Lucene search
+L

28 matches found

Kitploit
Kitploit
added 2026/09/15 7:23 a.m.8 views

ModTracer

ModTracer v1.0 ModTracer encuentra rootkits ocultos del kernel de Linux y los vuelve a hacer visibles. Otra forma de hacer visible un LKM es usando el truco de imperius: https://github.com/MatheuZSecurity/Imperius Únete al Grupo de Investigadores de Rootkits https://discord.gg/66N5ZQppU7...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 7:18 a.m.5 views

FakeMBR

FakeMBR Rootkit estilo TDL4 para falsificar solicitudes de lectura/escritura al registro de arranque maestro MBR Debe compilarse con NTDDK. Ver: http://www.malwaretech.com/2015/01/using-kernel-rootkits-to-conceal.html...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 7:16 a.m.9 views

Nidhogg

Nidhogg Nidhogg es un rootkit multifuncional para mostrar la variedad de operaciones que se pueden realizar desde el espacio del kernel. El objetivo de Nidhogg es proporcionar un rootkit todo en uno y fácil de usar con múltiples funcionalidades útiles para operaciones. Además, también se puede...

6AI score
SaveExploits0References15
Kitploit
Kitploit
added 2026/09/15 5:24 a.m.13 views

shadow

shadow-rs 🦀 shadow-rs es un rootkit del kernel de Windows escrito en Rust, que demuestra técnicas avanzadas de manipulación del kernel aprovechando las características de seguridad y rendimiento de Rust. Este proyecto está destinado a fines educativos y de investigación. Tabla de Contenidos Aviso...

6.2AI score
SaveExploits0References13
Kitploit
Kitploit
added 2026/09/15 2:33 a.m.12 views

Singularity

Singularity - Rootkit Stealth de Kernel Linux "¿Le damos un poco de trabajo a la forense?" Este proyecto fue inspirado por una mujer muy especial para mí: Mocinha Singularity es un potente rootkit de módulo de kernel de Linux LKM diseñado para kernels modernos 6.x. Proporciona capacidades...

6.2AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/15 1:03 a.m.116 views

rvbbit-arsenal

RVBBIT Arsenal: La Dualidad Definitiva de Ataque y Defensa Descripción general Este repositorio alberga dos caras de la misma moneda: attack/ – Proyecto RVBBIT, un rootkit clásico del kernel de Linux con minero integrado y gusano de red. defense/ – RvbbitSafe, la contramedida definitiva que...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 9:56 p.m.13 views

Black-Angel-Rootkit

Black Angel Rootkit Black Angel es un rootkit en modo kernel de Windows 11/10 x64. El rootkit puede cargarse con DSE habilitado manteniendo toda su funcionalidad. Diseñado para Red Teams. Características del Rootkit El rootkit puede cargarse con kdmapper para omitir DSE; Black Angel Loader puede...

5.9AI score
SaveExploits0References5
GithubExploit
GithubExploit
added 2026/06/24 5:41 a.m.186 views

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

rootpacket CVE-2026-31431 A Linux Docker-to-host cryptojack...

7.8CVSS7.4AI score0.99907EPSS
SaveExploits242
OSV
OSV
added 2026/06/16 7:45 p.m.14 views

MAL-2026-5912 Malicious code in js-digest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52847ff329757e0777e62c1c060455abc4ddd6f002c295a7f38d0e0489daf76f Package impersonates crypto-js: name is js-digest but package.json carries crypto-js's exact description "JavaScript library of cryptography...

5.5AI score
SaveExploits0References1
OSV
OSV
added 2026/06/04 10:27 p.m.24 views

MAL-2026-5191 Malicious code in wdb-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 146faaf0d97c6a533a969bc3f3f117811f9317dc865ed4ab37f1679842ddeaae This package was compromised as part of the IronWorm campaign. This campaign executes a malicious binary payload during installation via a...

5.8AI score
SaveExploits0References2
OSV
OSV
added 2026/06/04 10:27 p.m.24 views

MAL-2026-5190 Malicious code in hbsig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96b3a65aade5ea74ab5761d7ad3a332834594752f34fdb69a095efe59a681c90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.1AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/06/04 10:27 p.m.23 views

Malicious code in javascript-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security d83c3b506a10b770a8c1f98d280262478cccc65708bb1066a72e0708dccaaf75 This malicious package is part the IronWorm campaign. This campaign executes a malicious binary payload during installation via a preinsta...

5.8AI score
SaveExploits0References2
OSV
OSV
added 2026/06/04 10:27 p.m.23 views

MAL-2026-5194 Malicious code in yaml-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security d83c3b506a10b770a8c1f98d280262478cccc65708bb1066a72e0708dccaaf75 This malicious package is part the IronWorm campaign. This campaign executes a malicious binary payload during installation via a preinsta...

5.8AI score
SaveExploits0References2
OSV
OSV
added 2026/06/04 10:27 p.m.19 views

MAL-2026-5192 Malicious code in weavedb-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a352d761eba6aa71b41fc09bb621d3f04e8c7c0e74487392a7c69e77719426b9 No concrete indicators of installer-side harm were identified in this version of weavedb-contracts. No lifecycle scripts, network beacons, credential...

6.1AI score
SaveExploits0References4
OSV
OSV
added 2026/06/04 10:27 p.m.20 views

MAL-2026-5193 Malicious code in javascript-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security d83c3b506a10b770a8c1f98d280262478cccc65708bb1066a72e0708dccaaf75 This malicious package is part the IronWorm campaign. This campaign executes a malicious binary payload during installation via a preinsta...

5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/06/02 9:00 p.m.19 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that hides inside binary executable files triggered by a postinstall script. IronWorm is a sophisticated, Rust-based infostealer that functions as a self-replicating supply-chain attack. Its primary characteristi...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/06/02 9:00 p.m.28 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that hides inside binary executable files triggered by a postinstall script. IronWorm is a sophisticated, Rust-based infostealer that functions as a self-replicating supply-chain attack. Its primary characteristi...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/06/02 9:00 p.m.16 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that hides inside binary executable files triggered by a postinstall script. IronWorm is a sophisticated, Rust-based infostealer that functions as a self-replicating supply-chain attack. Its primary characteristi...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/06/02 9:00 p.m.23 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that hides inside binary executable files triggered by a postinstall script. IronWorm is a sophisticated, Rust-based infostealer that functions as a self-replicating supply-chain attack. Its primary characteristi...

9.8CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
added 2026/06/02 9:00 p.m.12 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code that hides inside binary executable files triggered by a postinstall script. IronWorm is a sophisticated, Rust-based infostealer that functions as a self-replicating supply-chain attack. Its primary characteristi...

9.8CVSS5.8AI score
SaveExploits0References2
Rows per page
Query Builder