1006 matches found
SharpBlackout
SharpBlackout Termina AV/EDR aprovechando el ataque BYOVD Nota: Este proyecto es solo con fines educativos. Sharpblackout es una adaptación del proyecto @Blackout originalmente desarrollado en C++ por @ZeroMemoryEx, que consiste en eliminar AV/EDR mediante el controlador gmer BYOVD. Solo quería...
GoRedOps
GoRedOps Telegram: https://t.me/ebytelabs GoRedOps es una colección de proyectos de Golang diseñados específicamente para red teamers y operaciones de seguridad ofensiva. Este repositorio proporciona varias herramientas y técnicas esenciales para pruebas de penetración, explotación e investigació...
BadRentdrv2
BadRentdrv2 Un driver vulnerable explotado por mí BYOVD que es capaz de terminar varios EDRs y software antivirus en el mercado, volviéndolos ineficaces, funcionando tanto para x32 como para x64. ¿Cómo funciona? Compile apuntando a la arquitectura x32 heredada para un rango de ataque más amplio. ...
CVE-2024-49113
CVE-2024-49113 — PoC de Vulnerabilidad DoS de LDAP en Windows Autor: SafeBreach Estado: Parcheado Microsoft, martes de parches de diciembre de 2024 Puntuación CVSSv3: 7.5 Alta Bypass de Windows Server y EDR comercial Autor: Tim Shing Estado: Sin parchear Puntuación CVSSv3: 7.4 Alta ⚠️ Aviso legal...
CVE-2026-15460
The Bluetooth Classic BR/EDR L2CAP receive handler btl2capbrrecv in subsys/bluetooth/host/classic/l2capbr.c dispatched inbound data PDUs based only on the destination channel ID, without checking that the target channel had reached the BTL2CAPCONNECTED state. A dynamic channel is assigned its RX...
CVE-2026-15460 Missing channel-state validation in Zephyr Bluetooth Classic L2CAP receive path
The Bluetooth Classic BR/EDR L2CAP receive handler btl2capbrrecv in subsys/bluetooth/host/classic/l2capbr.c dispatched inbound data PDUs based only on the destination channel ID, without checking that the target channel had reached the BTL2CAPCONNECTED state. A dynamic channel is assigned its RX...
EUVD-2026-75212
The Bluetooth Classic BR/EDR L2CAP receive handler btl2capbrrecv in subsys/bluetooth/host/classic/l2capbr.c dispatched inbound data PDUs based only on the destination channel ID, without checking that the target channel had reached the BTL2CAPCONNECTED state. A dynamic channel is assigned its RX...
HydraDragonAntivirus openedr-v2-release-9
Hydra Dragon Antivirus 📚 For detailed documentation, architecture diagrams, and component guides, visit our Project Wiki. WARNING: ACTIVE DEVELOPMENT IN PROGRESS This project is not production-ready. Breaking changes, bugs, and incomplete features should be expected. ⚠️ NOTICE: This repository is...
CVE-2026-85218
A double stack-based buffer overflow was found in the BlueZ AVRCP controller implementation. A nearby BR/EDR peripheral can send a crafted AVRCP player-settings response that supplies an attacker-controlled attribute count, causing avrcplistplayerattributesrsp and avrcpgetcurrentplayervalue in...
macnoise v0.5.0
MacNoise MacNoise generates real macOS telemetry: network connections, file writes, process spawns, plist mutations, TCC probes, and more. Point it at a machine running your EDR, SIEM, or firewall stack and see what actually fires - not what the vendor datasheet claims will fire. For background o...
SysWhispers4
SysWhispers4 通过直接和间接系统调用实现 AV/EDR 规避 Windows NT 3.1 至 Windows 11 24H2 · x64 · x86 · WoW64 · ARM64 SysWhispers4 是一个基于 Python 的系统调用存根生成器，可生成 C/ASM 代码，直接调用 NT 内核函数，绕过 AV/EDR 产品在 ntdll.dll 上放置的用户态挂钩。 它继承了 SysWhispers → SysWhispers2 → SysWhispers3 的演进脉络，这一版本新增了迄今最全面的 SSN 解析策略、调用方法和规避能力。 演进：SysWhispers...
stealth_call
Cos'è? Libreria header-only per Windows x64 che consente di invocare qualsiasi syscall NT senza toccare gli import di ntdll, senza lasciare stringhe nel binario e senza i soliti campanelli d'allarme che fanno impazzire gli EDR. Niente CRT. Niente STL. Niente IAT. L'intero progetto compila a circa...
UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit
Cybersecurity researchers have disclosed details of a Chinese-speaking cybercrime group dubbed UAT-10147 that's targeting Windows and Linux web servers globally across the education, media, technology, and gaming sectors. The vast majority of the targets are located in Brazil, Bolivia, China,...
SUSE CVE-2026-76922
Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit, and More
A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do. Signed drivers get turned against defenses. Legitimate apps help malware blend in. A weak header check opens a path to code execution. Elsewhere, exposed systems, old bugs, odd hiding tricks, and...
UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities
UAT-10147 is a highly capable Chinese-speaking intrusion actor operating a multi-platform post-exploitation ecosystem targeting IIS and Linux servers, combining search engine optimization SEO fraud monetization with advanced persistence and defense evasion techniques. The newly identified SPECTRE...
EUVD-2026-63157
Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
Linux Distros Unpatched Vulnerability : CVE-2026-76922
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76922 Note that Nessus relies on the...
