chimera

Chimera 信頼できないコードを、ホストへの安全なアクセスでサンドボックス化する。...

Linux_X86_Reverse_TCP_Alphanumeric_Staged_Shellcode_Execve-bin-bash

このリポジトリには README がありません。...

monomorph

════════════════════════════════════╦═══ ╔═╦═╗ ╔═╗ ╔═╗ ╔═╗ ╔═╦═╗ ╔═╗ ╔══╔═╗ ╠═╗ ═╩ ╩ ╩═╚═╝═╩ ╩═╚═╝═╩ ╩ ╩═╚═╝═╩ ╠═╝═╩ ╩═ ════════════════════════════════╩═══════ By Retr0id ═══ MD5-Monomorphic Shellcode Packer ═══ USAGE: python3 monomorph.py inputfile outputfile payloadfile 어떤 기능을 하나요? 최대 4KB의 압축된...

cve-2011-3026-firefox

cve-2011-3026-firefox 在 Firefox（Linux/x86）上利用 CVE-2011-3026 的示例，来自我们 Black Hat 2012 的演讲： “利用 jemalloc 内存分配器：掌控 Firefox 的堆” 原始幻灯片可在以下地址获取： https://www.blackhat.com/html/bh-us-12/bh-us-12-archives.htmlArgyroudis 更新后的幻灯片位于： http://census-labs.com/news/2012/08/03/blackhat-usa-2012-update/ argp &...

how-to-bypass-aslr-on-linux-x86_64

Linux x86-64 における 64 ビット aslr の突破 この記事では、Samuel Groß が自身の Remote iPhone Exploitation Part 2: Bringing Light into the Darkness -- a Remote ASLR Bypass で説明した手法を、Linux x8664 上の ASLR をバイパスするために適用することについて説明します。 これを示すために、Buckeye CTF の pwnable チャレンジである guessgod を解いてみます。...

CVE-2026-31431

説明: Cfail は、CVE-2026-31431（別名 Copyfail）の C++ x86-64 アセンブリによる実装であり、libc を含め、まったく依存関係を必要としません。実際、標準ライブラリの最小限の実装により、すべての Linux x86-64 ディストリビューション上でスタンドアロンで実行可能なユニバーサル実行ファイルが得られます。これにより、このプログラムは「一度コンパイルすればどこでもデプロイ可能」タイプであり、「どこでも」とは、脆弱なランダムな Linux x86-64 ディストリビューションを意味します。...

CVE-2026-31431

CVE-2026-31431 CopyFail 標準バイナリ 新しいCVEアラートはすべて https://exploitroom.com で入手できます mail :: /Desktop/CVE-2026 » file exploit: ELF 64-bit LSB executable, x86-64, version 1 GNU/Linux, statically linked, BuildIDsha1=9454dbdde0ac2d1a8981c06db89f24a4753ec3b7, for GNU/Linux 3.2.0, not stripped payload: ELF...

Linux Distros Unpatched Vulnerability : CVE-2026-81016

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86/amd/pmc: Propagate SMU errors and validate S2D address amdstbs2dinit discards the return value of several S2D SMU commands. When the SMU refuses a...

Linux Distros Unpatched Vulnerability : CVE-2026-89438

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: ISST: Validate logical CPU id and clos id Validate max CLOS ID and logical CPU ID for core power feature. Reject any clos level or logical CPU...

Linux Distros Unpatched Vulnerability : CVE-2026-89443

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: ISST: Validate level in perf mask ioctls isstifgetperflevelmask and isstifgetbasefreqmask use the user-provided level as an index into perflevels...

CVE-2026-86315

An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16MA...

CVE-2026-86315: Numeric Truncation Error

An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16MA...

Linux Distros Unpatched Vulnerability : CVE-2026-86315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to...

The vulnerability of the efi_crash_gracefully_on_page_fault() function in the arch/x86/platform/efi/quirks.c module, which is part of the Linux operating system’s x86 kernel support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the efecrashgracefullyonpagefault function in the arch/x86/platform/efi/quirks.c module of the Linux operating system’s kernel support for x86 platforms is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an...

The vulnerability of the set_new_password() function in the drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c driver for X86 Linux operating system, which allows a hacker to trigger a service failure.

The vulnerability of the setnewpassword function in the drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c file of the Linux operating system’s X86 device driver module is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an...

FTP Fetch, Bind IPv6 TCP Stager with UUID Support (Linux x86)

Fetch and execute a x86 payload from an FTP server. Listen for an IPv6 connection with UUID Support Linux x86 Module Options...

FTP Fetch

Fetch and execute a x86 payload from an FTP server. Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include Msf::Payload::Adapter::Fetch::FTP include...

MAL-2026-4719 Malicious code in weavedb-exm-sdk-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3992f423f88c69e8c00223cc0ef81f970b8e178f1854beb00ef443586302ad89 package.json declares "preinstall": "./bin/install-deps", which runs a 976KB UPX-packed Linux x86 ELF binary on every npm install. The package...

Malicious code in weavedb-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886f22636b5e4726978e23b10a4311fb7e65c2b10003da72429348fa617884d1 package.json declares "preinstall": "./vendor/setup", which runs a 976KB packed Linux x86 ELF binary sha256...

MAL-2026-4652 Malicious code in python-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b94c01fae325c5f5e92abd5da03527c54e22bb48202b1dc8b3e2c64947753b2 package.json declares "preinstall": "./dist/typecheck.js". The referenced file is not JavaScript — it is a 5,224,556-byte Linux x86 ELF executable...