317 matches found
VMInjector
V M I n j e c t o r c 2012 by Marco Batista Licensed under GPLv3 see LICENSE file 概览： VMInjector 是一款工具，旨在通过直接内存操作，绕过在 VMware Workstation/Player 上运行的主流操作系统的登录认证屏幕。 描述： VMInjector 是一款通过操作 VMware 客户机内存以绕过操作系统认证屏幕的工具。 VMware 管理分配给客户操作系统的资源，包括 RAM 内存。VMInjector 将 DLL 库注入到 VMWare 进程中，以获取对映射资源的访问权限。该 DL...
inception
注意：此工具已不再活跃开发，请查看 PCILeech 代替。 INCEPTION Inception 是一款利用基于 PCI 的 DMA 进行物理内存操控和黑客攻击的工具。该工具可通过 FireWire、Thunderbolt、ExpressCard、PC Card 以及任何其他 PCI/PCIe 硬件接口进行攻击。 Inception 旨在提供一种 相对 快速、稳定、简单且可扩展的方式，通过 DMA 对运行中的计算机执行侵入性和非侵入性内存攻击。 工作原理 Inception 的模块工作原理如下：通过向受害者机器呈现一个序列总线协议 2（SBP-2）单元目录（通过 IEEE1394...
wmi-static-spoofer
wmi-static-spoofer 动机： 最初的动机是绕过反作弊等侵入性软件使用的 HWID 检测方法，或软件中实施的许可限制。这个概念并不新鲜，但其他解决方案需要始终加载驱动程序，并需要一个可能不稳定的内核钩子。本项目仅使用直接内存操作，并使得在不挂钩函数或不始终保持加载内核模块的情况下伪造序列号成为可能。 描述： 在内核模式下伪造 HDD/磁盘驱动器的序列号，无需挂钩任何东西。更改序列号后，驱动程序可以被完全卸载。 这更像是一个 PoC，还有很多方面需要优化 它会生成一个固定长度的随机序列号，可在 main.h 文件中更改 该 spoofer 的偏移量也可以在上述 main.h...
ScareCrow
このリポジトリはアーカイブされました 最新バージョンのScareCrowを表示するか、問題を報告するには、https://github.com/Tylous/ScareCrow を参照してください。 ScareCrow 詳細情報 このフレームワークで使用されている技術について詳しく知りたい場合は、Part 1 と Part 2 をご覧ください。 概要...
CVE-2026-98034
A flaw was found in the Linux kernel's eBPF Extended Berkeley Packet Filter verifier. This flaw allows a local user to achieve privilege escalation by submitting a specially crafted eBPF program. Because the verifier fails to properly track register precision when writing to kernel pointers, it...
PYSEC-2026-1782 Picklescan does not block ctypes
Summary Picklescan doesnt flag ctypes module as a dangerous module, which is a huge issue. ctypes is basically a foreign function interface library and can be used to Load DLLs Call C functions directly Manipulate memory raw pointers. This can allow attackers to achieve RCE by invoking direct...
vulnerability-playtest
Vulnerability Playtest This repository is an area to test out...
CVE-2026-6241: Use of Externally-Controlled Format String
An authenticated format string vulnerability is present in the ONVIF AddScopes in Tapo C520WS v2, where user-controlled input is improperly passed to formatting functions without adequate sanitization. An attacker can inject format specifiers into ONVIF scope parameters to manipulate memory...
php: PHP SOAP extension: Remote Code Execution via use-after-free vulnerability
A flaw was found in PHP's SOAP extension. This vulnerability allows a remote attacker to execute arbitrary code on the affected system. The issue stems from a use-after-free error in the object deduplication mechanism, which can be triggered by sending a specially crafted SOAP request. This allow...
JLSEC-2026-335
A vulnerability has been found in HDF5 up to 1.14.6 and classified as problematic. This vulnerability affects the function H5MMrealloc of the file src/H5MM.c. The manipulation of the argument mem leads to double free. The attack needs to be approached locally. The exploit has been disclosed to th...
Exploit for Improper Input Validation in Intel Ethernet_Diagnostics_Driver_Iqvw32.Sys
CVE-2015-2291-Spoofer Overview of a application that I reverse...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from direct manipulation of shared memory, which could lead to information disclosure or integrity corruption...
CVE-2025-54065 GZDoom engine allows arbitrary code execution via ZScript actor states
GZDoom is a feature centric port for all Doom engine games. GZDoom is an open source Doom engine. In versions 4.14.2 and earlier, ZScript actor state handling allows scripts to read arbitrary addresses, write constants into the JIT-compiled code section, and redirect control flow through crafted...
📄 macOS 18.3.2 VM_BEHAVIOR_ZERO_WIRED_PAGES Handling
A vulnerability exists in the way macOS handles VMBEHAVIORZEROWIREDPAGES combined with mmap + mlock + vmdeallocate on a read-only mapped file. A local attacker may trigger abnormal kernel behavior depending on system conditions. This proof of concept is purely academic and demonstrates a controll...
ASUS Armoury Crate 安全漏洞
ASUS Armoury Crate is a utility software developed by ASUS to centrally control and manage ROG Gamerland and some ASUS gaming products. ASUS Armoury Crate suffers from an improperly restricted memory buffer manipulation vulnerability that can be exploited by an attacker to cause a local elevation...
EUVD-2021-12917
Malware in sbrugna...
EUVD-2008-5877
Malware in sbrugna...
EUVD-2017-7746
Malware in sbrugna...