laravel-crypto-killer

Laravel crypto killer Laravelアプリケーションにおける復号メカニズムの不適切な実装を悪用するために設計されたツールです。 このツールは当初、Illuminate\Encryption パッケージの Laravel decrypt 関数を標的としたペイロードを生成するために設計されました。 また、encrypt や encryptString で暗号化されたデータの復号にも使用できます。 このツールを使用するには有効な APPKEY...

GhostDriver

GhostDriver 👻 概要 GhostDriverは、BYOVDを使用したRust製のAVキラー（アンチウイルス無効化）ツールです。 始め方 1. rust-lang.orgからRustをインストールします 2. クローン: git clone https://github.com/BlackSnufkin/GhostDriver.git 3. ビルド: cargo build --release --target=x8664-pc-windows-msvc 4. 実行: GhostDriverバイナリを実行します 使用方法: GhostDriver.exe 2.0...

msmap

MSMAP Msmap is a Memory WebShell Generator. Compatible with various Containers, Components, Encoder, WebShell / Proxy / Killer and Management Clients. 简体中文 The idea behind I, The idea behind II, The idea behind III Feature WIP Function Dynamic Menu Automatic Compilation Generate Script Lite Mode...

Killer

KILLER TOOL EDR 회피 보안 도구를 우회하여 학습 목적으로 만들어진 AV/EDR 회피 도구이며, 현재까지는 FUD완전 탐지 불가 상태입니다. 기능: 메모리 스캐닝 회피를 위한 모듈 스톰핑Module Stomping 새로운 ntdll 복사본을 통한 DLL 언후킹DLL Unhooking IAT 숨김 및 난독화 & API 언후킹 일부 보안 제어 우회를 위한 ETW 패치 샌드박스 회피 기법 및 기본 안티-디버깅 포함 완전 난독화 함수 - 키 - 쉘코드 – XOR 사용 쉘코드 역순 및 암호화 API를 사용하지 않고 할로우...

SCREEN_KILLER

.. raw:: html .. image:: ./pictures/scrk.png :width: 700px :alt: Project .. raw:: html KILLER 프로젝트 .. contents:: :local: :depth: 1 ============= 소개 screenshot pentest OSCP 이 스크립트는 침투 테스트 참여 및 OSCP 중에 스크린샷을 캡처하기 위해 개발되었습니다. 중요: 스크린샷 기능은 더 이상 시험에서 허용되지 않지만 터미널 로깅은 시험에서 허용됩니다. 도구가 마음에 드시고 다른 도구를 개발할...

AES-Killer

AES Killer Burpsuite 플러그인 AES 암호화 트래픽을 실시간으로 복호화하는 Burpsuite 플러그인 요구 사항 Burpsuite 테스트 환경 Burpsuite 2021.4 Windows 10 Ubuntu & PopOS 기능 IProxyListener는 요청을 복호화하고 응답을 암호화하며, IHttpListener는 요청을 암호화하고 응답을 복호화합니다. Burp는 복호화된 트래픽을 보게 되며, Repeater, Intruder 및 Scanner도 포함되지만, 클라이언트/모바일 앱과 서버는 암호화된 버전을 보게...

Amsi-Killer

生涯 AMSI バイパス オペコードスキャン 各命令の最初のバイトを検索することでジャンプ命令の正確なアドレスを取得します。この手法は、対象データセットの更新や変更があった場合でも有効です。 例： | 48:85D2 | test rdx, rdx | | 74 3F | je amsi.7FFAE957C694 | | 48 : 85C9 | test rcx, rcx | | 74 3A | je amsi.7FFAE957C694 | | 48 : 8379 08 00 | cmp qword ptr ds : rcx + 8 , 0 | | 74 33 | je...

CentOS Linux 7 [TuxCare] Security Update: iwl100-firmware / iwl1000-firmware / iwl105-firmware / etc Multiple Vulnerabilities (CENTOS7:CLSA-2024:1720777265)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2024:1720777265 advisory. - Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow a privileged user to potentially...

CVE-2021-26258

このリポジトリには、CVE-2021-26258 PoC 用のツールと補助ファイルが含まれています。脆弱性の詳細については、ブログ記事 を参照してください。 ファイル一覧 : rn.stg.original: Intel Killer に付属するオリジナルの .stg ファイル rn.xml.original: rnstg-tool を使用して rn.stg.original から抽出された .xml ファイル rncustom.xml: Discord.exe のネットワークアクセスを無効にし、RemoteRegistry サービスを開始するカスタム .xml ファイル...

OESA-2026-4032 rabbitmq-server security update

RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable implementation of an AMQP broker. Security Fixes: RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP...

OESA-2026-4030 rabbitmq-server security update

RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable implementation of an AMQP broker. Security Fixes: RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP...

OESA-2026-4031 rabbitmq-server security update

RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable implementation of an AMQP broker. Security Fixes: RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP...

OESA-2026-4029 rabbitmq-server security update

RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable implementation of an AMQP broker. Security Fixes: RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP...

OESA-2026-4028 rabbitmq-server security update

RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable implementation of an AMQP broker. Security Fixes: RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP...

CVE-2026-93241

In the Linux kernel, the following vulnerability has been resolved: memcg: bypass the reclaim and oom killer for dying tasks once oomreaper is done At Meta, we are seeing instances where an OOM killed job is stuck in the exit path for several hours. In one particular case, the job was stuck for...

CVE-2026-93241

The Linux kernel contains a vulnerability in memcg where dying tasks can bypass reclaim and the oom killer once the oom_reaper has finished its task. This occurs because the oom_reaper is a best-effort, one-shot process; if it fails to acquire the mmap_lock in read mode (e.g., due to a sibling th...

CVE-2026-77619

Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads a 32-bit compressed-frame length from the network and uses it to size an in-memory buffer without an upper bound. An unauthenticated remote peer that can reach the default 0.0.0.0:5044...

CVE-2026-77619 Vector: Unauthenticated denial of service in the `logstash` source via unbounded memory allocation.

Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads a 32-bit compressed-frame length from the network and uses it to size an in-memory buffer without an upper bound. An unauthenticated remote peer that can reach the default 0.0.0.0:5044...

CVE-2026-77619

CVE-2026-77619 affects the logstash source in Vector (versions 0.15.0 through 0.57.0). The vulnerability stems from the source reading a 32-bit compressed-frame length from the network and sizing an in-memory buffer without an upper bound . An unauthenticated remote peer reaching the default 0.0....

CVE-2026-77619: Improper Handling of Length Parameter Inconsistency

Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads a 32-bit compressed-frame length from the network and uses it to size an in-memory buffer without an upper bound. An unauthenticated remote peer that can reach the default 0.0.0.0:5044...