pipe_finder

Pipe Finder 1.0 Автоматизированный скрипт для поиска доступных имен каналов в протоколе SMB Скриншоты Требования metasploit-framework wget locate модуль pipeauditv2.rb https://github.com/peterpt/pipeauditorfb - Он будет установлен при первом запуске Установка зависимостей apt-get install...

CVE-2019-19470-RedTeamRD

CVE-2019-19470-RedTeamRD Этот репозиторий содержит код и инструкции для воспроизведения эксплойта CVE-2019-19470, обнаруженного CODEWHITE. Здесь находятся исходные коды примеров, которые я использовал на встрече HackTheBox, чтобы объяснить свой процесс обучения и создания этого эксплойта. Пример...

CVE-2022-25365

CVE-2022-25365 Уязвимость повышения привилегий в Docker Desktop для Windows Ссылка: https://www.cyberark.com/resources/threat-research-blog/breaking-docker-named-pipes-systematically-docker-desktop-privilege-escalation-part-1 Список файлов poc.py Автор: followboy1999 createsymlink.exe Автор: Jame...

DFShell

root@kitploit: ██████╗ ███████╗███████╗██╗ ██╗███████╗██╗ ██╗ ██╔══██╗██╔════╝██╔════╝██║ ██║██╔════╝██║ ██║ ██║ ██║█████╗ ███████╗███████║█████╗ ██║ ██║ ██║ ██║██╔══╝ ╚════██║██╔══██║██╔══╝ ██║ ██║ ██████╔╝██║ ███████║██║ ██║███████╗███████╗███████╗ ╚═════╝ ╚═╝ ╚══════╝╚═╝...

PipeViewer

Графический инструмент для просмотра именованных каналов Windows и поиска небезопасных разрешений. Инструмент был опубликован в рамках исследования, посвящённого именованным каналам Docker: "Breaking Docker Named Pipes SYSTEMatically: Docker Desktop Privilege Escalation – Part 1" "Breaking Docker...

EUVD-2026-67687

filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server...

CVE-2026-82235

filebrowser through 2.63.23 fails to validate named pipes in its directory archive and public download handlers. This causes blocking open syscalls that pin server goroutines and exhaust connection resources, resulting in a denial of service . Both authenticated users and anonymous visitors with ...

CVE-2026-82235 filebrowser through 2.63.23 Denial of Service via named pipes

filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server...

CVE-2026-82235 filebrowser through 2.63.23 Denial of Service via named pipes

filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server...

Windows-Non-Paged-Pool-Overflow-Exploitation

Índice Índice Introdução Introdução a Named Pipes Exploração Espalhamento do pool não paginado Divulgação de memória/Leitura arbitrária Controle completo sobre os dados de transbordo Controle limitado sobre os dados de transbordo Escrita arbitrária Liberação arbitrária de objetos...

pipe-intercept

pipe-intercept Intercettare la comunicazione delle Named Pipe di Windows utilizzando Burp o strumenti proxy HTTP simili Le named pipe sono molto diffuse per la comunicazione tra processi su Windows. Vengono utilizzate in molte applicazioni, inclusa la chiamata di procedura remota RPC di Windows. ...

Remote-BOF-Runner

Remote BOF Runner Ein Havoc-Erweiterungsframework für die Remote-Ausführung von Beacon Object Files BOFs unter Verwendung eines mit Crystal Palace erstellten PIC-Loaders. Übersicht Remote BOF Runner ermöglicht die sichere Ausführung von BOFs in beliebigen Prozessen durch Nutzung des Crystal Palac...

CVE-2026-14478

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability...

CVE-2026-14478 Incorrect Permission Assignment in Autodesk Installer Named Pipes

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability...

EUVD-2026-57238

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability...

CVE-2026-14478

The CVE-2026-14478 issue concerns Autodesk's installer named pipes. A malicious executable run on a victim machine could allow a local, low-privilege attacker to inject unauthenticated IPC messages into these named pipes, and to modify pipe permissions or ownership, with potential impact to confi...

PT-2026-71096

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A local low-privileged attacker can execute a maliciously created executable on a victim's machine to inject unauthenticated Inter-Process Communication IPC...

GHSA-3WFC-MGPM-9RQ6 comm: FIFO/pipe inputs are drained before comparison (data loss / hang)

The comm utility in uutils coreutils incorrectly consumes data from non-regular file inputs before performing comparison operations. The arefilesidentical function opens and reads from both input paths to compare content without first verifying if the paths refer to regular files. If an input pat...

📄 FIFOFox: Windows Named-Pipe Weak Permission and Access Control Validation

This C-based framework analyzes Windows named pipes for insecure permission configurations and weak access controls that could introduce privilege boundary issues. The code collects metadata about target pipes, inspects security descriptors and DACL configurations, checks for potentially unsafe...

FIFOFox: Windows Named-Pipe Security Auditor and Fuzzer

FIFOFox is a Windows named-pipe security assessment tool for identifying weak pipe permissions, pipe-squatting exposure, and named-pipe impersonation attack paths. It combines passive auditing with authorized active testing, including fuzzing and interception-style capture, to help defenders find...