210 matches found
santa
Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...
ulexecve
Quick Start Execute dynamic or statically compiled ELF Linux binaries without ever calling execve. root@kitploit: cat /bin/echo | ulexecve - hello hello Introduction This Python tool is called ulexecve and it stands for userland execve. It helps you execute arbitrary ELF binaries on Linux systems...
avml
AVML Adquisición de memoria volátil para Linux Resumen Una herramienta portátil de adquisición de memoria volátil para Linux. AVML es una herramienta de adquisición de memoria volátil en el espacio de usuario userland para X8664, escrita en Rust, pensada para desplegarse como un binario estático...
BadExclusionsNWBO
BadExclusions Now With Better Opsec BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR. How it works? BadExclusionsNWBO copies and runs HookChecker.exe in all folders and subfolders of a given path. You need to have HookChecker.exe ...
the-backdoor-factory
¡La nueva versión de BACKDOOR FACTORY está disponible! Obtén acceso aquí: https://github.com/sponsors/secretsquirrel ADVERTENCIA: Las Pull Requests SERÁN IGNORADAS Y CERRADAS. The Backdoor Factory BDF Solo para profesionales de la seguridad e investigadores. El objetivo de BDF es parchear binario...
pbscan
SUMMARY polarbearscan is an attempt to do faster and more efficient banner grabbing and port scanning. It combines two different ideas which hopefully will make it somewhat worthy of your attention and time. The first of these ideas is to use stateless SYN scanning using cryptographically protect...
RIPPL
RIPPL Manipulating PPL protected processes without using a driver This tool implements a userland exploit to manipulate Windows PPL protected processes. The technique was initially discussed by James Forshaw a.k.a. @tiraniddo and Clément Labro a.k.a. @itm4n in the following blogposts. Blog post...
RunAsWinTcb
RunAsWinTcb Overview RunAsWinTcb uses an userland exploit to run a DLL with a protection level of WinTcb-Light. Overview of the vulnerability and the capabilites of an exploit can be found here: https://tastypepperoni.medium.com/running-exploit-as-protected-process-ligh-from-userland-f4c7dfe63387...
UserLAnd
Welcome to UserLAnd The easiest way to run a Linux distribution or application on Android. Features: Run full linux distros or specific applications on top of Android. Install and uninstall like a regular app. No root required. Have a bug report or a feature request? You can see our templates by...
PPLmedic
PPLmedic Questo strumento implementa una catena di exploit in Userland per iniettare codice arbitrario in un PPL con tipo di firmatario Windows ed elevare al tipo di firmatario WinTcb. Queste tecniche sono state originariamente discusse da James Forshaw noto anche come @tiraniddo nel suo articolo...
NTDLLReflection
NTDLLReflection Bypassa gli hook EDR in Userland caricando in memoria una Ntdll riflessiva da un server remoto basato sul ReleaseID di Windows, per evitare di aprire un handle verso ntdll, e invoca le API esportate dalla tabella di esportazione...
PPLdump
PPLdump ⚠️ 2022-07-24 - A partire dall'aggiornamento di luglio 2022 di Windows 10 21H2 10.0.19044.1826 , l'exploit implementato in PPLdump non funziona più. Una patch in NTDLL ora impedisce ai PPL di caricare le Known DLLs. Maggiori informazioni qui. Questo strumento implementa un exploit userland...
Freeze
QUESTO REPOSITORY È STATO ARCHIVIATO Per visualizzare l'ultima versione di Freeze o per inviare un problema, fai riferimento a https://github.com/Tylous/Freeze. Freeze Maggiori Informazioni Se vuoi saperne di più sulle tecniche utilizzate in questo framework, dai un'occhiata al SourceZero Blog...
Freeze.rs
QUESTO REPOSITORY È STATO ARCHIVIATO Per visualizzare l'ultima versione di Freeze.rs o per inviare una segnalazione, fare riferimento a https://github.com/Tylous/Freeze.rs. Freeze.rs Ulteriori Informazioni Se desideri saperne di più sulle tecniche utilizzate in questo framework, dai un'occhiata a...
userland-exec
Userland Exec L'exec in userland sostituisce l'immagine del processo esistente all'interno dello spazio di indirizzi corrente con una nuova. Riproduce il comportamento della chiamata di sistema execve, ma le strutture di processo che descrivono l'immagine del processo rimangono invariate. In altr...
SUSE CVE-2026-53373
In the Linux kernel, the following vulnerability has been resolved: mm/vma: do not try to unmap a VMA if mmapprepare invoked from mmap The mmapprepare hook functionality includes the ability to invoke mmapprepare from the mmap hook of existing 'stacked' drivers, that is ones which are capable of...
CVE-2026-53373
In the Linux kernel, the following vulnerability has been resolved: mm/vma: do not try to unmap a VMA if mmapprepare invoked from mmap The mmapprepare hook functionality includes the ability to invoke mmapprepare from the mmap hook of existing 'stacked' drivers, that is ones which are capable of...
EUVD-2026-45446
In the Linux kernel, the following vulnerability has been resolved: mm/vma: do not try to unmap a VMA if mmapprepare invoked from mmap The mmapprepare hook functionality includes the ability to invoke mmapprepare from the mmap hook of existing 'stacked' drivers, that is ones which are capable of...
