skewrun

Skewrun skewrun es un kit de herramientas de descubrimiento de tiempo de Active Directory para equipos rojos. Resuelve dinámicamente la hora del Controlador de Dominio a través de protocolos de red CLDAP, SMB, NTP, Kerberos, NTLM y ejecuta comandos mediante libfaketime LDPRELOAD, engañando al...

ifuncd-up

in response to Hacker News... I see you jokers on the orange websitehn are giving me a hard time. I will make a few choice responses below, but first I offer a challenge: I will send $500 of my own money to the first person who can demonstrate this attack without ifunc. I am genuinely interested,...

Freeloader

Docker support for plexmediaservercrack Patches Plex Media Server running in Docker — both the official plexinc/pms-docker image and the community lscr.io/linuxserver/plex image — using the same LDPRELOAD-on-the-PMS-exec mechanism as the native systemd install. See the top-level README and the fu...

ElfDoor-gcc

ElfDoor-gcc ElfDoor-gcc es un LDPRELOAD que secuestra gcc para inyectar código malicioso en los binarios durante el enlace, sin tocar el código fuente. Artículo detallado: https://matheuzsecurity.github.io/hacking/gcc/ Instalación git clone https://github.com/MatheuZSecurity/ElfDoor-gcc cd...

DynastyPersist

DynastyPersist 1.5 DynastyPersist: Una herramienta simplificada para lograr persistencia en Linux sin esfuerzo. Soporta KoTH, Battlegrounds y Operaciones de Pentest Instalación • Documentación • Uso Documentación CARACTERÍSTICAS Características| Descripción ---|--- Generación de Claves SSH| Gener...

assethook

AAssetHook AAssetHook is an LDPRELOAD-based hooking library that allows for replacing APK asset files dynamically without modifying an APK. It's also written in rust. It redirects asset file loads to a filepath on an Android device under /data/local/tmp/assethook/com.pkg.name. Needless to say, du...

CVE-2024-37032-PoC

CVE-2024-37032 Probllama PoC — Ollama Path Traversal and Privilege Escalation This repository contains a proof of concept FastAPI registry server, connector script, and preload demo library for authorized lab testing. Use this only on systems you own or are explicitly allowed to test. Files...

PwnAdventure3

PwnAdventure3 Welcome to Pwnie Island! Pwn Adventure 3: Pwnie Island is a limited-release, first-person, true open-world MMORPG set on a beautiful island where anything could happen. That's because this game is intentionally vulnerable to all kinds of silly hacks! Flying, endless cash, and more a...

Chankro

Chankro Your favourite tool to bypass disablefunctions and openbasedir in your pentests. How it works PHP in Linux calls a binary sendmail when the mail function is executed. If we have putenv allowed, we can set the environment variable "LDPRELOAD", so we can preload an arbitrary shared object...

azazel

Azazel V 0.1 Toute la terre a été corrompue par les œuvres qui ont été enseignées par Azazel : à lui attribuez tout péché. -- 1 Enoch 2:8 Azazel est un rootkit en espace utilisateur basé sur la technique LDPRELOAD originale du rootkit Jynx. Il est plus robuste et possède des fonctionnalités...

azazel

Azazel V 0.1 The whole earth has been corrupted through the works that were taught by Azazel: to him ascribe all sin. -- 1 Enoch 2:8 Azazel is a userland rootkit based off of the original LDPRELOAD technique from Jynx rootkit. It is more robust and has additional features, and focuses heavily...

omae-wa-cheese-da

omae-wa-cheese-da Image R/W physique arbitraire GPU CVE-2025-21479 - fuite KASLR - SELinux permissif - serveur root init-hook sécurisé RKP & contournement DEFEX exécution binaire personnalisée LDPRELOAD Cela prend environ 6 minutes.. Soyez patient. Je l'optimiserai plus tard. Appareils testés...

proxychains-ng

ProxyChains-NG версия 4.17 README ProxyChains — это UNIX-программа, которая перехватывает сетевые функции libc в ДИНАМИЧЕСКИ СВЯЗАННЫХ программах через предварительно загружаемую DLL dlsym, LDPRELOAD и перенаправляет соединения через прокси SOCKS4a/5 или HTTP. Она поддерживает только TCP без...

cve-2026-43499-aak-an00

CVE-2026-43499 · Honor WIN RT AAK-AN00 Temporary Root Research Notes Written entirely by DeepSeek, I know nothing about it Spent another few days tinkering, zero progress, gave up Currently can obtain root, but it's highly unstable; network drops after rooting, unplugging the cable triggers a...

IonStack_S21

IonStackS21 — CVE-2026-43499 research for Galaxy S21 SM-G991B Working, active KernelSU project for this device: kurtulusakyuz/dfroot-s21 — start there. This repo keeps the IonStack research only. Device-specific IonStack payload for the Samsung Galaxy S21 o1s on firmware G991BXXSJHZC2. Status:...

xzk8s

xzk8s Dockerfile и манифесты Kubernetes для воспроизведения CVE-2024-3094 Сборка образа В качестве базового образа мы используем debian-версию уязвимых утилит xz. Также необходимо пропатчить библиотеку. Исправленная версия библиотеки liblzma взята из репозитория xzbot. FROM...

CVE-2026-105740

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, any authenticated Langflow user can achieve Remote Code Execution RCE on the server by adding an MCP server with the "Stdio" transport. The user-supplied command field is passed directly to bash -c "exe...

CVE-2026-43499-OnePlus15

CVE-2026-43499 — OnePlus 15 LPE Educational PoC WARNING: This repository is provided for educational and research purposes only. No pre-built binaries or releases are distributed. You must build everything from source. Android 16 local privilege escalation for OnePlus 15. Fork of...

cve-2023-36845-scanner

Vulnerability Scanner for Juniper CVE-2023-36845 This vulnerability scanner can be used to scan Juniper firewalls to determine if they are vulnerable to CVE-2023-36845. Because this is built on top of go-exploit, this scanner has two phases: Target verification to ensure the target is a potential...

CVE-2026-43499-popsicle

CVE-2026-43499 for popsicle This repository contains an Android 16 local privilege escalation implementation for CVE-2026-43499 on Xiaomi 17 Pro Max popsicle. Verified kernel: 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k Devices with this kernel Xiaomi 17, Pro, and Ultra series have all...