CVE-2024-23700

CVE-2024-23700 - PoC di escalation dei privilegi Android Companion Device Progetto che illustra CVE-2024-23700, una vulnerabilità di escalation dei privilegi relativa al meccanismo Companion Device su Android. Il PoC mostra come un'app possa sfruttare il flusso di associazione del dispositivo...

fingerprintx

Features • Installation • Usage • Running fingerprintx • Using as a library • Why not nmap? • Notes • Acknowledgements fingerprintx is a utility similar to httpx that also supports fingerprinting services like as RDP, SSH, MySQL, PostgreSQL, Kafka, etc. fingerprintx can be used alongside port...

AVIator

AviAtor Portato a NETCore 5 con un'interfaccia utente aggiornata AV|Ator Informazioni ://nome AV : Antivirus Ator : È un spadaccino, alchimista, scienziato, mago, studioso e ingegnere, con la capacità di produrre talvolta oggetti dal nulla https://en.wikipedia.org/wiki/Ator Informazioni ://scopo...

am335xbootrom

Reverse Engineering the AM335x Boot ROM Sono passati probabilmente diciotto mesi da quando ho messo le mani su alcune schede Beaglebone Black, salvate dalla spazzatura. Purtroppo, le schede non funzionavano subito. Ora, era la prima volta che lavoravo con una di queste schede, o con qualsiasi...

android-classyshark

ClassyShark Introduzione ClassyShark è uno strumento di ispezione binaria standalone per sviluppatori Android. Può navigare in modo affidabile qualsiasi eseguibile Android e mostrare informazioni importanti come interfacce e membri delle classi, conteggi dex e dipendenze. ClassyShark supporta...

createdump

Windows App LSASS Dump - Prova di concetto Questo progetto dimostra come eseguire il dump del processo LSASS utilizzando lo strumento createdump.exe, un eseguibile firmato Microsoft, dall'app Windows, sfruttando un hook personalizzato per consentire l'accesso al processo LSASS. root@kitploit:...

GlobalUnProtect

GlobalUnProtect PoC tool per decrittare e raccogliere configurazione, cookie e file HIP di GlobalProtect da installazioni client Windows. Post del blog: https://rotarydrone.medium.com/4a1d8fc7773e Utilizzo Eseguire come standalone o in-memory tramite execute-assembly o equivalente. Raccoglie tutt...

windows-api-function-cheatsheets

Windows-API-Funktions-Spickzettel Kontakt 🌨️ Tetsuo: https://www.x.com/tetsuo Inhaltsverzeichnis Windows-API-Funktions-Spickzettel Dateioperationen Prozessverwaltung Speicherverwaltung Thread-Verwaltung Dynamic-Link-Library-Verwaltung DLL Synchronisierung Interprozesskommunikation Windows-Hooks...

sleep_python_bridge

Cobalt Strike Sleep Python Bridge Questo progetto è un 'ponte' tra il linguaggio Sleep e Python. Consente il controllo di un teamserver di Cobalt Strike tramite Python senza la necessità del client GUI standard. NOTA: questo progetto è molto in BETA. L'obiettivo è fornire un parco giochi per i te...

PANIX

PANIX - Persistência Contra NIX O PANIX é um framework de persistência Linux poderoso, modular e altamente personalizável, projetado para pesquisadores de segurança, engenheiros de detecção, testadores de penetração, entusiastas de CTF e muito mais. Construído com versatilidade em mente, o PANIX...

CVE-2026-61800

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.4.0 through 4.14.6, a party holding the cluster key can write, overwrite, or delete arbitrary files under /var/ossec on worker nodes, leading to remote code executi...

pipe-intercept

pipe-intercept Intercettare la comunicazione delle Named Pipe di Windows utilizzando Burp o strumenti proxy HTTP simili Le named pipe sono molto diffuse per la comunicazione tra processi su Windows. Vengono utilizzate in molte applicazioni, inclusa la chiamata di procedura remota RPC di Windows. ...

SUSE CVE-2026-63074

Issue summary: The OpenSSL Certificate Management Protocol CMP caches additional certificates extraCerts sent in a CMP message, but never expunges them for instance if they are invalid. If a server reuses an OSSLCMPCTX frequently, this cache of extraCerts may grow unboundedly, and a malicious...

SUSE CVE-2026-72056

In the Linux kernel, the following vulnerability has been resolved: net: ena: clean up XDP TX queues when regular TX setup fails createqueueswithsizebackoff creates XDP TX queues before setting up the regular TX path. If the subsequent allocation or creation of regular TX queues fails, the error...

SUSE CVE-2026-72061

In the Linux kernel, the following vulnerability has been resolved: net: sit: require CAPNETADMIN in the device netns for changelink ipip6changelink operates on at most two netns, devnetdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other than t...

SUSE CVE-2026-72063

In the Linux kernel, the following vulnerability has been resolved: gpio: tegra: do not call pinctrl for GPIO direction tegragpiodirectioninput and tegragpiodirectionoutput already program the GPIO controller direction registers directly. The additional pinctrlgpiodirectioninput/output calls do n...

SUSE CVE-2026-72089

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Reject firmware log with size smaller than header fwlogfrombo validates the tracing buffer headersize and that the log fits within the BO, but never checks that log-size is at least log-headersize. fwlogprintbuffer th...

SUSE CVE-2026-72091

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject user command submission without a command BO amdxdnadrmsubmitexecbuf passes the user-supplied command BO handle straight into amdxdnacmdsubmit with drvcmd == NULL. When the handle is AMDXDNAINVALIDBOHANDLE 0...

SUSE CVE-2026-72113

In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing device refcount for CAN filter removal sashiko-bot remarked a problem with a concurrent device unregistration in isotp.c which also is present in the bcm.c code. A former fix for raw.c commit c275a176e4b6...

SUSE CVE-2026-72218

In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlmfile refcount leak on cached nlmdofopen failure The cached-file path in nlmlookupfile reaches the found: label unconditionally, even when nlmdofopen fails. At that label result and file-fcount are updated before th...