scenester

Scenester Scenester - 複数のユーザーエージェントを指定してウェブサイトを視覚的にスナップショットするツール。アプリケーションへのさまざまなエントリーポイントの発見を支援するために設計されています。 NCC Group Plc によりオープンソースとして公開 - http://www.nccgroup.com/ 開発者: Sharique Shaikh、sharique dot shaikh at nccgroup dot com https://www.github.com/nccgroup/scenester AGPL のもとで公開。詳細については LICENSE...

firstexecution

firstexecution 期待されたエントリポイントの外部でコードを実行するためのさまざまな方法のコレクション...

CVE-2026-46588

camel-couchdb CouchDb ヘッダーインジェクション再現コード CVE-2026-46588 このプロジェクトは、Apache Camel の camel-couchdb コンポーネントにおける メッセージヘッダーインジェクション を実証するもので、CVE-2026-46588 として追跡されています。このコンポーネントは動作を制御するために複数の Exchange ヘッダー — CouchDbDatabase、CouchDbSeq、CouchDbId（ドキュメントID）、CouchDbRev（ドキュメントリビジョン）、CouchDbMethod（操作メソッド）—...

patchkit

patchkit 하나 이상의 간단한 Python 스크립트를 사용하여 ELF 바이너리를 패치합니다. 사용법: root@kitploit: patch patchdir|file... patchdir 하나 이상의 Python 패치 파일을 포함하며, 바이너리에서 알파벳 순서로 실행됩니다. 패치 예제 주소를 NOP 처리하고, 어셈블리 함수를 주입하며, 엔트리 포인트를 후킹합니다: root@kitploit: def simplepatchpt: nop out a jump at the entry point pt.patchpt.entry,...

drow

drow 설명 TL;DR drow는 ELF 실행 파일빌드 후에 코드를 삽입하고 진입점을 후킹하는 데 사용되는 명령줄 유틸리티입니다. 수정되지 않은 ELF 실행 파일을 입력으로 받아 런타임에 실행되는 사용자 제공 페이로드가 포함된 수정된 ELF를 내보냅니다. 약간 더 자세히 ... Drow는 새 패치된 ELF를 생성하기 위해 다음 단계를 수행합니다: 1. 수정되지 않은 대상 ELF 실행 파일과 사용자 제공 페이로드위치 독립적인 블롭를 매핑합니다. 2. 프로그램 헤더를 파싱하여 첫 번째 실행 가능 세그먼트를 찾습니다. 3. 섹션...

DotNET_XorCryptor

DotNET XorCryptor また、古いプロジェクト - NET-MalwareCryptor にも注目できます これは、ペイロード暗号化を備えた .NET 実行可能ファイルパッカーです。教育目的のみで使用してください。 使い方 --file path - ファイル名を指定 --flood - ファイルにジャンククラスを追加 --proxy - 元のエントリポイントを Main から移動 例: root@kitploit: xor-pack.exe --file "stub.exe" --proxy --flood...

HvLoader

HvLoader 概要 HvLoader.efi は、外部のハイパーバイザローダーをロードするための EFI アプリケーションです。 HvLoader.efi は指定されたハイパーバイザローダーバイナリ DLL, EFI など をロードし、HvLoader.efi の ImageHandle を渡してそのエントリポイントを呼び出します。これにより、ハイパーバイザローダーバイナリは HvLoader.efi のコマンドラインオプションにアクセスし、それらを設定パラメータとして使用できます。最初の HvLoader.efi コマンドラインオプションは、ハイパーバイザローダーバイナリへのパスで...

EulerOS Virtualization 2.13.1 : python-pip (EulerOS-SA-2026-3193)

According to the versions of the python-pip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to t...

Astra Linux – Vulnerability in edk2

Existing checks in SmmEntryPoint will not catch underflow when calculating BufferSize...

Linux Distros Unpatched Vulnerability : CVE-2026-72215

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIPS: DEC: Ensure 32-bit stack location for o32 promprintf In 64-bit configurations calling any firmware entry points from a kernel thread other than the initia...

PT-2026-71136

In Eclipse RDF4J, several XML parser entry points do not fully restrict XML External Entity XXE processing when parsing untrusted XML-based RDF data or query results, permitting DOCTYPE declarations, external entity references, and external DTD loading. This is due to an incomplete fix for...

EulerOS 2.0 SP13 : python-pip (EulerOS-SA-2026-2993)

According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to the installation...

CVE-2026-47425

Rattler is a library that provides common functionality used within the conda ecosystem. Prior to version 0.43.2, EntryPoint::FromStr in rattlercondatypes performs only .trim on the command field before the linker joins it onto the install prefix and writes an executable Python script. A maliciou...

CVE-2026-47425

Summary: CVE-2026-47425 affects rattler before 0.43.2, enabling a noarch:python entry-point path traversal that can write files outside the intended install prefix. The issue arises in EntryPoint::FromStr within rattler_conda_types, where only .trim() is applied to the command and a malicious noa...

CVE-2026-47425 Rattler vulnerable to entry-point path traversal in noarch:python install (arbitrary file write)

Rattler is a library that provides common functionality used within the conda ecosystem. Prior to version 0.43.2, EntryPoint::FromStr in rattlercondatypes performs only .trim on the command field before the linker joins it onto the install prefix and writes an executable Python script. A maliciou...

CVE-2026-47425 Rattler vulnerable to entry-point path traversal in noarch:python install (arbitrary file write)

Rattler is a library that provides common functionality used within the conda ecosystem. Prior to version 0.43.2, EntryPoint::FromStr in rattlercondatypes performs only .trim on the command field before the linker joins it onto the install prefix and writes an executable Python script. A maliciou...

python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite

A flaw was found in pip, the package installer for Python. A remote attacker can exploit this vulnerability by tricking a victim into installing a malicious Python wheel. This wheel contains specially crafted entry-point names that use directory traversal or absolute paths. This allows pip to wri...

python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite

A flaw was found in pip, the package installer for Python. A remote attacker can exploit this vulnerability by tricking a victim into installing a malicious Python wheel. This wheel contains specially crafted entry-point names that use directory traversal or absolute paths. This allows pip to wri...

PYSEC-2026-2971 rattler has an entry-point path traversal in noarch:python install (arbitrary file write)

Summary EntryPoint::FromStr in rattlercondatypes performs only .trim on the command field before the linker joins it onto the install prefix and writes an executable Python script. A malicious noarch:python package can ship an info/link.json with an entry-point name containing .., /, , or an...

python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite

A flaw was found in pip, the package installer for Python. A remote attacker can exploit this vulnerability by tricking a victim into installing a malicious Python wheel. This wheel contains specially crafted entry-point names that use directory traversal or absolute paths. This allows pip to wri...