jiopc-architecture-whitepaper

Architecture, Performance, and Security Analysis of JioPC Cloud Virtual Desktops A Comprehensive Technical Whitepaper & Engineering Evaluation Document Version : 2.0 Target Platform : JioPC Cloud Virtual Desktop Accops HyWorks / Microsoft Azure Classification : Technical Evaluation &...

usbkill

« usbkill » is an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer. To run: sudo python usbkill.py or sudo python3 usbkill.py Related project; same idea, but implemented as a Linux driver: https://github.com/NateBrune/silk-guardian...

rusty_drivers

RustyDrivers 이 프로젝트는 EDR/AV 프로세스를 종료하는 데 초점을 맞춘 BYOVD 컬렉션입니다. 현재 다음 드라이버가 지원됩니다: 드라이버| 인수 이름| 차단 여부 ---|---|--- Process Explorer| processexplorer| 예 Genshin Impact| genshin| 예 Rentdrv2| rentdrv2| 아니요 TrueSight| truesight| 아니요 차단됨은 해당 드라이버가 Microsoft의 차단 목록에 포함되어 있으며 최신 Windows에서 실행될 수 없다는 의미입니다. ...

TaskManager-Button-Disabler

TaskManager-Button-Disabler Simple way to disable/rename buttons from a task manager. Installation git clone https://github.com/Mrakovic-ORG/TaskManager-Button-Disabler cd TaskManager-Button-Disabler\TaskManager Button Disabler dotnet build Features Rename kill proccess button Disable kill procce...

soc-investigation-lab

종단 간 SOC 조사 랩 Metasploitable2를 대상으로 4단계 공격 체인정찰 → 악용 → 지속 → 유출을 완전하게 실행하고, 각 단계에서 증거를 수집하며, 구조화된 인시던트 타임라인과 SOC 보고서를 생성합니다 — 공격자와 방어자의 사고를 동시에 보여줍니다. 목표 이것은 캡스톤 프로젝트입니다. 다음 능력을 입증합니다: 의도적으로 취약하게 만든 대상에 대해 현실적인 킬 체인 실행 여러 텔레메트리 소스를 사용해 각 단계에서 포렌식 증거 수집 서로 다른 시스템의 로그 항목을 통합된 인시던트 타임라인으로 상호 연관 가시성 격...

Mhyprot2DrvControl

Mhyprot2DrvControl mhyprot2 드라이버를 사용하여 프로세스 모듈 열거, 프로세스 메모리 읽기/쓰기 및 프로세스 종료를 가능하게 하는 라이브러리입니다. 사용법 빌드 후 실행하세요. 사용 가능한 함수와 사용법은 Driver\MhyProt2.cs를 참조하세요. 데모...

CVE-2026-21509-handler

CVE-2026-21509 Office Kill-Bit 관리자 CVE-2026-21509 Microsoft Office 제로데이 취약점Office 2016/2019/LTSC 영향에 대한 Kill-Bit 보호를 확인, 적용, 테스트 하는 PowerShell 스크립트입니다. CVE-2026-21509란? Microsoft Office OLE/COM 처리의 치명적인 RCE 취약점CVSS 9.8입니다. APT28Fancy Bear이 악성 RTF/DOC 파일을 통해 Shell.Explorer COM 개체...

psd-tools composite/numpy has uncontrolled memory allocation via crafted PSD geometry

SummaryPSDImage.composite and .numpy allocate the output image buffer from the PSD's header geometry width × height × channels × depth, and per-layer rectangles before validating those values against the actual file contents. A tiny crafted PSD declaring huge dimensions causes a multi-gigabyte...

CVE-2022-1227_Exploit

CVE-2022-1227Exploit CVE-2022-1227 を悪用するためのスクリプトです。 背景 Ubuntu 20.10 が推奨されます。 Podman TODO: この脆弱性の原理を追加する podman のインストール 公式ドキュメントの指示に従ってください: https://podman.io/getting-started/installationinstalling-on-linux Ubuntu 20.10 の場合、インストールコマンドは次のとおりです: sudo apt-get install podman=3.4.4+ds1-1ubuntu1 クイックスター...

AlmaLinux 9.2 [TuxCare] Security Update: podman / podman-docker / podman-gvproxy / podman-plugins / etc (ALMALINUX9.2:CLSA-2025:1762180294)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1762180294 advisory. - A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause...

DsArk64

DsArk64 DsArk64.sys는 360 Total Security와 함께 배포됩니다. Microsoft의 WHQL 서명을 받았습니다. LOLDrivers: magicsword-io/LOLDrivers308. CVE: 요청됨 MITRE. 프리미티브 프로세스 종료 ring 0 IOCTL 0x80863008, 입력: 4바이트 원시 PID 드라이버가 커널에서 ZwOpenProcessALLACCESS + ZwTerminateProcess 호출 이 IOCTL에는 암호화 없음 PPL, EDR 자체 보호, 변조 방지 우회 커널 읽기...

No One Architecture Fits All: A Cross-Environment Evaluation of Hierarchical Red Team Agents

Autonomous red team agents increasingly stress-test AI-enabled cyber defenses by planning strategy and executing multistage attacks. Reinforcement learning RL and large language models LLMs offer complementary mechanisms for the planning and execution such agents require, and prior work has...

DEBIAN-CVE-2026-97029

Flatpak's process ID namespace separation does not prevent a sandboxed app's kill0, signal or killpg0, signal calls from reaching processes outside the sandbox that share the same process group. A malicious or compromised Flatpak app can use this to cause denial of service by terminating processe...

CVE-2026-97029

Flatpak's process ID namespace separation does not prevent a sandboxed app's kill0, signal or killpg0, signal calls from reaching processes outside the sandbox that share the same process group. A malicious or compromised Flatpak app can use this to cause denial of service by terminating processe...

UBUNTU-CVE-2026-97029

Flatpak's process ID namespace separation does not prevent a sandboxed app's kill0, signal or killpg0, signal calls from reaching processes outside the sandbox that share the same process group. A malicious or compromised Flatpak app can use this to cause denial of service by terminating processe...

CVE-2026-97029

A vulnerability in Flatpak allows a sandboxed application to bypass process ID namespace separation . Specifically, the kill(0, signal) or killpg(0, signal) calls can reach processes outside the sandbox if they share the same process group . A malicious or compromised Flatpak app can exploit this...

EUVD-2026-88627

Flatpak's process ID namespace separation does not prevent a sandboxed app's kill0, signal or killpg0, signal calls from reaching processes outside the sandbox that share the same process group. A malicious or compromised Flatpak app can use this to cause denial of service by terminating processe...

CVE-2026-97029 Flatpak: flatpak: sandboxed app can signal unsandboxed processes in the same process group

Flatpak's process ID namespace separation does not prevent a sandboxed app's kill0, signal or killpg0, signal calls from reaching processes outside the sandbox that share the same process group. A malicious or compromised Flatpak app can use this to cause denial of service by terminating processe...

CVE-2026-97029

Flatpak's process ID namespace separation does not prevent a sandboxed app's kill0, signal or killpg0, signal calls from reaching processes outside the sandbox that share the same process group. A malicious or compromised Flatpak app can use this to cause denial of service by terminating processe...

CVE-2026-97029

Flatpak's process ID namespace separation does not prevent a sandboxed app's kill0, signal or killpg0, signal calls from reaching processes outside the sandbox that share the same process group. A malicious or compromised Flatpak app can use this to cause denial of service by terminating processe...