charlotte

charlotte c++ 完全免杀的 shellcode 加载器 ; 发布此工具以庆祝我的新生儿诞生 描述 13/05/2021: 1. c++ shellcode 加载器，截至 2021 年 5 月 13 日完全免杀 0/26。 2. 动态调用 win32 API 函数 3. shellcode 和函数名的 XOR 加密 4. 每次运行随机化 XOR 密钥和变量 5. 在 Kali Linux 上，只需 'apt-get install mingw-w64' 即可！ 17/05/2021: 6. 随机字符串长度和 XOR 密钥长度 antiscan.me 使用方法 git clone...

charlotte

charlotte c++ fully undetected shellcode launcher ; releasing this to celebrate the birth of my newborn description 13/05/2021: 1. c++ shellcode launcher, fully undetected 0/26 as of 13th May 2021. 2. dynamic invoking of win32 api functions 3. XOR encryption of shellcode and function names 4...

CVE-2017-1000117

El que levanta un servidor con CVE-2017-1000117 ¡Ejecuta el siguiente comando, abre el navegador web y accede a http://localhost:8088! $ git clone --recursive https://github.com/0gawa/CVE-2017-1000117 Hello World Si se muestra, ¡actualiza git! Es vulnerable...

ezsploit

ezsploit Alt text Linux bash 脚本自动化用于 metasploit 用于自动化 metasploit 功能的命令行脚本 检查 metasploit 服务，如果不存在则启动 轻松为 Windows、Linux、Android 和 Mac 制作 meterpreter reversetcp 载荷 启动多个 meterpreter reversetcp 监听器 帮助构建基本持久化选项和脚本 Armitage 启动器 进入 Msfconsole 一些其他有趣的东西 : 待办事项 为载荷/监听器添加更多功能，java、php、tomcat 等 改进整体功能 截图 Alt...

Freeko

如何安装： 所需物品 1. 电脑 2. SD卡 3. Miko 3 1. 从这里下载apk文件 2. 将它们复制到SD卡 3. 启动Miko，点击三个点 4. 进入设置，然后点击隐私政策 5. 长按政策中的文字，直到看到包含"分享"选项的菜单 6. 点击分享，然后选择蓝牙 7. 点击搜索并查找文件 8. 点击第一个结果 9. 然后点击高亮按钮 10. 将SD卡插入Miko 11. 点击三条横线 12. 滚动直到看到你的SD卡 13. 打开它，然后点击所有apk，但当遇到Nova Launcher时，点击"打开" 14. 然后完成设置，并将其设为默认启动器 15. 之后返回文件应用，继续操...

arsenal

Arsenal Arsenal 是一个快速的命令清单、提醒和启动器，专为渗透测试命令而设计。 这个项目由渗透测试者为渗透测试者编写，简化了那些难以记住的命令的使用 在 arsenal 中，你可以搜索命令，选择一个，然后它就会直接预填充到你的终端中。此功能与所使用的 shell 无关。实际上 arsenal 模拟了真实的用户输入（使用 TTY 参数和 IOCTL），因此 arsenal 可以与所有 shell 配合使用，并且你的命令会出现在历史记录中。 如果需要，你必须输入参数，但 arsenal 支持全局变量。 例如，在一次渗透测试中，我们可以设置变量 ip，以便用正确的 IP...

amd_eop_poc

amdeoppoc CVE-2020-8950 来自 Radeon 软件的 AMD 用户体验计划启动器权限提升（文件写入 EOP） 请阅读 note.txt https://heynowyouseeme.blogspot.com/2020/02/privilege-escalation-filewrite-eop-in.html https://heynowyouseeme.blogspot.com/2020/02/another-privilege-escalation-filewrite.html @404death...

CVE-2023-36123

CVE-2023-36123 仅供演示用途。此漏洞利用适用于所有版本的 Plain Craft Launcher 2。 下载 Custom.xaml 并导入 Plain Craft Launcher 2，然后点击“运行命令”。 https://github.com/Hex-Dragon/PCL2/assets/140469824/636d1436-a26d-4f54-ad4f-a7b1bb123783...

LiveContainer

LiveContainer Un lanceur d'applications qui exécute des applications iOS sans les installer réellement ! Projet Crowdin : | Documentation : liveconainer.github.io LiveContainer LiveContainer est un lanceur d'applications pas un émulateur ni un hyperviseur qui vous permet d'exécuter des applicatio...

CVE-2023-31014_Lab

Laboratorio de secuestro de Intent implícito CVE-2023-31014 Es un laboratorio educativo de Android creado a partir del informe público de CVE-2023-31014 de NVIDIA GeForce NOW for Android. No incluye código fuente de NVIDIA, cadenas Action reales ni credenciales reales. Hechos confirmados en el...

Xjar_tips

Xjartips Introducción: Herramienta de ejecución con cifrado seguro para JAR de Spring Boot, compatible también con JAR nativos. Basada en el cifrado de los recursos dentro del paquete JAR y en la extensión de ClassLoader, construye un esquema de arranque cifrado del programa y ejecución con...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview org.apache.storm:storm-core is a distributed realtime computation system. Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition via the worker-launcher process. An attacker can gain elevated privileges by exploiting a race condition between t...

CVE-2026-82429

Description The setuid-root worker-launcher binary adjusts ownership and permissions of worker directories by walking the tree with FTS and calling lchown and chmod on each entry's full pathname while running with an effective uid of 0. Both syscalls re-resolve the path at the time of the call,...

CVE-2026-82430

Description When launching a Docker or OCI worker, the setuid-root worker-launcher first changes ownership of the entire worker directory to the untrusted topology user, and only afterwards reads and acts on the command file that the supervisor wrote into that same directory. The file is opened...

CVE-2026-82429 Apache Storm Worker Launcher: Local Privilege Escalation to Root via a Time-of-Check Race in the Worker Launcher

Description The setuid-root worker-launcher binary adjusts ownership and permissions of worker directories by walking the tree with FTS and calling lchown and chmod on each entry's full pathname while running with an effective uid of 0. Both syscalls re-resolve the path at the time of the call,...

CVE-2026-82429

The Apache Storm worker-launcher binary contains a Time-of-Check Time-of-Use (TOCTOU) race condition allowing Local Privilege Escalation to root . The setuid-root binary walks worker directories using FTS and calls lchown and chmod on full pathnames. Because these syscalls re-resolve paths, an un...

CVE-2026-82429 Apache Storm Worker Launcher: Local Privilege Escalation to Root via a Time-of-Check Race in the Worker Launcher

Description The setuid-root worker-launcher binary adjusts ownership and permissions of worker directories by walking the tree with FTS and calling lchown and chmod on each entry's full pathname while running with an effective uid of 0. Both syscalls re-resolve the path at the time of the call,...

EUVD-2026-77528

Description The setuid-root worker-launcher binary adjusts ownership and permissions of worker directories by walking the tree with FTS and calling lchown and chmod on each entry's full pathname while running with an effective uid of 0. Both syscalls re-resolve the path at the time of the call,...

CVE-2026-82430 Apache Storm Worker Launcher: Local Privilege Escalation to Root via Container Command Files Chowned to the Tenant

Description When launching a Docker or OCI worker, the setuid-root worker-launcher first changes ownership of the entire worker directory to the untrusted topology user, and only afterwards reads and acts on the command file that the supervisor wrote into that same directory. The file is opened...

CVE-2026-82430

The Apache Storm Worker Launcher is vulnerable to a Time-of-check Time-of-use (TOCTOU) race condition in its worker-launcher component. When launching Docker or OCI workers, the setuid-root launcher changes directory ownership to an untrusted user before reading the command file. Because the file...