211 matches found
pbscan
SUMMARY polarbearscan is an attempt to do faster and more efficient banner grabbing and port scanning. It combines two different ideas which hopefully will make it somewhat worthy of your attention and time. The first of these ideas is to use stateless SYN scanning using cryptographically protect...
santa
Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...
ulexecve
Quick Start Execute dynamic or statically compiled ELF Linux binaries without ever calling execve. root@kitploit: cat /bin/echo | ulexecve - hello hello Introduction This Python tool is called ulexecve and it stands for userland execve. It helps you execute arbitrary ELF binaries on Linux systems...
userland-exec
Userland Exec Userland exec replaces the existing process image within the current address space with a new one. It mimics the behavior of the system call execve, but the process structures describing the process image remain unchanged. In other words, the process name reported by system utilitie...
avml
AVML Acquire Volatile Memory for Linux Краткое описание Портативный инструмент сбора энергозависимой памяти для Linux. AVML — это инструмент сбора энергозависимой памяти в пользовательском пространстве для архитектуры X8664, написанный на Rust и предназначенный для развёртывания в виде статическо...
BadExclusionsNWBO
BadExclusions Now With Better Opsec BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR. How it works? BadExclusionsNWBO copies and runs HookChecker.exe in all folders and subfolders of a given path. You need to have HookChecker.exe ...
the-backdoor-factory
Новая версия BACKDOOR FACTORY доступна! Получить доступ здесь: https://github.com/sponsors/secretsquirrel ПРЕДУПРЕЖДЕНИЕ: Pull Requests БУДУТ ПРОИГНОРИРОВАНЫ И ЗАКРЫТЫ. The Backdoor Factory BDF Только для специалистов по безопасности и исследователей. Цель BDF — патчить исполняемые бинарные файлы...
RIPPL
RIPPL Manipulating PPL protected processes without using a driver This tool implements a userland exploit to manipulate Windows PPL protected processes. The technique was initially discussed by James Forshaw a.k.a. @tiraniddo and Clément Labro a.k.a. @itm4n in the following blogposts. Blog post...
RunAsWinTcb
RunAsWinTcb Overview RunAsWinTcb uses an userland exploit to run a DLL with a protection level of WinTcb-Light. Overview of the vulnerability and the capabilites of an exploit can be found here: https://tastypepperoni.medium.com/running-exploit-as-protected-process-ligh-from-userland-f4c7dfe63387...
UserLAnd
Welcome to UserLAnd The easiest way to run a Linux distribution or application on Android. Features: Run full linux distros or specific applications on top of Android. Install and uninstall like a regular app. No root required. Have a bug report or a feature request? You can see our templates by...
PPLmedic
PPLmedic This tool implements a Userland exploit chain for injecting arbitrary code into a PPL with the signer type Windows and elevating to the signer type WinTcb. These techniques were originally discussed by James Forshaw a.k.a. @tiraniddo in his blog post Injecting Code into Windows Protected...
NTDLLReflection
NTDLLReflection Bypass Userland EDR hooks by Loading Reflective Ntdll in memory from a remote server based on Windows ReleaseID to avoid opening a handle to ntdll , and trigger exported APIs from the export table...
PPLdump
PPLdump ⚠️ 2022-07-24 - A partir de Windows 10 21H2 10.0.19044.1826 actualización de julio de 2022, el exploit implementado en PPLdump ya no funciona. Un parche en NTDLL ahora evita que los PPL carguen Known DLLs. Más información aquí. Esta herramienta implementa un exploit en espacio de usuario...
Freeze
ESTE REPOSITORIO HA SIDO ARCHIVADO Para ver la última versión de Freeze o enviar un problema, consulte https://github.com/Tylous/Freeze. Freeze Más Información Si desea obtener más información sobre las técnicas utilizadas en este marco, eche un vistazo a SourceZero Blog Descripción Freeze es una...
Freeze.rs
ESTE REPOSITORIO HA SIDO ARCHIVADO Para ver la última versión de Freeze.rs o enviar un problema, consulta https://github.com/Tylous/Freeze.rs. Freeze.rs Más Información Si quieres aprender más sobre las técnicas utilizadas en este framework, echa un vistazo al Blog de SourceZero y a la herramient...
wifit3 v0.0.5
wifit3 A standalone USB Wi-Fi auditor for Linux, Windows, and macOS. At least one of the supported USB adapters is required. Why? Cross-Platform: Runs identically on Linux, macOS, and Windows. Wireless Driver Heaven: Built-in wireless stack avoids kernel driver versioning hell and Windows' NDIS...
SUSE CVE-2026-53373
In the Linux kernel, the following vulnerability has been resolved: mm/vma: do not try to unmap a VMA if mmapprepare invoked from mmap The mmapprepare hook functionality includes the ability to invoke mmapprepare from the mmap hook of existing 'stacked' drivers, that is ones which are capable of...
CVE-2026-53373
In the Linux kernel, the following vulnerability has been resolved: mm/vma: do not try to unmap a VMA if mmapprepare invoked from mmap The mmapprepare hook functionality includes the ability to invoke mmapprepare from the mmap hook of existing 'stacked' drivers, that is ones which are capable of...
EUVD-2026-45446
In the Linux kernel, the following vulnerability has been resolved: mm/vma: do not try to unmap a VMA if mmapprepare invoked from mmap The mmapprepare hook functionality includes the ability to invoke mmapprepare from the mmap hook of existing 'stacked' drivers, that is ones which are capable of...
