massdns

MassDNS A high-performance DNS stub resolver MassDNS is a simple high-performance DNS stub resolver targeting those who seek to resolve a massive amount of domain names in the order of millions or even billions. Without special configuration, MassDNS is capable of resolving over 350,000 names per...

CVE-2026-98260

CVE-2026-98260 — posix-cpu-timers UAF Android LPE English | 简体中文 Vulnerability Item| Value ---|--- CVE| CVE-2026-98260 Type| LPE, use-after-free timerqueue rb-tree erase Target| Honor MagicPad3 Pro 13.3 YLP-W00 Android 16 Kernels| 6.12.38 MagicOS 10.0.0, 6.12.58 MagicOS 11.0.0.109 SELinux|...

poc-CVE-2025-38352

Exploit Details This repository only contains the proof-of-concept that triggers the vulnerability. I have since written a full exploit for this vulnerability. You can find the details in the link below. https://github.com/farazsth98/chronomaly Analysis Blog Posts Part 1 -...

ProcDump-for-Linux

ProcDump ProcDump is a Linux and Mac reimagining of the classic ProcDump tool from the Sysinternals suite of tools for Windows. ProcDump provides a convenient way for Linux and Mac developers to create core dumps of their application based on performance triggers. ProcDump for Linux and Mac is pa...

detux

Detux: The Multiplatform Linux Sandbox Introduction: Detux is a sandbox developed to do traffic analysis of the Linux malwares and capture the IOCs by doing so. QEMU hypervisor is used to emulate Linux Debian for various CPU architectures. The following CPUs are currently supported: x86 x86-64 AR...

CVE-2023-29409

CVE-2023-29409 $ openssl genrsa -out ca-key.pem 2048 $ openssl req -x509 -new -nodes -key ca-key.pem -sha256 -days 100000 -out ca.pem \ -addext 'keyUsage=keyCertSign' \ -subj '/CN=Root CA' $ go run main.go server in the background $ go run main.go client causes high cpu load on client $ go run...

CVE-2026-98260-vivo-s60-poc

CVE-2026-98260 vivo S60 PD2571 PoC POSIX CPU timer UAF → uid-0 shell + KernelSU late-load 仅用于对自己拥有或已获授权的设备进行安全研究。利用代码刻意不做持久化、不写分区、不留下后门；使用风险自负。 背景 因为更新了谷歌安全更新10月补丁，导致无法使用 ghostlock 临时root 目标设备 项目| 值 ---|--- 设备| vivo PD2571 / V2571A vivo S60 内核| 6.1.145-android14-11-maybe-dirty 系统版本| 16.0.11.15.W1...

poc-CVE-2026-98258

CVE-2026-98258 CVE-2026-98258: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list https://lore.kernel.org/linux-cve-announce/2026100657-CVE-2026-98258-c067@gregkh/ Proof-of-Concept for CVE-2026-98258...

CVE-2026-64560-Analysis

CVE-2026-64560 — Linux Kernel posix-cpu-timers non-leader exec race UAF Reproducer / PoC trigger verification : Linux & Android NDK This repository is intended solely for verifying patch status and for research/learning on your own test devices. It does not contain any privilege...

CVE-2026-98260

CVE-2026-98260 Timer LPE CVE-2026-98260 POSIX CPU timer UAF 移植，支持情况见「内核支持」 两条链： timer：真实 cred 零写 → uid=0、u:r:shell:s0（shell 域 root，bset caps） timer fake：fake cred（full caps）→ 安装版 KernelSU libksud.so late-load 状态 路径| 结果 ---|--- real cred 零写 + setuid0 + exec sh| uid=0、u:r:shell:s0、ROOTSHELLOK fake...

ExecASLR-ekoparty

ExecASLR - Abusing Intel branch predictors to bypass ASLR What is ASLR Address Space Layout Randomization is a mitigation used to make harder to exploit memory corruption attacks. In a scenario of a buffer overflow vulnerability, for example, an attacker that tries to make a Return Oriented...

GhostLock-CVE-2026-98260

CVE-2026-98260 for iQOO Neo11 V2520A A local privilege escalation payload based on a POSIX CPU Timer UAF, adapted for kernel 6.6.89-android15-8. ⚠️ Notes This vulnerability is a kernel-mode memory corruption UAF; the first run will most likely cause the phone to go black or a kernel Panic crash an...

COPG

🎮 COPG — Advanced Android Customization & Spoofing A powerful platform for device & app spoofing, system-level control, and advanced ROM capabilities. 🌐 Official website — download COPG free & buy COPG PRO: vendors.copg.my 🌐 Languages / 语言：English · 简体中文 ✨...

shootback

shootback shootback is a reverse TCP tunnel let you access target behind NAT or firewall 反向TCP隧道, 使得NAT或防火墙后的内网机器可以被外网访问. Consumes less than 1% CPU and 8MB memory under 800 concurrency. slaver is single file and only depends on python2.7/3.4+ standard library. How it works Typical Scene 1. Access...

MCExtractor

MCExtractor Intel, AMD, VIA & Freescale Microcode Extraction Tool MC Extractor News Feed MC Extractor Discussion Topic Intel, AMD, VIA & Freescale CPU Microcode Repositories A. About MC Extractor MC Extractor is a tool which parses Intel, AMD, VIA and Freescale processor microcode binaries. It ca...

sogen

Sogen runs Windows, Linux and macOS programs, without a real operating system: It lets you see and control everything they do. Instead of reimplementing thousands of OS APIs, Sogen emulates binaries at CPU and syscall level and runs the real system DLLs , so behavior closely matches the real OS...

CVE-2022-38725

CVE-2022-38725 CVE-2022-38725 is an unauthenticated Denial of Service vulnerability in syslog-ng versions prior to 3.38.1. https://github.com/syslog-ng/syslog-ng/security/advisories/GHSA-7932-4fc6-pvmc https://nvd.nist.gov/vuln/detail/CVE-2022-38725 Steps to Reproduce 1. Pull a vulnerable docker...

cpufetch

Simple yet fancy CPU architecture fetching tool cpufetch is a command-line tool written in C that displays the CPU information in a clean and beautiful way Table of contents 1. Support 2. Installation 2.1 Installing from a package 2.2 Building from source 2.3 Android 3. Examples 3.1 x8664 3.2...

phpstress

phpstress Night Lion Security proof of concept denial of service / stress tester for PHP websites running with Apache and NGINX systems PHP-FPM and PHP-CGI Using a standard cable/DSL connection, this attack can flood a Linux web server’s CPU and RAM using standard HTTP requests. This attack effec...

cve-2025-26466-openssh-poc

CVE-2025-26466 OpenSSH SSH2MSGPING DoS PoC Disclaimer: This code is intended exclusively for educational purposes and authorized security testing. Unauthorized attacks against third-party systems are illegal. Vulnerability CVE-2025-26466 is a pre-authentication denial-of-service DoS vulnerability...