DuplicateDump

DuplicateDump DuplicateDump 是 MirrorDump 的一个分支，进行了以下修改： DInovke 实现 用 C++ 编写的 LSA 插件 DLL，可在转储 LSASS 后清理。MirrorDump 将 LSA 插件编译为 .NET 程序集，该程序集无法被 LSASS 进程卸载，因此 MirrorDump 无法删除该插件。 转储进程（即 DuplicateDump）的 PID 通过命名管道共享给 LSA 插件 向 MiniDumpWriteDump 传递值 "0" 而非 LSASS 的 PID。这可以防止 MiniDumpWriteDump 打开自己的 LSA...

nanodump

NanoDump 一个灵活的工具，用于创建 LSASS 进程的 minidump。 目录 1. 使用方法 2. 功能特性 3. 技术组合 4. 示例 5. HTTPS 重定向器 1. 使用方法 usage: Z:\nanodump.x64.exe --write C:\Windows\Temp\doc.docx --valid --duplicate --elevate-handle --duplicate-elevate --seclogon-leak-local --seclogon-leak-remote C:\Windows\notepad.exe...

cve-2025-2783-chrome_sandbox_escape_reproduction

CVE-2025-2783: Escape del Sandbox de Mojo en Google Chrome Puntuación CVSS: 8.3 Alta Descubierta por: Kaspersky Estado: Explotada activamente en entornos reales campañas de espionaje Resumen CVE-2025-2783 es una vulnerabilidad de escalada de privilegios específica de Windows en el framework de...

LogMeInPoCHandleDup

LogMeIn / GoTo LMIInfo.sys: Duplicación de handles Resumen Existe una condición de carrera en el controlador LMIInfo.sys proporcionado por LogMeIn / GoTo RMM por la cual un handle arbitrario puede ser duplicado desde el proceso SYSTEM. El problema principal se debe a la falta de control de acceso...

ps-ppl-bypass

Bypass de PPL mediante el controlador vulnerable de Process Explorer Aunque es bien sabido que las versiones antiguas anteriores a la 17.x de los controladores de SysInternals Process Explorer PSEXP152.sys son vulnerables y pueden ser abusadas para abrir identificadores de proceso con acceso...

MemGuard

🛡️ MemGuard — ゼロ依存のLSASSメモリシールド & EDRフック検出器 -0078D6.svg?logo=windows&logoColor=white -brightgreen.svg 不正なLSASSメモリアクセス、ハンドルの複製、およびLOLBinによる資格情報ダンプの試行をリアルタイムで検出・緩和する、軽量でゼロ依存のWindows EDRユーティリティ。 📌 脅威の概要: なぜLSASSを保護するのか? Windowsエンタープライズ環境では、Local Security Authority Subsystem Service lsass.exe...

Astra Linux – Vulnerability in curl

This flaw allows an attacker to insert cookies into a running program using libcurl, provided that certain conditions are met. Libcurl performs transfers. In its API, an application creates “easy handles”—individual handles used for single transfers. Libcurl provides a function called...

EUVD-2007-6669

Malware in sbrugna...

AZL-31502 CVE-2023-38546 affecting package cmake for versions less than 3.21.4-10

This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met. libcurl performs transfers. In its API, an application creates "easy handles" that are the individual handles for single transfers. libcurl provides a functio...

Design/Logic Flaw

This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met. libcurl performs transfers. In its API, an application creates "easy handles" that are the individual handles for single transfers. libcurl provides a functio...

CVE-2023-5174

If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-after-free and a potentially exploitable crash. This bug only affects Firefox on Windows when run in non-standard configurations such as using runas...

CVE-2023-5174

If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-after-free and a potentially exploitable crash. This bug only affects Firefox on Windows when run in non-standard configurations such as using runas...

Design/Logic Flaw

If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-after-free and a potentially exploitable crash. This bug only affects Firefox on Windows when run in non-standard configurations such as using runas...

CVE-2023-5174

If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-after-free and a potentially exploitable crash. This bug only affects Firefox on Windows when run in non-standard configurations such as using runas...

CVE-2023-5174

If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-after-free and a potentially exploitable crash. This bug only affects Firefox on Windows when run in non-standard configurations such as using runas...

CVE-2023-5174

The CVE-2023-5174 entry describes a Windows-specific issue in the Firefox sandbox handling: if a process fails to duplicate a handle during process creation, the sandbox code may double-free a pointer, causing a use-after-free and potentially an exploitable crash. Affected products are Firefox be...

SUSE CVE-2023-5174

If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-after-free and a potentially exploitable crash. This bug only affects Firefox on Windows when run in non-standard configurations such as using runas...

Security Vulnerabilities fixed in Firefox 118 — Mozilla

A compromised content process could have provided malicious data to FilterNodeD2D1 resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process.This bug only affects Firefox on Windows. Other operating systems are unaffected. A compromised content proces...

Nanodump - A Crappy LSASS Dumper With No ASCII Art

A flexible tool that creates a minidump of the LSASS process. 1. Features It uses syscalls with SysWhispers2 for most operations. Syscalls are called from an ntdll address to bypass some syscall detections. It sets the syscall callback hook to NULL. Windows APIs are called using dynamic invoke...

Microsoft Windows 10 1809 - LUAFV Delayed Virtualization Cross Process Handle Duplication Privilege Escalation

Microsoft Windows 10 1809 - LUAFV Delayed Virtualization Cross Process Handle Duplication Privilege Escalation Windows: LUAFV Delayed Virtualization Cross Process Handle Duplication EoP Platform: Windows 10 1809 not tested earlier Class: Elevation of Privilege Security Boundary per Windows Securi...