browsertunnel

browsertunnel Browsertunnel is a tool for exfiltrating data from the browser using the DNS protocol. It achieves this by abusing dns-prefetch, a feature intended to reduce the perceived latency of websites by doing DNS lookups in the background for specified domains. DNS traffic does not appear i...

browsertunnel

browsertunnel Browsertunnel은 DNS 프로토콜을 사용하여 브라우저에서 데이터를 유출exfiltrate하는 도구입니다. dns-prefetch라는 기능을 악용하여 작동하는데, 이 기능은 지정된 도메인에 대해 백그라운드에서 DNS 조회를 수행하여 웹사이트의 지연 시간을 줄이기 위한 것입니다. DNS 트래픽은 브라우저의 디버깅 도구에 나타나지 않으며, 페이지의 콘텐츠 보안 정책CSP에 의해 차단되지 않고, 기업 방화벽이나 프록시에서 검사되지 않는 경우가 많아, 제한된 환경에서 데이터를 밀반출smuggling하기...

prefetch-hash-cracker

Prefetch Hash Cracker 동기 Windows 시스템의 포렌식 분석 중에 삭제된 프리페치 파일의 이름을 발견할 수 있습니다. 파일 내용은 복구되지 않을 수 있지만, 파일 이름 자체만으로도 프리페치 파일이 생성된 실행 파일의 전체 경로를 찾을 수 있는 경우가 많습니다. 도구 사용법 다음 필드를 제공해야 합니다: 실행 파일 이름 확장자를 포함합니다. 이 경우가 아니라면 프리페치 파일 이름에 포함됩니다. 프리페치 해시 프리페치 파일 이름 끝, .pf 확장자 바로 앞에 있는 8자리 16진수입니다. 해시 함수 바디파일 마운...

prefetch-hash-cracker

Prefetch Hash Cracker Motivation During the forensic analysis of a Windows machine, you may find the name of a deleted prefetch file. While its content may not be recoverable, the filename itself is often enough to find the full path of the executable for which the prefetch file was created. Usin...

prefetch-tool

Windows KASLR Prefetch ツール Windows 11 で KASLR カーネル ASLR を回避するための概念実証ツールです。EntryBleed Linux 向け に触発されました。 このツールは、Windows 11 24H2 を標的としたエクスプロイト の一部として開発されました。私はサイドチャネルの専門家ではまったくないため、これは私にとってまったく未知の領域であり、コードは非常にハッキーです 😳 さまざまな CPU タイプでの信頼性を向上させるための助けをいただけると大変ありがたいです。...

SUSE CVE-2026-77797

Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files...

CVE-2026-77797

Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files...

EUVD-2026-85881

Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files...

CVE-2026-77797 Velociraptor Prefetch parser out of bounds

Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files...

CVE-2026-77797 Velociraptor Prefetch parser out of bounds

Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files...

CVE-2026-77797

The Velociraptor prefetch library contains an out of bounds vulnerability. This flaw may cause a crash when the library parses specific malformed prefetch files . No specific affected versions, exploit details, or remediation steps are provided in the documents.

CVE-2026-77797 Velociraptor Prefetch parser out of bounds

Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files...

CVE-2026-77797: Improper Input Validation

Velociraptor's prefetch library contains an out of bound vulnerability which may cause a crash when parsing certain malformed prefetch files...

PT-2026-97795

Name of the Vulnerable Software and Affected Versions Velociraptor affected versions not specified Description The prefetch library contains an out-of-bounds issue that can lead to a system crash when the software parses specifically crafted malformed prefetch files. Recommendations At the moment...

9router: Image prefetch DNS rebinding allows SSRF to internal services

9router validates image URLs by resolving the host before fetching, but the later server-side fetch performs a separate DNS resolution. An attacker-controlled DNS name can resolve to a public IP during validation and then rebind to an internal Docker/private IP during the fetch. This allows the...

CVE-2026-92775

Wiki.js through 2.5.314 contains a server-side request forgery vulnerability in the Image Prefetch renderer that fetches arbitrary URLs without protocol, host, or address validation. Attackers with page editing permissions can inject img elements with the prefetch-candidate class to make the serv...

CVE-2026-92775 Wiki.js through 2.5.314 Server-Side Request Forgery via Image Prefetch

Wiki.js through 2.5.314 contains a server-side request forgery vulnerability in the Image Prefetch renderer that fetches arbitrary URLs without protocol, host, or address validation. Attackers with page editing permissions can inject img elements with the prefetch-candidate class to make the serv...

CVE-2026-92775 Wiki.js through 2.5.314 Server-Side Request Forgery via Image Prefetch

Wiki.js through 2.5.314 contains a server-side request forgery vulnerability in the Image Prefetch renderer that fetches arbitrary URLs without protocol, host, or address validation. Attackers with page editing permissions can inject img elements with the prefetch-candidate class to make the serv...

CVE-2026-92775 Wiki.js through 2.5.314 Server-Side Request Forgery via Image Prefetch

Wiki.js through 2.5.314 contains a server-side request forgery vulnerability in the Image Prefetch renderer that fetches arbitrary URLs without protocol, host, or address validation. Attackers with page editing permissions can inject img elements with the prefetch-candidate class to make the serv...

CVE-2026-92775

Wiki.js through 2.5.314 is affected by a Server-Side Request Forgery (SSRF) vulnerability in the Image Prefetch renderer . The root cause is the absence of protocol, host, or address validation when fetching image URLs. An attacker with page editing permissions can inject elements carrying the p...