chimera

Chimera 信頼できないコードを、ホストへの安全なアクセスでサンドボックス化する。...

Chimera

Chimera Hardware Emulation & Proximity Exploitation なぜ Hak5 の機材は重くて目立ちます。私のスマートフォンには完全な Linux カーネルが搭載されているので、同じ仕事（HID エミュレーション、RNDIS、マスストレージなど）を ConfigFS を通して直接行えるようにしました。追加のハードウェアは不要。バッグからケーブルがぶら下がることもありません。 ターゲットに差し込み、ペイロードを選び、実行するだけ。キーストロークは直接 /dev/hidg0 に送られます。間に何もありません。 機能 ConfigFS 経由の Raw H...

Chimera

Chimera Unlea$ed 도구 배경 DLL 사이드로딩은 프로그램이 정상적으로 작동하는 데 필요한 라이브러리를 로드하는 등 합법적인 목적으로 사용될 수 있지만, 악의적인 목적으로도 사용될 수 있습니다. 공격자는 DLL 사이드로딩을 이용해 대상 시스템에서 임의 코드를 실행할 수 있으며, 이는 주로 DLL을 로드하는 데 사용되는 합법적인 애플리케이션의 취약점을 악용하여 이루어집니다. DLL 사이드로딩 프로세스를 자동화하고 더 효과적으로 만들기 위해 Chimera가 개발되었습니다. 이 도구는 EDR/AV 제품을 우회하기 위한 회...

Chimera

Chimeraは、AMSIやアンチウイルスソリューションをバイパスするために設計された（派手で非常にハックな）PowerShell難読化スクリプトです。AVをトリガーすることで知られる悪意のあるPS1を消化し、文字列置換と変数連結を使用して一般的な検出シグネチャを回避します。 Chimeraはこのwrite-upのために作成され、検出シグネチャをバイパスすることがいかに簡単であるかを示すさらなる証拠です。このリポジトリが誰かに堅牢で信頼性の高いものを作るきっかけとなることを願っています。 Chimeraの仕組み…...

CVE-2021-40444--CABless

CVE-2021-40444--CABレス版 更新: CABアーカイブに依存しなくてもよいようにコードを修正しました ペイロード実行をトリガーする「index.html」ファイルには、'script'タグ内にコード1行のみが含まれます： PDF形式の記事が提供されています。 更新: デモ動画へのリンク - https://www.youtube.com/watch?v=V9XD3VboEcU 注:...

chimera

RustベースのMobaXterm向けDLLハイジャックローダー CVE-2026-6421 永続化機能付き...

EUVD-2006-0144

Malware in sbrugna...

EUVD-2018-20543

Malware in sbrugna...

EUVD-2006-0145

Malware in sbrugna...

EUVD-2018-20542

Malware in sbrugna...

Malicious code in chimera-dom (npm)

The package chimera-dom was found to contain malicious code...

MAL-2025-16984 Malicious code in chimera-dom (npm)

The package chimera-dom was found to contain malicious code...

Chimera: Harnessing Multi-Agent LLMs for Automatic Insider Threat Simulation

Insider threats, which can lead to severe losses, remain a major security concern. While machine learning-based insider threat detection ITD methods have shown promising results, their progress is hindered by the scarcity of high-quality data. Enterprise data is sensitive and rarely accessible,...

PyPI, npm, and AI Tools Exploited in Malware Surge Targeting DevOps and Cloud Environments

Cybersecurity researchers from SafeDep and Veracode detailed a number of malware-laced npm packages that are designed to execute remote code and download additional payloads. The packages in question are listed below - eslint-config-airbnb-compat 676 Downloads ts-runtime-compat-check 1,588...

Malicious code in chimera-sandbox-extensions (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9b87170278a2bed3680592ca4efa2d402a56ee044fcfea4b95831e545431a794 When started, the code attempts to access multiple domains based on the generating algorithm. Once one valid is found, it downloads a script and executes it. T...

MAL-2025-191701 Malicious code in chimera-sandbox-extensions (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9b87170278a2bed3680592ca4efa2d402a56ee044fcfea4b95831e545431a794 When started, the code attempts to access multiple domains based on the generating algorithm. Once one valid is found, it downloads a script and executes it. T...

SUSE CVE-2018-8935

The Promontory chipset, as used in AMD Ryzen and Ryzen Pro platforms, has a backdoor in the ASIC, aka CHIMERA-HW...

SUSE CVE-2018-8934

The Promontory chipset, as used in AMD Ryzen and Ryzen Pro platforms, has a backdoor in firmware, aka CHIMERA-FW...

Malicious Package

Overview chimera-dom is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Invoke-Stealth - Simple And Powerful PowerShell Script Obfuscator

Invoke-Stealth is a Simple & Powerful PowerShell Script Obfuscator. This tool helps you to automate the obfuscation process of any script written in PowerShell with different techniques. You can use any of them separately, together or all of them sequentially with ease, from Windows or Linux...