dlinject

dlinject.py Injecter une bibliothèque partagée c'est-à-dire du code arbitraire dans un processus Linux en cours d'exécution, sans ptrace. Inspiré par Cexigua et linux-inject, entre autres. Utilisation root@kitploit: .. . | /| | || || / | .. / | | | | |/ \ | |/ / \ \ \ | \ | |/|| /| |\ \ | /| //...

nasm_linux_x86_64_pure_sharedlib

NASM Linux x8664 чистая без зависимостей разделяемая библиотека .so Протестировано с «Reflective SO injection». Техника инъекции библиотек, в которой используется концепция рефлексивного программирования для загрузки библиотеки из памяти в процесс-хост...

TripleCross

TripleCross TripleCross est un rootkit Linux eBPF qui démontre les capacités offensives de la technologie eBPF. TripleCross s'inspire de conceptions d'implantations antérieures dans ce domaine, notamment les travaux de Jeff Dileo à DEFCON 271, Pat Hogan à DEFCON 292, Guillaume Fournier et Sylvain...

CVE-2021-3156

CVE-2021-3156 Introduction Ce dépôt a été créé à des fins d'étude. Le projet contient des outils pour étudier la vulnérabilité sudo Baron Samedit et l'exploit correspondant. Merci à Qualys Team d'avoir découvert cette vulnérabilité, à Worawit et 0xdevil pour les analyses intéressantes. Utilisatio...

POC-IngressNightmare-CVE-2025-1974

POC эксплойта IngressNightmare CVE-2025-1974 Разработано на основе: https://github.com/yoshino-s/CVE-2025-1974 https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Слова дешёвы, просто смотрите код. Подробности можно найти на...

CVE-2025-32463

CVE-2025-32463 - Эксплойт повышения привилегий через chroot в sudo Обзор CVE-2025-32463 — это критическая уязвимость локального повышения привилегий в sudo версий с 1.9.14 по 1.9.17. Уязвимость позволяет атакующим, имеющим привилегии sudo, повысить их до root, используя недостаток логики обработк...

linux_injector

linuxinjector Un semplice iniettore di librerie condivise senza ptrace per Linux x64. Uso linuxinjector modalità 1. dlopen normale 2. memfd + dlopen per l'iniezione in container 3. shellcode grezzo pid ID del processo target. È necessario avere i diritti ptrace su di esso richiesto per accedere a...

CVE-2024-0132

CVE-2024-0132 PoC di CVE-2024-0132 Iniziamo scegliendo un'immagine di base. La disposizione delle librerie nel sistema dipende da quale sarà. Ad esempio, per alpine sarà /usr/lib64/, per ubuntu sarà /usr/lib/x8664-linux-gnu. Useremo ubuntu come immagine di base. root@kitploit: FROM ubuntu Il...

noSAMBAnoCRY-CVE-2017-7494

noSAMBAnoCRY CVE-2017-7494 Exploit remoto per la vulnerabilità SAMBA CVE-2017-7494 conosciuta come isknowpipename! Dettagli Questo exploit è diviso in 3 parti: Compila la evilLib nelle seguenti architetture: x8664, x86 o i686 Trova una condivisione scrivibile e carica evilLib al suo interno! Cari...

CVE-2025-32463

README - sudo-chwoot.sh Descrizione Questo script è un proof of concept PoC che dimostra una tecnica di privilege escalation sfruttando una vulnerabilità teorica in 'sudo' es. CVE-2025-32463. Il PoC forza 'sudo' a caricare una libreria .so manipolata sfruttando la funzionalità '-R' chroot e una...

GHSA-P7H3-7Q52-72W8 printenv: environment variables with invalid UTF-8 are silently skipped (evades inspection)

The printenv utility in uutils coreutils fails to display environment variables containing invalid UTF-8 byte sequences. While POSIX permits arbitrary bytes in environment strings, the uutils implementation silently skips these entries rather than printing the raw bytes. This vulnerability allows...

EUVD-2026-25014

printenv: environment variables with invalid UTF-8 are silently skipped evades inspection...

FreeBSD : FreeBSD -- Flaw in Linuxulator execution of setugid binaries (fa5289e4-6473-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the fa5289e4-6473-11f1-958d-bc241121aa0a advisory. The Linuxulator determined whether a binary was set-user-ID or set-group-ID by checking the PSUGID...

CVE-2026-24064

Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability. A trusted XPC client component included with the product is signed with hardened runtime entitlements that permit dynamic library injection. A local attacker can set the DYLDINSERTLIBRARIES...

EUVD-2026-35447

Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability. A trusted XPC client component included with the product is signed with hardened runtime entitlements that permit dynamic library injection. A local attacker can set the DYLDINSERTLIBRARIES...

CVE-2026-24064

Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability. A trusted XPC client component included with the product is signed with hardened runtime entitlements that permit dynamic library injection. A local attacker can set the DYLDINSERTLIBRARIES...

CVE-2026-24064 Local Privilege Escalation via Dynamic Library Injection in Waves Central for macOS

Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability. A trusted XPC client component included with the product is signed with hardened runtime entitlements that permit dynamic library injection. A local attacker can set the DYLDINSERTLIBRARIES...

CVE-2026-24064 Local Privilege Escalation via Dynamic Library Injection in Waves Central for macOS

Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability. A trusted XPC client component included with the product is signed with hardened runtime entitlements that permit dynamic library injection. A local attacker can set the DYLDINSERTLIBRARIES...

CVE-2026-24064

Waves Central for macOS (versions 13.0.9–16.5.5) contains a local privilege escalation due to a trusted XPC client component signed with hardened runtime entitlements that allows dynamic library injection via DYLD_INSERT_LIBRARIES. An attacker can inject code into the trusted process at launch, w...

Waves Central 代码问题漏洞

Waves Central is an audio software licensing and product management tool developed by Waves Corporation. Versions of Waves Central for macOS from 13.0.9 to 16.5.5 contain code vulnerabilities. These vulnerabilities stem from the use of a trusted XPC client component that employs enhanced runtime...