SynthAPT

SynthAPT Overview SynthAPT is a playbook-based adversary simulation framework for replicating complex attack paths. It is designed for validating advanced detections and AI-based investigation agents. The core idea is that malware behavior can be expressed in JSON and compiled into functional...

ModuleShifting

ModuleShifting This tool has been presented at the 2023 x33fcon talk: "Improving the stealthiness of Memory Injection Techniques" Video Blogpost What is it ModuleShifting is stealthier variation of Module Stomping and Module overloading injection technique. It is actually implemented in Python...

elfloader

概要 elfloader は、ELFファイル用の超シンプルなローダーで、ELFのフラットなインメモリ表現を生成します。 これをRustと組み合わせれば、適切で安全な高水準言語でシェルコードを書くことができます。LLVMがターゲットにできる任意のターゲット（非常にエキゾチックなプラットフォームやABI向けのカスタムターゲット仕様を含む）を使用できます。32ビットシステムでの u64 の使用、境界チェック付き配列、アロケーションのドロップ処理などをお楽しみください: これは単純に、すべての LOAD セクションを連結し、ギャップがある場合はゼロ埋めを行い、1つの大きなフラットファイルにします...

CVE-2024-38063_PoC

警告：此漏洞的远程代码执行利用程序可能不稳定！ 🚀 Windows TCP/IP 远程代码执行漏洞 CVE-2024-38063 数据包发送器 🎭 你准备好在一个受控的环境中释放混乱了吗？不用再找了！这个程序是你发送精心构造的 IPv6 数据包并利用 Windows TCP/IP 远程代码执行漏洞 CVE-2024-38063 的门票。这就像发送一封数字情书，但你不是在写诗，而是在发送恐慌！💌💥 🚨 重要提示： 此工具仅用于教育目的。未经许可使用它就像未经同意借用邻居的 Wi-Fi——非法、不道德，而且会让家庭烧烤聚会变得尴尬。😬 🎉 功能 发送自定义 IPv6...

ManualRsrcDataFetching

ManualRsrcDataFetching：一个用于替代 FindResource & LoadResource & LockResource & SizeofResource Windows API 的函数。 注意：Payload.ico 是一个 x64 calc shellcode...

CVE-2018-25373

CVE-2018-25373 affects SocuSoft DVD Photo Slideshow Professional 8.07. The issue is a stack-based buffer overflow in the Registration Name field that enables local code execution by abusing structured exception handling (SEH). An attacker can craft a malicious text file containing junk bytes, SEH...

EUVD-2018-21868

10-Strike Network Inventory Explorer 8.54 contains a stack-based buffer overflow vulnerability in the registration key input field that allows local attackers to execute arbitrary code by triggering a structured exception handler overwrite. Attackers can craft a malicious registration key string...

CVE-2018-25322 Allok Fast AVI MPEG Splitter 1.2 Stack Based Buffer Overflow

Allok Fast AVI MPEG Splitter 1.2 contains a stack based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious license name string. Attackers can craft a payload with 780 bytes of junk data followed by structured shellcode and place it in the...

PT-2026-30487

RealTerm Serial Terminal 2.0.0.70 contains a structured exception handling SEH buffer overflow vulnerability in the Echo Port tab that allows local attackers to execute arbitrary code by supplying a malicious payload. Attackers can craft a buffer overflow payload with a POP POP RET gadget chain a...

HTTPS Fetch, Windows shellcode stage, Bind IPv6 TCP Stager with UUID Support (Windows x86)

Fetch and execute an x86 payload from an HTTPS server. Custom shellcode stage. Listen for an IPv6 connection with UUID Support Windows x86 Module Options msf use payload/cmd/windows/https/x86/custom/bindipv6tcpuuid msf payloadbindipv6tcpuuid show actions ...actions... msf payloadbindipv6tcpuuid s...

EUVD-2024-16374

Malicious code in bioql PyPI...

ASLRay

This repository contains a Linux ELF x32/x64 ASLR DEP/NX bypass exploit with stack-spraying. The exploit targets the test binary, which is a simple program that takes a string argument and prints it. The exploit works by spraying the stack with a large amount of data, which increases the chances ...

Exploit for Race Condition in Openbsd Openssh

CVE-2024-6387 regreSSHion Proof of concept python script for...

CVE-2024-0581

An Uncontrolled Resource Consumption vulnerability has been found on Sandsprite Scdbg.exe, affecting version 1.0. This vulnerability allows an attacker to send a specially crafted shellcode payload to the '/foff' parameter and cause an application shutdown. A malware program could use this...

CVE-2024-0581

An Uncontrolled Resource Consumption vulnerability has been found on Sandsprite Scdbg.exe, affecting version 1.0. This vulnerability allows an attacker to send a specially crafted shellcode payload to the '/foff' parameter and cause an application shutdown. A malware program could use this...

Code injection

An Uncontrolled Resource Consumption vulnerability has been found on Sandsprite Scdbg.exe, affecting version 1.0. This vulnerability allows an attacker to send a specially crafted shellcode payload to the '/foff' parameter and cause an application shutdown. A malware program could use this...

Sandsprite scdbg Security Vulnerability

Scdbg is sandsprite open source a multi-platform open source Shellcode simulation run, analysis tools. A security vulnerability exists in Sandsprite scdbg version 1.0 that stems from an uncontrolled resource consumption vulnerability found on Sandsprite Scdbg.exe that allows an attacker to send a...

Hacking Ham Radio: WinAPRS – Part 4

In part three of this series, we discovered and traced a memory corruption bug in WinAPRS using IDA Pro and WinDbg. We discovered that it could be used to gain control over the CPUs EIP register to obtain remote code execution. We found that there were limitations on the address that could be...

Microsoft Internet Explorer 11 Use-After-Free

Exploit Title: Microsoft Internet Explorer 11 32-bit - Use-After-Free Date: 2021-02-05 Exploit Author: deadlock Forrest Orr Vendor Homepage: https://www.microsoft.com/ Software Link: https://www.microsoft.com/en-gb/download/internet-explorer.aspx Version: IE 8, 9, 10, and 11 Tested on: Windows 7...

TipxD 1.1.1 - Not SETUID Local Format String

TipxD 1.1.1 - Not SETUID Local Format String / tipxdexp.c TipxD Format String Vulnerability TipxD - SECU No System Group - http://www.nosystem.com.ar / include include define PATH "/bin/tipxd" define OBJDUMP "/usr/bin/objdump" define GREP "/usr/bin/grep" unsigned char shellcode= / aleph1...