15283 matches found
BlobRunner
BlobRunner BlobRunner is a simple tool to quickly debug shellcode extracted during malware analysis. BlobRunner allocates memory for the target file and jumps to the base or offset of the allocated memory. This allows an analyst to quickly debug into extracted artifacts with minimal overhead and...
CVE-2026-32941
A framework-wide vulnerability in Sliver C2 allows for an unauthenticated, remote Denial of Service by triggering Uncontrolled Memory Allocation CWE-789 / CWE-400, leading to a process-wide Out-of-Memory OOM crash. References: Tenable Reproduction Steps: 1. Extract Credentials: Obtain the mTLS...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP 5.6 upload-progress research for CVE-2026-109618 and CVE-2...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-demo Un laboratorio pequeño para entender con los...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell: CVE-2026–109618, CVE-2026–109619 PoC — Pre-Auth RC...
GPU_ShellCode
gpu poisoning; hide the payload inside the gpu memory. after my older repo, in which i used the thread description to hide the payload, i wanted to find new way, so now im using nividia gpu memory using cuda api's to allocate, write, and free when there is no need for the payload to be found in...
CVE-2026-49975
CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ https://github.com/user-attachments/assets/89310771-f704-45d1-a6c3-d910de1dbc74 Overview CVE-2026-49975 is a Denial of Service DoS vulnerability in Apache HTTP Server. The vulnerability occurs in the HTTP/2 request handling path, where...
unicorn-bios
unicorn-bios About Basic BIOS emulator/debugger for Unicorn Engine. Written to debug the XEOS Operating System boot sequence. Usage: Usage: unicorn-bios OPTIONS BOOTIMG Options: --help / -h: Displays help. --memory / -m: The amount of memory to allocate for the virtual machine in megabytes...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shellcheck Are you actually on the PHP2Shell fix? One...
CVE-2018-19320-LPE
CVE-2018-19320 LPE Exploit Description Local Privilege Escalation Exploit of CVE-2018-19320. The exploit uses the exposed functions in gdrv.sys that allow a low-level user to allocate and write data to memory for escalating the privileges to SYSTEM. ScreenShot Tested on: Windows 10 x64 21H1 OS...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
patchferry-check Free, read-only scripts that check a server...
Formbook-Payload-Extraction-XOR-Decryption-Net-Assembly-Analysis
1. x32dbg – Encrypted Configuration Decryption & Memory Allocation The x32dbg memory dump reveals that Formbook decrypts its configuration data and allocates memory for it using NtAllocateVirtualMemory. Key Observations: NtAllocateVirtualMemory – Allocates memory for the decrypted payload. mov...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell detection package Defensive detection and response...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell CVE-2026-109618, CVE-2026-109619: indicators and l...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell PoC — GHSA-w8hw-w9fx-j79w / CVE-2026-109618 !Lice...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
Through Burp use -k since the script won't trust Burp's CA by...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell — tek komutluk sarmalayıcı CVE-2026-109618 / CVE-20...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-poc CVE-...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
🛡️ PHP2Shell Sentinel PHP Runtime Vulnerability Assessment...
Important: runfinch-finch
Issue Overview: When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit...