thc-tips-tricks-hacks-cheat-sheet

النصائح والحيل والاختراقات المفضلة لدى THC ورقة الغش https://thc.org/tips مجموعة من حيلنا المفضلة. العديد من هذه الحيل ليست منا. نحن فقط نجمعها. نعرض الحيل 'كما هي' دون أي شرح لسبب عملها. تحتاج إلى معرفة لينكس لفهم كيف ولماذا تعمل. لديك حيل؟ انضم إلينا https://thc.org/ops 1. Bash 1. إعداد صدفة...

am335xbootrom

هندسة عكسية لـ AM335x Boot ROM ربما مرّت ثمانية عشر شهرًا منذ أن حصلت لأول مرة على بضع لوحات Beaglebone Black، كانت قد أُنقذت من حاوية النفايات. لسوء الحظ، لم تعمل اللوحات مباشرة. الآن، كانت هذه أول تجربة لي مع واحدة من هذه اللوحات، أو أي حاسوب أحادي اللوحة في هذا الشأن، لذلك لم أكن متأكدًا مما إ...

ShimMe

ShimMe Outils de la conférence DEFCON 32 "SHIM me what you got - Manipulating Shim and Office for Code Injection" Office Injector - appelle une méthode RPC dans le service OfficeClickToRun qui injecte une DLL dans un processus suspendu s'exécutant sous NT AUTHORITY\SYSTEM lancé par le service du...

dnSpy

dnSpy - नवीनतम रिलीज़ dnSpy एक डीबगर और .NET असेंबली संपादक है। आप इसका उपयोग असेंबलियों को संपादित और डीबग करने के लिए कर सकते हैं, भले ही आपके पास कोई स्रोत कोड उपलब्ध न हो। मुख्य विशेषताएं: .NET और Unity असेंबलियों को डीबग करें .NET और Unity असेंबलियों को संपादित करें हल्की और गहरी थीम अधिक...

lst2x64dbg

lst2x64dbg This command extracts all the labels found in the LST file that is given as the single argument. An x64dbg database is created in the current directory based on the extracted labels. The LST file can be generated in IDA from the File menu: Produce file - Create LST file... Example...

ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...

GlobalUnProtect

GlobalUnProtect أداة PoC لفك تشفير وجمع إعدادات GlobalProtect وملفات تعريف الارتباط وملفات HIP من تثبيتات عملاء ويندوز. المقال: https://rotarydrone.medium.com/4a1d8fc7773e الاستخدام قم بتشغيلها كأداة مستقلة أو في الذاكرة عبر execute-assembly أو ما يعادلها. تقوم بجمع كل المحتويات إلى ملف zip في...

gradle-static-analysis-plugin

مهمل إضافة التحليل الثابت لـ Gradle ⚠️ يتم صيانة نسخة متفرعة من هذا المشروع على https://github.com/GradleUp/static-analysis-plugin/ يرجى الترحيل باستخدام معرف الإضافة com.gradleup.static-analysis بدلاً من ذلك. إضافة Gradel لتطبيق نفس إعدادات أدوات التحليل الثابت بسهولة عبر مشاريع Android أو Java أ...

Digital-Privacy

Anglais | 简体中文 Il existe deux types de cryptographie dans ce monde : celle qui empêchera votre petite sœur de lire vos fichiers, et celle qui empêchera les grands gouvernements de lire vos fichiers. Bruce Schneier《Applied Cryptography》 Contenu : Protection de l'information, ressources de...

windows-api-function-cheatsheets

أوراق غش دوال Windows API التواصل 🌨️ Tetsuo: https://www.x.com/tetsuo جدول المحتويات أوراق غش دوال Windows API عمليات الملفات إدارة العمليات إدارة الذاكرة إدارة الخيوط إدارة مكتبات الارتباط الديناميكي DLL المزامنة التواصل بين العمليات خطافات Windows التشفير تصحيح الأخطاء Winsock عمليات السجل معالج...

EUVD-2026-70871

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SFTP service credentials of the SmartIT Agent application from the source code, thereby browsing the file system of the user's host...

CVE-2026-85149 Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SFTP service credentials of the SmartIT Agent application from the source code, thereby browsing the file system of the user's host...

CVE-2026-85149

Lightstar SmartIT Desktop Manager is affected by a Use of Hard-coded Credentials vulnerability. The SFTP service credentials for the SmartIT Agent application are embedded in the source code, allowing unauthenticated remote attackers to extract them and gain access to browse the file system of th...

CVE-2026-85149 Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials

SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the SFTP service credentials of the SmartIT Agent application from the source code, thereby browsing the file system of the user's host...

dockerized-android

Dockerized Android Dockerized Android is a container-based framework that allows to execute and Android Emulator inside Docker and control it through a browser. This project has been developed in order to provide a starting point for integrating mobile security components into Cyber Ranges but it...

kernel: smb: client: fix query directory replay double-free

A flaw was found in the Linux kernel's Server Message Block SMB client. This vulnerability, a double-free error, occurs when the client attempts to free the same memory buffer twice during a directory query operation. An attacker could potentially exploit this flaw to cause memory corruption,...

kernel: crypto: qat - validate RSA CRT component lengths

A flaw was found in the Linux kernel's QAT QuickAssist Technology crypto module. This vulnerability occurs in the RSA key parser when handling CRT Chinese Remainder Theorem components. An underflow can happen during a memory copy operation if an RSA CRT component is larger than its allocated...

kernel: pNFS: Fix use-after-free in pnfs_update_layout()

A flaw was found in the Linux kernel's parallel Network File System pNFS component. An issue in the pnfsupdatelayout function causes a use-after-free vulnerability due to incorrect ordering of memory management operations. This flaw can be triggered when the system attempts to update a pNFS layou...

kernel: smc: Fix use-after-free in __pnet_find_base_ndev()

In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in pnetfindbasendev. syzbot reported use-after-free of netdevice in pnetfindbasendev, which was called during connect. 0 smcpnetfindismresource fetches skdstgetsk-dev and passes down to pnetfindbasendev,...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...