BaRMIe

BaRMIe BaRMIe es una herramienta para enumerar y atacar servicios Java RMI Remote Method Invocation. Los servicios RMI a menudo exponen funcionalidades peligrosas sin controles de seguridad adecuados; sin embargo, los servicios RMI tienden a pasar desapercibidos durante las evaluaciones de...

hacks

Hacks Hacky one-off scripts, tests etc...

SharpSpray

SharpSpray SharpSpray is a Windows domain password spraying tool written in .NET C. Introduction SharpSpray is a C port of DomainPasswordSpray with enhanced and extra capabilities. This tool uses LDAP Protocol to communicate with the Domain active directory services. Features Can operate from...

Syborg

Syborg Syborg is a Recursive DNS Domain Enumerator which is neither active nor completely passive. This tool simply constructs a domain name and queries it with a specified DNS Server. Syborg has a Dead-end Avoidance system inspired from @Tomnomnom's ettu. When you run subdomain enumeration with...

SharpAppLocker

SharpAppLocker C port of the Get-AppLockerPolicy PowerShell cmdlet with extended features. Includes the ability to filter and search for a specific type of rules and actions. Useful when you already bypassed AppLocker initially and you don't want to leave PS logs Looking for a pre-compiled versio...

No-Consolation

No-Consolation Questo è un Beacon Object File BOF che esegue PE non gestiti inline e ne recupera l'output senza allocare una console ovvero senza avviare conhost.exe. Caratteristiche Supporta 64 e 32 bit Supporta EXE e DLL Non crea nuovi processi Non crea nuovi thread Collega i moduli al PEB Salv...

exrop

Exrop Automatischer ROP-Ketten-Generator für x86-64-Binärdateien, unterstützt durch Triton symbolische Ausführung. Funktionen Register auf Konstanten oder andere Register setzen rdi=0x41414141, rdi=rax In Speicher schreiben konstante und registerbasierte Adressen/Werte Strings/Bytes in Speicher...

Slink

Slink è un encoder di shellcode alfanumerico x86 che utilizza semplici operazioni matematiche per riformattare caratteri oltre 7f. La creazione dello strumento è stata ispirata dal seguente exploit EDB-ID: 44455. Ecco l'elenco delle funzionalità attuali: Codifica utilizzando il set di caratteri...

TrickDump

TrickDump O TrickDump despeja o processo lsass sem criar um arquivo Minidump, gerando em vez disso 3 arquivos JSON e 1 arquivo ZIP com os despejos das regiões de memória. Em três etapas: Lock : Obtém informações do SO usando RtlGetVersion. Shock : Obtém o privilégio SeDebugPrivilege com...

dyen

dyen dyen carica una dylib Mach-O in memoria usando la Python stock di macOS e chiama un entry point esportato senza dlopen su quella dylib. L'obiettivo è che l'immagine non sia mai un file standalone sul target e non venga mai registrata con dyld. di cenobyte [email protected] 2026...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: f2fs: fixed the sanity check on the destination blkaddr during recovery. As Wenqing Liu reported in Bugzilla: https://bugzilla.kernel.org/showbug.cgi?id=216456 loop5: detected a change in capacity from 0 to 131072. F2FS-fs...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: HID: hid-pl: handling probe errors Errors in the init process must be reported back; otherwise, we will follow a NULL pointer the first time FF is used...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: f2fs: fixed the sanity check on sbi-totalvalidblockcount. syzbot reported a f2fs bug as follows: ------------ cut here ------------ Kernel BUG at fs/f2fs/f2fs.h:2521! RIP: 0010:decvalidblockcount + 0x3b2/0x3c0, fs/f2fs/f2fs.h:252...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ACPI: APEI: Send SIGBUS to the current task if a synchronous memory error is not recovered. If a synchronous error is detected due to a user-space process triggering a 2-bit uncorrected error, the CPU will raise an exception,...

Astra Linux – Vulnerability in Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: i2c: lpi2c: Avoid calling clkgetrate during transfer Instead of repeatedly calling clkgetrate for each transfer, lock the clock rate and cache the value. A deadlock was observed when adding the tlv320aic32x4 audio codec to the...

CVE-2026-72472 nfs: use nfsi->rwsem to protect traversal of the file lock list

In the Linux kernel, the following vulnerability has been resolved: nfs: use nfsi-rwsem to protect traversal of the file lock list Lingfeng identified a bug and suggested two solutions, but both appear to have issues. Generally, we cannot release flclock while iterating over the file lock list to...

CVE-2026-68250

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma5.2: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit ae658afc7f47f6147371ec42cc6b1a793dfdb5af...

CVE-2026-68131

In the Linux kernel, the following vulnerability has been resolved: rbd: Reset positive result codes to zero in object map update path In a reply message to an RBD request, a positive result code indicates a data payload, which is not allowed for writes. While rbdosdreqcallback already resets a...

CVE-2026-68111

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx9: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit b71604f8685b0eba07866f4e8dc30f93e1931054...

CVE-2026-68267

The CVE-2026-68267 entry concerns the Linux kernel DRM/xe/rtp component. The issue is that OA registers could be whitelisted by default after probe, GT reset, resume, and engine reset, which is a security violation. The root cause is unconditional whitelisting of OA registers. The fix (cherry-pic...