DFShell

root@kitploit: ██████╗ ███████╗███████╗██╗ ██╗███████╗██╗ ██╗ ██╔══██╗██╔════╝██╔════╝██║ ██║██╔════╝██║ ██║ ██║ ██║█████╗ ███████╗███████║█████╗ ██║ ██║ ██║ ██║██╔══╝ ╚════██║██╔══██║██╔══╝ ██║ ██║ ██████╔╝██║ ███████║██║ ██║███████╗███████╗███████╗ ╚═════╝ ╚═╝ ╚══════╝╚═╝...

Remote-BOF-Runner

远程BOF运行器 一个Havoc扩展框架，用于通过使用Crystal Palace制作的PIC加载器远程执行Beacon对象文件（BOF）。 概述 远程BOF运行器通过利用Crystal Palace PIC加载器，能够在任意进程中安全执行BOF。该框架通过命名管道实现复杂的进程间通信（IPC）机制，将注入进程中的Beacon输出透明地转发回命令与控制（C2）服务器。 设置与安装 扩展安装 确保扩展安装在Havoc扩展目录中： root@kitploit: 你的HAVOC文件夹 + /data/extensions/ 依赖项 要编译PIC加载器，系统上必须安装以下工具和库：...

CVE-2019-19470-RedTeamRD

CVE-2019-19470-RedTeamRD 此仓库包含用于复现由CODEWHITE发现的CVE-2019-19470漏洞利用的代码和说明。这里提供了我在HackTheBox meetup上使用的示例源代码，用以解释我学习并创建此漏洞利用的过程。 Named Pipe Client and Server Example 1 Named Pipe Client and Server Example 2 Descompilación Example Comandos de WinDbg Código para modificación del PEB Exploit -...

PipeViewer

Windows 名前付きパイプを表示し、安全でないアクセス許可を検索するための GUI ツールです。 このツールは、Docker 名前付きパイプに関する調査の一環として公開されました。 "Breaking Docker Named Pipes SYSTEMatically: Docker Desktop Privilege Escalation – Part 1" "Breaking Docker Named Pipes SYSTEMatically: Docker Desktop Privilege Escalation – Part 2" 概要 PipeViewer は、Window...

pipe_finder

Pipe Finder 1.0 在SMB协议中自动搜索可用管道名称的脚本 截图 依赖要求 metasploit-framework wget locate pipeauditv2.rb 模块 https://github.com/peterpt/pipeauditorfb - 将在首次运行时安装 安装依赖 apt-get install metasploit-framework wget locate && updatedb updatedb 仅用于缓存 "locate" 搜索数据库，以便获取 metasploit-framework 目录 运行方式 git clone...

CVE-2022-25365

CVE-2022-25365 La vulnerabilidad de escalada de privilegios en Docker Desktop para Windows referencia: https://www.cyberark.com/resources/threat-research-blog/breaking-docker-named-pipes-systematically-docker-desktop-privilege-escalation-part-1 Lista de archivos poc.py Programado por followboy199...

pipe-intercept

pipe-intercept 使用 Burp 或类似的 HTTP 代理工具拦截 Windows 命名管道通信 命名管道（Named Pipes）在 Windows 上广泛用于进程间通信。它们被许多应用程序使用，包括 Windows 远程过程调用（RPC）。此工具旨在让安全研究人员和渗透测试人员能够对使用命名管道的应用程序进行安全评估。 本项目灵感来源于 CyberArk Labs 出色的 MITMIntercept 项目。 它是如何工作的？ 该工具创建了一个管道客户端/服务器代理，并附带 WebSocket 客户端/服务器桥接。WebSocket 客户端通过 HTTP 代理（如...

Windows-Kernel-Exploitation

1. Explotación de Desbordamiento del Non-Paged Pool con Named Pipes Técnicas basadas en named pipes para la explotación de desbordamientos de pool, demostradas en CVE-2020-17087 y un desbordamiento off-by-one 2. Abuso de Metadatos del Asignador VS del Segment Heap Técnicas para convertir una...

EUVD-2026-67687

filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server...

CVE-2026-82235

filebrowser through 2.63.23 fails to validate named pipes in its directory archive and public download handlers. This causes blocking open syscalls that pin server goroutines and exhaust connection resources, resulting in a denial of service . Both authenticated users and anonymous visitors with ...

CVE-2026-82235 filebrowser through 2.63.23 Denial of Service via named pipes

filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server...

CVE-2026-82235 filebrowser through 2.63.23 Denial of Service via named pipes

filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server...

Windows-Non-Paged-Pool-Overflow-Exploitation

Índice Índice Introdução Introdução a Named Pipes Exploração Espalhamento do pool não paginado Divulgação de memória/Leitura arbitrária Controle completo sobre os dados de transbordo Controle limitado sobre os dados de transbordo Escrita arbitrária Liberação arbitrária de objetos...

CVE-2026-14478

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability...

CVE-2026-14478 Incorrect Permission Assignment in Autodesk Installer Named Pipes

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability...

EUVD-2026-57238

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability...

CVE-2026-14478

The CVE-2026-14478 issue concerns Autodesk's installer named pipes. A malicious executable run on a victim machine could allow a local, low-privilege attacker to inject unauthenticated IPC messages into these named pipes, and to modify pipe permissions or ownership, with potential impact to confi...

PT-2026-71096

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A local low-privileged attacker can execute a maliciously created executable on a victim's machine to inject unauthenticated Inter-Process Communication IPC...

GHSA-3WFC-MGPM-9RQ6 comm: FIFO/pipe inputs are drained before comparison (data loss / hang)

The comm utility in uutils coreutils incorrectly consumes data from non-regular file inputs before performing comparison operations. The arefilesidentical function opens and reads from both input paths to compare content without first verifying if the paths refer to regular files. If an input pat...

📄 FIFOFox: Windows Named-Pipe Weak Permission and Access Control Validation

This C-based framework analyzes Windows named pipes for insecure permission configurations and weak access controls that could introduce privilege boundary issues. The code collects metadata about target pipes, inspects security descriptors and DACL configurations, checks for potentially unsafe...