Skrull

Skrull Skrull is a malware DRM, that prevents Automatic Sample Submission by AV/EDR and Signature Scanning from Kernel. It generates launchers that can run malware on the victim using the Process Ghosting technique. Also, launchers are totally anti-copy and naturally broken when got submitted. It...

vaultize_CVE-2024-36079

취약점 정보 온프레미스 Vaultize DRM v.21.07.27은 임의 파일 업로드에 취약합니다. 파일 이름이 파일 시스템의 절대 경로 일부를 포함하는 경우 파일명 필터링이 없어 업로드될 수 있습니다. 파일을 다운로드하려고 하면 애플리케이션이 파일 시스템의 최종 경로에 임시 파일을 생성합니다. 이 파일은 다운로드가 완료될 때까지 존재하다가 삭제됩니다. 이로 인해 공격자는 애플리케이션의 권한으로 모든 디렉터리에 임의 파일을 쓸 수 있습니다. 데모 제품 배포의 한 형태는 애플리케이션의 온프레미스 버전이 설치된 사전 구축 VMwa...

wcw-cyberring-pav-decryptor

WCW CyberRing PAV 복호화기 1999년 독점 비디오 DRM 시스템에 대한 암호 분석으로, 정적 바이너리 분석과 기지 평문 공격을 통해 51분 분량의 유실된 미디어를 복구했습니다. 복구된 "CyberRing" 경기의 한 프레임. WCW 레슬러들은 블루 스크린 앞에서 촬영된 후 CGI 경기장에 화염 효과와 함께 합성되었습니다. 이것이 1999년 인터랙티브 엔터테인먼트의 모습이었습니다. 배경 WCW 인터넷 파워디스크Internet Powerdisk 는 1999년 WCW 매거진과 함께 배포된 프로모션 CD-ROM이었습니다...

ParanoiDF

ParanoiDF PDF 분석 도구의 스위스 군용 칼. peepdf 기반 - http://peepdf.eternal-todo.com. 이 README는 peepdf README를 기반으로 작성되었습니다. 이 도구는 영국 캔터베리에 있는 켄트 대학교 컴퓨팅 학부School of Computing, University of Kent, Canterbury, UK의 M.Sc 논문/프로젝트의 일환으로 개발되었습니다. 이 도구의 아이디어를 낸 사람은 Julio Hernandez-Castrowww.azhala.com입니다. 홈페이지...

widevine-l3-decryptor

사용 중단 경고 이 저장소는 한때 Windows 머신의 Chrome에서 Widevine L3 DRM을 우회하는 코드를 포함하고 있었습니다. 2021년 5월 31일부터 더 이상 작동하지 않지만, 리버싱 글을 읽을 수 있습니다. 업데이트 Google은 이 저장소의 대부분의 포크에 대해 DMCA 삭제 요청을 발행했습니다. 당시 저장소의 원본 내용은 아래에 보관되어 있습니다. Widevine L3 복호화기 Widevine은 Google 소유의 DRM 시스템으로, Netflix, Spotify 등 많은 인기 스트리밍 서비스에서 미디어...

widevine-l3-decryptor

Deprecation Warning This repository used to contain code to circumvent Widevine L3 DRM in Chrome on Windows machines. It's not working anymore as of May 31st 2021, but you can read the reversing writeup. Update Google issued a DMCA takedown request against most forks of this repository. The...

DRMBinViaOrdinalImports

DRMBinViaOrdinalImports - コピー防止DRMマルウェアの作成 クイックリンク Maldev Academy ホーム Maldev Academy シラバス Maldev Academy 料金 概要 このリポジトリでは、プログラムのImport Address Table（IAT）を変更し、インポートされた関数名を対応するオーディナル（序数）に置き換える手法を使用しています。その結果、関数をオーディナル経由でのみインポートするバイナリが生成されます。...

MiracleLinux 9 : kernel-5.14.0-687.41.1.el9_8 (AXSA:2026-1947:89)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1947:89 advisory. kernel: netfilter: nfconntrackh323: fix OOB read in decodechoice CVE-2026-43233 kernel: drm/amdkfd: Fix out-of-bounds write in kfdeventpageset...

SUSE CVE-2026-97620

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches emitrendercacheflush sets PIPECONTROL0HDCPIPELINEFLUSH to flush the L2/HDC data cache before fence signalling, but it never requests a flush of the LSC untyped L1...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2026_55765)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202655765 advisory. kernel: mm/slub: avoid accessing metadata when pointer is invalid in objecterr CVE-2025-39902 kernel: drm/amdkfd: Fix out-of-bounds write in kfdeventpages...

CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1768774361)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1768774361 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix UBSAN shift-out-of- bounds warning If...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_45192)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202645192 advisory. kernel: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O CVE-2025-40026 kernel: dm log: fix out-of-bounds write due to regioncount...

Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_71602)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202671602 advisory. kernel: fbcon: Set fbdisplayi-mode to NULL when the mode is released CVE-2025-40323 kernel: libceph: fix potential use-after-free in havemonandosdmap...

Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_53330)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202653330 advisory. kernel: fsnotify: Fix ordering of iput and watchedobjects decrement CVE-2024-53143 kernel: shmem: fix recovery on rename failures CVE-2025-71072 kernel...

CentOS Linux 7 [TuxCare] Security Update: kernel / kernel-debug / kernel-debug-devel / kernel-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2025:1743676155)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1743676155 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm: nv04: Fix out of bounds access When Output Resource dcb-or...

CentOS Linux 7 [TuxCare] Security Update: bpftool / kernel / kernel-debug / kernel-debug-devel / kernel-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2024:1727692412)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2024:1727692412 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix mcdata out-of-bounds read warning Clear warning th...

Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_67471)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202667471 advisory. kernel: tls: Use skdstget and dstdevrcu in getnetdevforsock CVE-2025-40149 kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improp...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_67150)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202667150 advisory. kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset CVE-2025-68745 kernel: drm/xe: Open-code...

Rocky Linux 9 [CIQ] Security Update: kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crxsa-2026_45192)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crxsa-202645192 advisory. kernel: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O CVE-2025-40026 kernel: dm log: fix out-of-bounds write due to regioncount...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1762171389)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1762171389 advisory. - In the Linux kernel, the following vulnerability has been resolved: ext4: add EXT4IGETBAD flag to prevent unexpected bad inode The...