Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: rcv: Fixed an oops caused by the irqsoff latency tracer. The tracehardirqson,off functions require the caller to properly set up the frame pointer. This is because these two functions use the macro CALLERADDR1 also known as...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ARM: 9317/1: kexec: Make smp stop calls asynchronous If a panic is triggered by a hrtimer interrupt, all online CPUs will be notified and set to offline. However, as highlighted in the commit 19dbdcb8039c “smp: Warn on function...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: secretmem: Disable memfdsecret if arch cannot set the direct map. The memfdsecret syscall returns -ENOSYS if !cansetdirectmap is true. This occurs, for example, in some arm64 configurations, where marking 4k PTEs in the direct ma...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fixed NULL pointer dereferencing in acpievaddressspacedispatch. A new check was added to cover missed execution paths...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: using arrayindexnospec with indices that come from the guest min and destid are guest-controlled indices. Using arrayindexnospec after the bounds checks helps to mitigate speculative execution side-channels by clamping...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: arm64: Do not call NULL in docompatalignmentfixup doalignmentt32tohandler only fixes up alignment faults for specific instructions; it returns NULL otherwise e.g., for LDREX. When this is the case, it signals to the caller that i...

cve-2019-12750

Symantec Local Privilege Escalation - CVE-2019-12750 Basado en el excelente análisis de Kyriakos Economou: https://labs.nettitude.com/blog/cve-2019-12750-symantec-endpoint-protection-local-privilege-escalation-part-1/ Por ahora solo se admiten versiones x64 y versiones anteriores de Windows...

ics-forensics-tools

ICSpector: Microsoft ICS Forensics Framework Microsoft ICS Forensics Tools framework is an open-source forensics framework that enables the analysis of Industrial PLC metadata and project files. The framework provides investigators with a convenient way to scan for PLCs and identify any suspiciou...

dr_checker

DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers This repo contains all the sources, including setup scripts. Now with an Amazing UI to view the warnings along with corresponding source files. Tested on Ubuntu = 14.04.5 LTS Announcements 16 Feb 2018 : DR.CHECKER has bee...

sandmap

sandmap Description • How To Use • Command Line • Configuration • Requirements • Other • Contributing • License • Wiki Description sandmap is a tool supporting network and system reconnaissance using the massive Nmap engine. It provides a user-friendly interface, automates and speeds up scanning...

ArchStrike

ArchStrike 面向安全专业人士和爱好者的 Arch Linux 仓库。 遵循 Arch 之道，针对 i686、x8664、ARMv6、ARMv7 和 ARMv8 优化。 我们的网站 我们的推特 ArchStrike 是一个面向 Arch Linux 用户的渗透测试与安全仓库，遵循 Arch Linux 标准，保持软件包干净、规范且易于维护。 我们竭力维护该仓库，并为用户提供高质量的 ArchStrike 体验。 如果您在使用中遇到问题，请通过 GitHub、IRC、推特或电子邮件联系我们——我们欢迎有助于改进的反馈。 联系方式 电子邮箱：[email protected]...

wotop

Web-On-Top-Of-Protocol WOTOP root@kitploit: ██╗ ██╗ ██████╗ ████████╗ ██████╗ ██████╗ ██║ ██║██╔═══██╗╚══██╔══╝██╔═══██╗██╔══██╗ ██║ █╗ ██║██║ ██║ ██║ ██║ ██║██████╔╝ ██║███╗██║██║ ██║ ██║ ██║ ██║██╔═══╝ ╚███╔███╔╝╚██████╔╝ ██║ ╚██████╔╝██║ ╚══╝╚══╝ ╚═════╝ ╚═╝ ╚═════╝ ╚═╝ Introduction WOTOP is a...

altair

ALTAIR - 模块化Web漏洞扫描器 Copyleft by Simone Margaritelli [email protected] http://www.evilsocket.net - http://www.backbox.org 用法：altair 选项 -u 示例： altair --filter=lfi,rfi --url=http://www.somesite.com altair --filter=sqli --load-modules=sqlmap --url=http://www.somesite.com 选项： -h, --help...

CVE-2026-43284-Dirty-Frag

CVE-2026-43284 Dirty Frag Exploit precompilado para CVE-2026-43284 Dirty Frag. Código fuente original de V4bel/dirtyfrag. Compilación root@kitploit: make glibc static build make zig-musl-static ZIGTARGET=x8664-linux-musl musl static build Descarga Descargue los binarios precompilados desde...

cve-2017-5753

CVE-2017-5753 CVE-2017-5753, Spectre, PoC, C, ASM para OSX, MAC, Intel Arch Compilar: gcc -o a.out spectre.c Salida: 0x41414141 También se agregó la salida de Control Flow desde Hopper.app para Aprendices Visuales Puedes ajustar el tamaño de basura y obtener lecturas más confiables Dependiendo de...

zephyr

ElasticSearch index map examples This directory contains ElasticSearch data store index map examples for use by uploadtestresultses.py script for Twister JSON reports upload. An index map file allows to create destination index files on ElasticSearch server with explicit scheme having all require...

libunwind_CVE-2015-3239

-- mode: Outline - - 这是 unwind 库的版本 1.0。此库支持以下几种架构/操作系统组合： Linux/x86-64: 工作正常。 Linux/x86: 工作正常。 Linux/ARM: 工作正常。 Linux/IA-64: 经过充分测试并受支持。 Linux/PARISC: 工作正常，但 C 库缺少 unwind 信息。 HP-UX/IA-64: 大部分可用，但已知存在一些严重限制。 Linux/AArch64: 新添加。 Linux/PPC64: 新添加。 Linux/SuperH: 新添加。 FreeBSD/i386: 新添加。...

CVE-2026-31431-Copy-Fail

CVE-2026-31431 Copy Fail Exploit precompilado para CVE-2026-31431 Copy Fail. Código fuente original de tgies/copy-fail-c, con el objetivo de compilación i386 x8632 añadido. Descubrimiento de la vulnerabilidad y PoC original por theori-io/copy-fail-CVE-2026-31431. Artículo canónico: copy.fail...

KernelPatch

KernelPatch Parcheando y enganchando el kernel de Linux con solo una imagen de kernel de Linux stripped. root@kitploit: | |/ / | | \ | | | | | ' // \ '| ' \ / \ | | / | / | ' \ | . \ / | | | | | / | / | | || | | | | ||\|| || ||||| ,|\|| || Obtener toda la información de símbolos sin código...

CVE-2019-0887

CVE-2019-0887 Compila el CVE-2019-0887, renómbralo a winhlp.dll Compila InstallHook, renómbralo a hook.exe cuidado, deben compilarse con x64 Ponlos en el sistema malvado tal cual root@kitploit: c:\windows\hook.exe c:\windows\winhlp.dll c:\windows\winhlp64.exe something evil Si alguien quiere...