CVE-2023-3640

SCTF2023kernelpwn SCTF 2023 kernel pwn Отступление: Реклама. Автор — студент бакалавриата выпуска 2024 года, участвует в осеннем наборе этого года, добро пожаловать для связи sycrop Эта задача направлена на изучение двух моментов. 1. Точки начала области отображения cpu entry area имеют несколько...

mora-hwbp

Mora-HWBP — Hooking de télémétrie AMSI / WLDP / ETW via des points d'arrêt matériels Un Proof-of-Concept POC de recherche en sécurité démontrant le hooking de fonctions basé sur les points d'arrêt matériels registres de débogage du CPU comme alternative au patch de code en mémoire traditionnel...

Voidgate

VOIDGATE Description : Une technique qui peut être utilisée pour contourner les scanners mémoire AV/EDR. Elle peut être utilisée pour masquer des shellcodes bien connus et détectés tels que msfvenom en effectuant le déchiffrement à la volée de chaque instruction assembleur chiffrée, rendant ainsi...

RustChain

Descrizione Questo strumento è un semplice PoC su come nascondere artefatti di memoria utilizzando una catena ROP in combinazione con breakpoint hardware. La catena ROP cambierà le protezioni della pagina di memoria del modulo principale in N/A durante il sonno cioè quando viene chiamata la...

TamperingSyscalls

TamperingSyscalls TamperingSyscalls è un progetto inedito in 2 parti composto da argument spoofing e recupero delle syscall, che abusano entrambi di EH per aggirare gli EDR. Questo progetto include entrambe queste tecniche per fornire una soluzione alternativa alle syscall dirette. Manomissione...

PatchlessCLRLoader

PatchlessCLRLoader PatchlessCLRLoader è un fork di InlineExecute-Assembly per caricare assembly .NET e indirizzare l'output a mailslot. L'ho riscritto come loader standalone con la seguente implementazione: Payload con crittografia AES Supporto payload fileless Bypass patchless di AMSI ed ETW...

AMSI-patches-learned-till-now

AMSI-Patches, die ich bisher gelernt habe Ich habe alle AMSI-Patches dokumentiert, die ich bisher gelernt habe ❗ Mein AMSI-Patch-Wissen bisher. Gehört nicht zum Vermögen meines Unternehmens! HAFTUNGSAUSSCHLUSS: Dieser Code ist bisher nicht zur Umgehung gedacht! Nur ein konzeptioneller Ansatz!...

CVE-2021-47006 ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook

In the Linux kernel, the following vulnerability has been resolved: ARM: 9064/1: hwbreakpoint: Do not directly check the event's overflowhandler hook The commit 1879445dfa7b "perf/core: Set event's default ::overflowhandler" set a default event-overflowhandler in perfeventalloc, and replace the...

UVI-2021-1000450 ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook

ARM: 9064/1: hwbreakpoint: Do not directly check the event's overflowhandler hook This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.191 by...

The vulnerability of the `modify_user_hw_breakpoint()` function in the Linux operating system allows a hacker to execute arbitrary code.

The vulnerability of the modifyuserhwbreakpoint function in the Linux operating system is related to incorrect error handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2018-1000199

An address corruption flaw was discovered in the Linux kernel built with hardware breakpoint CONFIGHAVEHWBREAKPOINT support. While modifying a h/w breakpoint via 'modifyuserhwbreakpoint' routine, an unprivileged user/process could use this flaw to crash the system kernel resulting in DoS OR to...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2018-1266)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.5.1 : kernel (EulerOS-SA-2018-1263)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual SDM was mishandle...

EulerOS Virtualization 2.5.0 : kernel (EulerOS-SA-2018-1266)

According to the version of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An address corruption flaw was discovered in the Linux kernel built with hardware breakpoint CONFIGHAVEHWBREAKPOINT support. While...

Amazon Linux AMI : kernel (ALAS-2018-1023)

A weakness was found in the Linux kernel's implementation of random seed data. Programs, early in the boot sequence, could use the data allocated for the seed before it was sufficiently generated. CVE-2018-1108 A flaw was found in the way the Linux kernel handled exceptions delivered after a stac...

Amazon Linux 2 : kernel (ALAS-2018-1023)

A weakness was found in the Linux kernel's implementation of random seed data. Programs, early in the boot sequence, could use the data allocated for the seed before it was sufficiently generated. CVE-2018-1108 A flaw was found in the way the Linux kernel handled exceptions delivered after a stac...

Important: kernel

Issue Overview: A weakness was found in the Linux kernel's implementation of random seed data. Programs, early in the boot sequence, could use the data allocated for the seed before it was sufficiently generated. CVE-2018-1108 A flaw was found in the way the Linux kernel handled exceptions...

kernel: ptrace() incorrect error handling leads to corruption and DoS

An address corruption flaw was discovered in the Linux kernel built with hardware breakpoint CONFIGHAVEHWBREAKPOINT support. While modifying a h/w breakpoint via 'modifyuserhwbreakpoint' routine, an unprivileged user/process could use this flaw to crash the system kernel resulting in DoS OR to...

kernel: ptrace() incorrect error handling leads to corruption and DoS

An address corruption flaw was discovered in the Linux kernel built with hardware breakpoint CONFIGHAVEHWBREAKPOINT support. While modifying a h/w breakpoint via 'modifyuserhwbreakpoint' routine, an unprivileged user/process could use this flaw to crash the system kernel resulting in DoS OR to...

Microsoft Office 2007 - mso.dll Arbitrary Free (MS15-081)

Microsoft Office 2007 - mso.dll Arbitrary Free MS15-081 Source: https://code.google.com/p/google-security-research/issues/detail?id=417&can=1 The following crash was observed in Microsoft Office 2007 with Microsoft Office File Validation Add-In disabled and Application Verifier enabled for testin...