304 matches found
inception
참고: 이 도구는 더 이상 활발하게 개발되지 않습니다. 대신 PCILeech를 참조하세요. INCEPTION Inception은 PCI 기반 DMA를 악용하는 물리 메모리 조작 및 해킹 도구입니다. 이 도구는 FireWire, Thunderbolt, ExpressCard, PC Card 및 기타 모든 PCI/PCIe 하드웨어 인터페이스를 통해 공격할 수 있습니다. Inception은 DMA를 사용하여 실행 중인 컴퓨터에 대해 침습적 및 비침습적 메모리 해킹을 수행할 수 있는 비교적 빠르고 안정적이며 쉽고 확장 가능한 방법을...
VMInjector
V M I n j e c t o r root@kitploit: c 2012 by Marco Batista Licensed under GPLv3 see LICENSE file 概要: VMInjector は、VMware Workstation/Player 上で動作する主要なオペレーティングシステムの OS ログイン認証画面を、直接メモリ操作によってバイパスするために設計されたツールです。 説明: VMInjector は、VMware ゲストのメモリを操作して OS の認証画面をバイパスするツールです。 VMware は、ゲスト OS に割り当てられたリソース R...
wmi-static-spoofer
wmi-static-spoofer 동기: 초기 동기는 안티치트와 같은 침습적 소프트웨어나 소프트웨어에 구현된 라이선스 제한에 사용되는 HWID 탐지 방법을 우회하는 것입니다. 개념은 새로운 것이 아니지만 다른 솔루션은 항상 로드된 드라이버와 커널 후크가 필요하며 불안정할 수 있습니다. 이 프로젝트는 직접 메모리 조작만 사용하며, 함수를 후킹하거나 항상 로드된 커널 모듈 없이도 시리얼을 위조할 수 있게 합니다. 설명: 아무것도 후킹하지 않고 커널 모드에서 HDD/디스크 드라이브의 시리얼번호를 위조합니다. 드라이버는 시리얼번호를...
ScareCrow
ЭТОТ РЕПОЗИТОРИЙ ЗААРХИВИРОВАН Чтобы просмотреть последнюю версию ScareCrow или отправить проблему, обратитесь к https://github.com/Tylous/ScareCrow. ScareCrow Дополнительная информация Если вы хотите узнать больше о методах, используемых в этом фреймворке, пожалуйста, ознакомьтесь с Частью 1 и...
PYSEC-2026-1782 Picklescan does not block ctypes
Summary Picklescan doesnt flag ctypes module as a dangerous module, which is a huge issue. ctypes is basically a foreign function interface library and can be used to Load DLLs Call C functions directly Manipulate memory raw pointers. This can allow attackers to achieve RCE by invoking direct...
php: php-soap: php-src: PHP SOAP extension: Remote Code Execution via use-after-free vulnerability
A flaw was found in PHP's SOAP extension. This vulnerability allows a remote attacker to execute arbitrary code on the affected system. The issue stems from a use-after-free error in the object deduplication mechanism, which can be triggered by sending a specially crafted SOAP request. This allow...
JLSEC-2026-335
A vulnerability has been found in HDF5 up to 1.14.6 and classified as problematic. This vulnerability affects the function H5MMrealloc of the file src/H5MM.c. The manipulation of the argument mem leads to double free. The attack needs to be approached locally. The exploit has been disclosed to th...
Exploit for Improper Input Validation in Intel Ethernet_Diagnostics_Driver_Iqvw32.Sys
CVE-2015-2291-Spoofer Overview of a application that I reverse...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from direct manipulation of shared memory, which could lead to information disclosure or integrity corruption...
CVE-2025-54065 GZDoom engine allows arbitrary code execution via ZScript actor states
GZDoom is a feature centric port for all Doom engine games. GZDoom is an open source Doom engine. In versions 4.14.2 and earlier, ZScript actor state handling allows scripts to read arbitrary addresses, write constants into the JIT-compiled code section, and redirect control flow through crafted...
📄 macOS 18.3.2 VM_BEHAVIOR_ZERO_WIRED_PAGES Handling
A vulnerability exists in the way macOS handles VMBEHAVIORZEROWIREDPAGES combined with mmap + mlock + vmdeallocate on a read-only mapped file. A local attacker may trigger abnormal kernel behavior depending on system conditions. This proof of concept is purely academic and demonstrates a controll...
ASUS Armoury Crate 安全漏洞
ASUS Armoury Crate is a utility software developed by ASUS to centrally control and manage ROG Gamerland and some ASUS gaming products. ASUS Armoury Crate suffers from an improperly restricted memory buffer manipulation vulnerability that can be exploited by an attacker to cause a local elevation...
EUVD-2005-0011
Malware in sbrugna...
EUVD-2008-5877
Malware in sbrugna...
EUVD-2020-20283
Malware in sbrugna...
EUVD-2020-18351
Malware in sbrugna...
EUVD-2018-3756
Malware in sbrugna...
EUVD-2017-7746
Malware in sbrugna...