PrivKit

PrivKit مجموعة من ملفات كائنات المنارة BOFs لفحص تصعيد الامتيازات المحلية في ويندوز. الوصف PrivKit هي أداة مفتوحة المصدر تمكن فرق الاختراق ومختبرّي الاختراق من تحديد نقاط الضعف الشائعة لتصعيد الامتيازات المحلية في ويندوز بسرعة باستخدام ملفات كائنات المنارة BOFs الخاصة بـ Cobalt Strike. للاستخدام...

pybof

PyBOF Exécuter des fichiers Beacon Object via python chargement et exécution en mémoire des BOFs PyBOF permet à Python3 de charger des fichiers Beacon Object via des octets et d'exécuter une fonction BOF cible dans un interpréteur Python Utilisation de base Exécuter un BOF simple sans argument...

BRC4-BOF-Artillery

Générique Ce dépôt contient une collection de BOFs génériques que j'ai écrits sur une période donnée. Ce dépôt se concentre uniquement sur le portage et l'exécution, sans modifier la source d'origine pour la stabilité. Bien que je puisse effectuer d'autres tests à l'avenir, cela n'est pas...

IDA2Obj

IDA2Obj IDA2Obj هي أداة لتنفيذ SBI Static Binary Instrumentation. سير العمل بسيط: تفريغ ملفات الكائنات COFF مباشرة من ثنائي قابل للتنفيذ. ربط ملفات الكائنات في ثنائي جديد، مطابق تقريبًا للقديم. أثناء عملية التفريغ، يمكنك إدراج أي بيانات/كود في أي موقع. SBI هو مجرد أحد سيناريوهات الاستخدام، مفيد...

CoffeeLdr

CoffeeLdr CoffeeLdr — это загрузчик для так называемых Beacon Object Files. Этот проект можно использовать для тестирования Beacon Object Files без использования платформы Cobalt Strike, а также для предоставления кастомным имплантам возможности выполнять BOFs, которые были разработаны для Cobalt...

COFFLoader

COFF Loader Ceci est un chargeur COFF rapide et sale alias Beacon Object Files. Il peut actuellement exécuter des BOF non modifiés, afin de pouvoir être utilisé pour des tests sans qu'un agent CS ne l'exécute. La seule exception est que les fonctions de compatibilité beacon liées à l'injection so...

Adrenaline adrenaline-bof-bundle-2026-08-31-171332-c55f015

Adrenaline BOF Kit A C2-agnostic collection of Beacon Object Files BOFs for red team and offensive security operations. BOFs are organized by attack chain phase and designed to be small, modular, and automation-friendly for use in reconnaissance, enumeration, and post-exploitation workflows. Tabl...

Adrenaline execution-wevt_logon_enum-2026-08-15-193403-18b9393

Adrenaline BOF Kit A C2-agnostic collection of Beacon Object Files BOFs for red team and offensive security operations. BOFs are organized by attack chain phase and designed to be small, modular, and automation-friendly for use in reconnaissance, enumeration, and post-exploitation workflows. Tabl...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the ld process when handling specially crafted 32-bit XCOFF object files. An attacker can cause information disclosure or application crash by supplying a malicious file that manipulates unvalidated fields used as...

EulerOS 2.0 SP15 : binutils (EulerOS-SA-2026-2476)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The...

Binutils: binutils: arbitrary code execution via malformed xcoff object file processing

...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the read process of the OBJ file parser when handling crafted OBJ files. An attacker can cause a denial of service or obtain sensitive information by persuading a victim to open a specially crafted OBJ file that...

EUVD-2026-26600

A heap-based out-of-bounds read vulnerability in RWObjReader::read in the OBJ file parser in Open CASCADE Technology OCCT V800rc5 allows user-assisted attackers to cause a denial of service or obtain sensitive information by persuading a victim to open a crafted OBJ file. The issue occurs because...

Red Hat Enterprise Linux 安全漏洞

Red Hat Enterprise Linux is a Linux operating system for enterprise users developed by Red Hat, Inc. Red Hat Enterprise Linux 10 contains a security vulnerability. This vulnerability stems from improper handling of special XCOFF object files during linking. A local attacker can trick users into...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the processing of XCOFF object files. An attacker can execute unauthorized code or commands by convincing a user to process a specially crafted file. Remediation A fix was pushed into the master branch but...

AZL-80877 CVE-2026-4647 affecting package binutils for versions less than 2.41-11

A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially crafted XCOFF object files, where a relocation type value is not properly validated before being used. This can caus...

AZL-80904 CVE-2026-4647 affecting package gdb for versions less than 13.2-7

A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially crafted XCOFF object files, where a relocation type value is not properly validated before being used. This can caus...

CVE-2026-4647

A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially crafted XCOFF object files, where a relocation type value is not properly validated before being used. This can caus...

CVE-2026-4647 Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library

A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially crafted XCOFF object files, where a relocation type value is not properly validated before being used. This can caus...

CVE-2026-4647: Out-of-bounds Read

A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially crafted XCOFF object files, where a relocation type value is not properly validated before being used. This can caus...