zyrox

Zyrox LLVM Obfuscator Plugin LLVM pour l'offuscation de code natif lors de la compilation et de l'édition de liens Pourquoi pourquoi pas ¯\ツ/¯ Un de mes plus gros projets, où j'ai beaucoup appris sur les internes de LLVM, les formats binaires, l'assembleur et les techniques d'offuscation. Je croi...

BasicHook

BasicHook Перехватывает функции с помощью 32-битного относительного перехода; запись выполняется атомарно, чтобы избежать состояний гонки. Использует hde32 для дизассемблирования длины инструкций...

Jump-over-ASLR-BTB

Предсказатели ветвлений и ASLR Автор: Byte Reaper Описание Этот репозиторий содержит исследовательскую реализацию на C, демонстрирующую концепции, связанные с предсказателями ветвлений, спекулятивным выполнением и кэш-ориентированными побочными каналами в контексте рандомизации распределения...

portia

⚠️ NOTE : Cet outil n'est plus activement maintenu. portia Portia vise à automatiser un certain nombre de techniques couramment utilisées lors des tests de pénétration de réseaux internes après qu'un compte à faibles privilèges a été compromis. Élévation de privilèges Déplacement latéral Modules d...

CVE-2024-44083

CVE-2024-44083 оригинальные PoC-репозитории были удалены github.com/Azvanzed/CVE-2024-44083, github.com/Azvanzed/IdaMeme, так что вот он. решил воссоздать его для тех, кто хочет понять, как это работает, или проверить свою среду. IDA Pro ≤ 8.4 падает при анализе бинарников с чрезмерными цепочками...

Byepervisor

Byepervisor Краткое описание Эксплойт гипервизора PS5 для прошивок = 2.xx. В репозитории содержатся две уязвимости и две цепочки эксплойтов, они независимы друг от друга, и можно использовать любую из них. Один эксплойт предоставлен в основном для сохранения /oldjumptableexploit, использовать нуж...

CVE-2026-98042

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. A local user with permissions to load BPF programs could exploit this vulnerability to achieve privilege escalation or cause a denial of service DoS. The issue stems from improper handling of register states during...

CVE-2015-8710

Reproducteur Remerciements à Mike Dalessio, Francois Chagnon, Florian Weingarten et Jun Kokatsu. Voir BZ 746048 Compilation sous Linux $ cmake ../CVE-2015-8710/ -G "Unix Makefiles" -DLIBXML2LIBRARIES=/path/to/your/library/libxml2.so.2 -DLIBXML2INCLUDEDIR=/path/to/your/sources/libxml2-2.9.1/includ...

cfgrip

cfgrip Extracteur de CFG graphe de flot de contrôle pour PE/ELF x86/x64. Prend un binaire en entrée, le désassemble, résout chaque saut et appel GOT, tables de saut, traçage de registres et exporte le graphe de flot de contrôle complet au format JSON structuré. pourquoi Vous avez besoin de savoir...

CVE-2026-1801C

CVE-2026-1801C QUANTUM-SHIFT / CVE-2026-180A7 BAL-JUMP: Статический анализ эвристик обработки входных движений в Source 2 server.dll Аннотация В данной работе представлен статический reverse-engineering анализ двух клиентских процедур проверки движения, реализованных в движке Counter-Strike 2...

DEBIAN-CVE-2026-98048

In the Linux kernel, the following vulnerability has been resolved: bpf: don't rewrite bpffastcall patterns entered by a jump markfastcallpatternforcall must ensure that matched "spill; call; fill" instruction series is not interrupted by a jump. Otherwise the rewrite applied by...

CVE-2026-98048

In the Linux kernel, the following vulnerability has been resolved: bpf: don't rewrite bpffastcall patterns entered by a jump markfastcallpatternforcall must ensure that matched "spill; call; fill" instruction series is not interrupted by a jump. Otherwise the rewrite applied by...

UBUNTU-CVE-2026-98048

In the Linux kernel, the following vulnerability has been resolved: bpf: don't rewrite bpffastcall patterns entered by a jump markfastcallpatternforcall must ensure that matched "spill; call; fill" instruction series is not interrupted by a jump. Otherwise the rewrite applied by...

CVE-2026-98048

The Linux kernel contains a vulnerability within the bpf subsystem where the mark_fastcall_pattern_for_call() function fails to ensure that "spill; call; fill" instruction series are not interrupted by a jump. This flaw causes the rewrite applied by bpf_remove_fastcall_spills_fills() to be unsoun...

CVE-2026-98048 bpf: don't rewrite bpf_fastcall patterns entered by a jump

In the Linux kernel, the following vulnerability has been resolved: bpf: don't rewrite bpffastcall patterns entered by a jump markfastcallpatternforcall must ensure that matched "spill; call; fill" instruction series is not interrupted by a jump. Otherwise the rewrite applied by...

EUVD-2026-86701

In the Linux kernel, the following vulnerability has been resolved: bpf: don't rewrite bpffastcall patterns entered by a jump markfastcallpatternforcall must ensure that matched "spill; call; fill" instruction series is not interrupted by a jump. Otherwise the rewrite applied by...

CVE-2026-98048

In the Linux kernel, the following vulnerability has been resolved: bpf: don't rewrite bpffastcall patterns entered by a jump markfastcallpatternforcall must ensure that matched "spill; call; fill" instruction series is not interrupted by a jump. Otherwise the rewrite applied by...

CVE-2026-98048

In the Linux kernel, the following vulnerability has been resolved: bpf: don't rewrite bpffastcall patterns entered by a jump markfastcallpatternforcall must ensure that matched "spill; call; fill" instruction series is not interrupted by a jump. Otherwise the rewrite applied by...

CVE-2026-91166 Warpgate: Web SSH stores a jump host's key against the target's address, so it validates as the target

Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. From 0.25.0 until 0.27.6, the browser SSH path in warpgate-web-ssh/src/manager.rs handles RCEvent::HostKeyUnknown without the presenting hop identity and instead passes sshoptions.host and sshoptions.port for the final target...

AZL-101568 CVE-2026-89906 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Refactor jump offset calculation in tail call The old macro-based jmpoffset calculation derives the jump distance from a stale prior-pass code stride, which can lead to wrong branch offsets and soft lockups under...