOFox is a Windows named-pipe security assessment tool for identifying weak pipe permissions, pipe-squatting exposure, and named-pipe impersonation attack paths. It combines passive auditing with authorized active testing, including fuzzing and interception-style capture, to help defenders find...

Acer NitroSense 安全漏洞

Acer NitroSense is a gaming device performance management software developed by Acer of Taiwan, China. Versions of Acer NitroSense prior to 3.01.3052 contained security vulnerabilities. These vulnerabilities stemmed from the PSAdminAgent service creating named pipes with weak access control lists...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fixed recursive locking in RPC handle list access Since commit 305853cce3794 “ksmbd: Fixed race condition in RPC handle list access”, the ksmbdsessionrpcmethod function attempts to lock sess-rpclock. This causes hung...

📄 Windows Cloud Files Tiering Engine Local Privilege Escalation

his Metasploit local exploit module models a Windows privilege escalation scenario involving Cloud Files, NTFS reparse points, named pipes, and service interaction. The workflow simulates abusing file system operations and cloud sync mechanisms by creating controlled directories, placeholder file...

PT-2026-34483

Name of the Vulnerable Software and Affected Versions uutils coreutils affected versions not specified Description The comm utility incorrectly consumes data from non-regular file inputs before performing comparison operations. The are files identical function opens and reads from both input path...