findyara-ida

FindYara Usa este plugin de IDA Python para escanear tu binario con reglas de Yara. Todas las coincidencias de las reglas de Yara se listarán con su offset para que puedas saltar a ellas rápidamente. 🍻 Todo el crédito de este plugin y su código es para David Berard @p0ly 🍻 Este plugin está copiad...

CVE-2024-42642

CVE-2024-42642 Introduction The device in question is any MX500-series SSD. These SSDs are controlled by a Sillicon-Motion SM2259 controller older batches had an older controller, Sillicon-Motion SM2258, but the main focus of this document is the newer one. SM2259 is a 4-channel SATA 6Gb/s...

OffsetInspect

OffsetInspect...

python-uncompyle6

|buildstatus| |Pypi Installs| |Latest Version| |Supported Python Versions| |packagestatus| .. contents:: uncompyle6 A native Python cross-version decompiler and fragment decompiler. The successor to decompyle, uncompyle, and uncompyle2. I gave a talk on this at BlackHat Asia 2024 . Introduction...

libc-database

Web 界面 libc-database 现已提供 Web 服务和前端。请访问 https://libc.rip/ 体验！ 如果您对 API 感兴趣，请阅读 https://github.com/niklasb/libc-database/tree/master/searchengine。 构建 libc 偏移数据库 如果遇到错误，请查看下面的“需求”部分。 下载所需的 libc 类别并提取符号偏移。不会重复下载任何内容，因此您也可以使用它来更新数据库： root@kitploit: $ ./get 列出类别 $ ./get ubuntu debian 下载 Ubuntu 和 Debia...

CVE-2022-32981

CVE-2022-32981 PoC para CVE-2022-32981 en desarrollo necesita pruebas + ajustar el offset al correcto para la función de explotación...

the-backdoor-factory

The new version of BACKDOOR FACTORY is available! Get access here: https://github.com/sponsors/secretsquirrel WARNING: Pull Requests WILL BE IGNORED AND CLOSED. The Backdoor Factory BDF For security professionals and researchers only. The goal of BDF is to patch executable binaries with user...

CVE-2017-16995

CVE-2017-16995 probado para Ubuntu 16.04.01 - Linux 4.4.0-31-generic 50-Ubuntu SMP Wed Jul 13 00:07:12 UTC 2016 x8664 Esta vulnerabilidad permite a un usuario simple realizar una escalada de privilegios y obtener una shell de root si el kernel es diferente, ajustar el offset de CRED + verificar e...

token-reverser

Token Reverser Words list generator to crack security tokens. Installation root@kitploit: $ git clone https://github.com/dariusztytko/token-reverser.git Example use case 1. You are testing reset password function 2. Reset password token was sent to your email box e.g...

PwnCtfTool

ret2win 挑战的工具。 root@kitploit: / \ / / // / / / / / // / | /| / / / / / / / / / / / / / / /| |/ |/ / / / / // // / / / / // / // / / // |/|// ///// // /// 作者：DiegoAltF4 和 Dbd4 简介 它既可以在本地使用，也可以远程使用（指定 IP 和端口）。它会自动查找栈中存储的指令指针偏移量。 此外，还可以配置为返回一个 shell。默认情况下，它会打印连接接收到的数据（可能的 flag）。...

CVE-2020-0796-PoC

CVE-2020-0796 PoC aka CoronaBlue aka SMBGhost Usage ./CVE-2020-0796.py servername This script connects to the target host, and compresses the authentication request with a bad offset field set in the transformation header, causing the decompressor to buffer overflow and crash the target. This...

cve_2022_0847_shellcode

cve20220847shellcode Descripción Este repositorio contiene un script de Python genshellcode.py, basado en pwntools, para generar un shellcode que implementa CVE-2022-0847. El shellcode está basado en este PoC: antx. Analicé el código del PoC y su ejecución con strace para capturar todas las...

CVE-2026-90560 zstd-jni 1.2.0 through 1.5.7-13 Out-of-Bounds Read via ZstdDictDecompress

zstd-jni versions 1.2.0 through 1.5.7-13 contain an out-of-bounds read vulnerability in the ZstdDictDecompress constructor because offset and length arguments are never validated against the dictionary array bounds. Attackers can supply arbitrary offset or length values to read memory past the en...

Linux Distros Unpatched Vulnerability : CVE-2026-89678

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: fix partial-write detection in nfsddirectwrite nfsddirectwrite walks a list of write segments and, after each vfsiocbiterwrite, tries to detect a short...

Linux Distros Unpatched Vulnerability : CVE-2026-80978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: cap advertised IP tunnel headroom IP tunnel devices derive their advertised neededheadroom from lower output devices. A stack of user-created devices can...

CVE-2026-89438

A flaw was found in the Linux kernel, specifically within the Intel Speed Select Technology ISST component. This vulnerability arises from insufficient validation of input values, such as logical CPU ID and CLOS ID, used in the core power feature. A local attacker could exploit this by providing...

CVE-2026-89611

A flaw was found in the Linux kernel. The NTFS file system driver does not properly validate non-resident attribute offsets when converting between sparse and non-sparse attributes. A local attacker could craft a malicious Master File Table MFT record, which could lead to writing data beyond...

CVE-2026-54240

libde265 , an open-source H.265/HEVC video codec library, is affected by a signed integer overflow in its pixel accessor. Versions prior to 1.1.1 use signed 32-bit arithmetic to compute pixel offsets; a crafted HEVC stream with large image dimensions can overflow this value, causing out-of-bounds...

CVE-2026-89678

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix partial-write detection in nfsddirectwrite nfsddirectwrite walks a list of write segments and, after each vfsiocbiterwrite, tries to detect a short write so the loop can stop before placing the next segment at a wrong...

DEBIAN-CVE-2026-89678

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix partial-write detection in nfsddirectwrite nfsddirectwrite walks a list of write segments and, after each vfsiocbiterwrite, tries to detect a short write so the loop can stop before placing the next segment at a wrong...