Amsi-Killer

Bypass de AMSI de por vida Escaneo de Opcodes obtenemos la dirección exacta de la instrucción de salto buscando el primer byte de cada instrucción; esta técnica es efectiva incluso ante actualizaciones o modificaciones del conjunto de datos objetivo. por ejemplo : | 48:85D2 | test rdx, rdx | | 74...

CVE-2020-25478--ASUS-RT-AC87U-TFTP-is-vulnerable-to-Denial-of-Service-DoS-attack

ASUS-RT-AC87U-TFTP-है-संवेदनशील-प्रति-Denial-of-Service-DoS-हमला CVE-2020-25478 - ASUS RT-AC87U TFTP Denial of Service DoS हमले के प्रति संवेदनशील है 1. प्रभावित उत्पादों और संस्करणों के नाम ASUS RT-AC87U 3.0.0.4.38251640 2. समस्या प्रकार यह मुख्य रूप से CWE-20 से संबंधित है, ASUS RT-AC87U पर चलन...

shellme

shellme Weil Sie manchmal schnell Shellcode und Opcodes benötigen. Dieses Skript kapselt im Wesentlichen einige nasm/objdump-Aufrufe in ein praktisches Skript. root@kitploit: bryan@devbox:/shellme$ python shellme.py usage: shellme.py -h -n FILE -o OUTPUT -i INSTRUCTION -a ARCH optional arguments:...

SharpKiller

SharpKiller @ZeroMemoryEx द्वारा लिखित AMSI-Killer का लाइफटाइम AMSI बाइपास, .NET Framework 4.8 पर पोर्ट किया गया। अतिरिक्त ऑब्सफस्केशन आवश्यक https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=VirTool:MSIL/SharpKiller.A&ThreatID=2147895059 नए एकीकृत फीचर्स: x - हर...

shellnoob

ShellNoob Writing shellcodes has always been super fun, but some parts are extremely boring and error prone. Focus only on the fun part, and use ShellNoob! For a quick overview, check the slides for the Black Hat Arsenal talk: link Want to contribute? Feature request? Bug report? Swears? All...

sandsifter

s a n d s i f t e r : the x86 processor fuzzer Overview The sandsifter audits x86 processors for hidden instructions and hardware bugs, by systematically generating machine code to search through a processor's instruction set, and monitoring execution for anomalies. Sandsifter has uncovered secre...

CVE-2026-79657

NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific safe callables. Attackers can craft malicious pickle payloads invoking dangerous in-namespace functions like ReppTokenizer.execute and...

DeadDialect

DeadDialect Jeder Systemstart spricht eine andere Sprache. Die Binärdatei von gestern ist der tote Code von heute. Ein sitzungs-eindeutiges RISC-V-ISA-Umordnungssystem. Bei jedem Systemstart wird eine neue kryptografische Permutation des Befehlssatzes erzeugt. Für eine Sitzung kompilierte...

NashaVM

NashaVM - Macchina Virtuale Nativa Sharp Nasha è una macchina virtuale per file .NET e il suo runtime è stato realizzato in C++/CLI Installazione root@kitploit: git clone https://github.com/Mrakovic-ORG/NashaVM --recurse cd NashaVM\NashaVM nuget restore msbuild Dipendenze dnlib .NET Framework...

CVE-2026-52735 ZEBRA: Consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, Zebra can accept a block that zcashd rejects because the P2SH signature-operation counter undercounts redeem scripts containing a disabled opcode followed by signature opcodes. In zebra-script/src/lib.rs, p2shinputsigopcount used the...

CVE-2026-52735 ZEBRA: Consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, Zebra can accept a block that zcashd rejects because the P2SH signature-operation counter undercounts redeem scripts containing a disabled opcode followed by signature opcodes. In zebra-script/src/lib.rs, p2shinputsigopcount used the...

CVE-2026-52735

Zebra (a Rust-based Zcash node) used a pure-Rust P2SH sigop counter that short-circuited on disabled opcodes like OP_CODESEPARATOR, undercounting sigops compared to zcashd. An attacker without mining power could trigger a chain split by broadcasting P2SH spends with malicious redeem scripts. Fixe...

CVE-2026-72284

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Ignore KVM's internal "service pending PV EOI" request if the vCPU has disabled PV EOIs since the request was made. Asserting that PV EOIs are enabled can fai...

EUVD-2026-59183

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Ignore KVM's internal "service pending PV EOI" request if the vCPU has disabled PV EOIs since the request was made. Asserting that PV EOIs are enabled can fai...

Linux Distros Unpatched Vulnerability : CVE-2026-72284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Ignore KVM's internal service pending PV EOI request if the vCPU has disabled PV EOIs sin...

PT-2026-72472

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Ignore KVM's internal "service pending PV EOI" request if the vCPU has disabled PV EOIs since the request was made. Asserting that PV EOIs are enabled can fai...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Check the length of skb for an unknown CC opcode. In hcicmdCompleteevt, if the command completion event has an unknown opcode, we assume that the first byte of skb-data contains the return status. However, th...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference through modRMRequired and decode in arch/X86/X86DisassemblerDecoder.c. An attacker can crash any application using a reduced X86 Capstone build by supplying crafted x86/x86-64 input containing a 3DNow! opcode...

EUVD-2026-46398

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in modRMRequired and decode when disassembling 3DNow! opcodes 0F 0F in builds compiled with -DCAPSTONEX86REDUCE, allowing a remote attacker to crash any application using the reduced X86...

EUVD-2026-45485

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on f2fsgetnodefoliora kernel BUG at fs/f2fs/file.c:845! Oops: invalid opcode: 0000 1 SMP KASAN NOPTI CPU: 0 UID: 0 PID: 5336 Comm: syz.0.0 Not tainted syzkaller 0 PREEMPTfull Hardware name: QEMU...