Android-Imgui-Template

Android ImGui Template Android menu template using Zygisk + ImGui. https://github.com/user-attachments/assets/816113d9-611d-4909-a08e-0f4e8ab6d03b Requirements Android NDK r27 ndk;27.0.12077973 Build Locally export ANDROIDNDKHOME=/path/to/ndk/27.0.12077973 $ANDROIDNDKHOME/ndk-build ...

PoC_CVE-2017-0807

Proof of concept of CVE-2017-0807 This is a demo application with deliberately sloppy interface for the CVE-2017-0807 reported by Efthimios Alepis and Constantinos Patsakis. The vulnerability illustrates that due to security issues in every Android version up to Nougat, an unprivileged user can...

Vulnerable-Docker-Engine

CVE-2021-41091 This exploit offers an in-depth look at the CVE-2021-41091 security vulnerability and provides a step-by-step guide on how to utilize the exploit script to achieve privilege escalation on a host. Vulnerability Summary CVE-2021-41091 is a flaw in Moby Docker Engine that allows...

holos

Docker compose for KVM. Define multi-VM stacks in one YAML file. No libvirt, no XML, no distributed control plane. Website and docs: https://zeroecco.github.io/holos/ The primitive is a VM, not a container. Every workload instance gets its own kernel boundary, qcow2 overlay, cloud-init seed, and...

CVE-2023-0386-go-poc

Go PoC of CVE-2023-0386 ./main /tmp/fuse Will run the program and create a fuse mount on "/tmp/fuse" directory. Expects you've compiled the shell in the root directory with a name of "shell" by default. After you've run the program, there should be an executable binary in the "/tmp/ovlmerged/"...

WantasticCore

Wantastic A self-hosted WireGuard mesh with a browser admin portal, all in one container. Try the demo → · Join Discord → Why Wantastic The overlay-VPN space is crowded — Tailscale, Headscale, NetBird, wg-easy. They all stop at "your devices can reach each other." Wantastic keeps going. 1. You...

pilotprotocol

Pilot Protocol The network stack for AI agents. Addresses. Ports. Tunnels. Encryption. Trust. Docs · Wire Spec · Whitepaper · IETF Draft · Agent Skills · Polo Live Dashboard The internet was built for humans. AI agents have no address, no identity, no way to be reached. Pilot Protocol is an overl...

malwoverview

Malwoverview !Alt...

CVE-2023-0386

README gcc -Wall exp.c pkg-config fuse --cflags --libs -o exp ./exp /tmp Vulnerability Analysis The theoretical knowledge in this article namespaces, overlay filesystem, fuse filesystem, etc. comes from ChatGPT. Vulnerability Overview Vulnerability ID: CVE-2023-0386 Vulnerable Product: Linux kern...

CVE-2021-41091

CVE-2021-41091 This exploit offers an in-depth look at the CVE-2021-41091 security vulnerability and provides a step-by-step guide on how to utilize the exploit script to achieve privilege escalation on a host. Vulnerability Summary CVE-2021-41091 is a flaw in Moby Docker Engine that allows...

upx-recovery-tool

upx-recovery-tool upx-recovery-tool is a script that aims to repair the most common modifications done by malware creators to ELF UPX-compressed files done to prevent their automatic unpacking with a standard UPX tool. Implemented UPX fixes / Features This tool detects and repairs the following...

aiiroverlay

なぜオーバーレイなのか、置き換えではないのか。その論旨。 AI IR Overlay™ フレームワークの一部。完全なリポジトリマップはCONTENTMAP.md を参照。 AI IR Overlay: フレームワーク概要 現在のリリース: v0.35.0 · 2026-07-09 · CHANGELOG 本番稼働中の AI エージェント向けの実践的なインシデントレスポンス基盤。自由に批判し、適応させてください。 なぜオーバーレイなのか、置き換えではないのか 従来のインシデントレスポンス（2025年4月に r2 を置き換えた NIST SP 800-61 r3...

CVE-2023-0386

Compilation make all Usage Start two terminals, in the first terminal enter ./fuse ./ovlcap/lower ./gc In the second terminal enter ./exp Effect Privilege escalation effect Effect demonstration...

CVE-2020-0096-StrandHogg2

이 설계 결함으로 인해 공격자는 다른 애플리케이션 위에 자신의 액티비티페이지를 표시하여 사용자가 자신의 개인 데이터를 잃어버리게 할 수 있습니다. 이 취약점은 StrandHogg 2.0으로 알려져 있으며, 최근 노르웨이 보안 회사 Promon에 의해 공개되었습니다. 범위: 이론적으로는 전체 버전 android10 테스트는 실패했고, 8.0.1 테스트는 성공했습니다. 검증 단계: 대상 앱의 패키지 이름과 exported 액티비티로 코드 수정 대상 앱의 대상 액티비티 시작 테스트 앱 시작 대상 앱 시작 시 하이재킹 성공 확인 링크...

pentoo-overlay

Pentoo ペネトレーションテスト Overlay セキュリティツール向けの Gentoo overlay であり、Pentoo Livecd の中核でもあります Pentoo は、ペネトレーションテストとセキュリティ評価のために設計された Live CD および Live USB です。Gentoo Linux をベースにしており、Pentoo は 32 ビットと 64 ビットのインストール可能な livecd として提供されています。Pentoo は既存の Gentoo インストール用の overlay としても利用できます。パケットインジェクション用のパッチを適用した wifi...

umbra

Umbra Linux上のTHE FINALS用の外部オーバーレイ。 別プロセスからゲームのメモリを読み取り、その上に透明な クリックスルーウィンドウを描画し、エイムアシストとトリガーボットを提供する。 ゲームには何も注入されず、何も書き戻されることはない。このツールは メモリを読み取り、マウスを動かす、それだけである。 Linux上でゼロから構築されている。このリポジトリ内のすべてのゲームオフセットは、 公開されたSDKダンプからコピーしたものではなく、実行中のプロセスを観察して導出されたものである。...

METABASE-RCE-CVE-2023-38646-

METABASE-RCE-CVE-2023-38646- To get the root user of the machine or system according to the information above, this command and file will get into root user. You can run this command directly or run as file and execute. Command: $unshare -rm sh -c "mkdir l u w m && cp /u/b/p 3 l/; setcap...

CVE-2026-77602 OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites)

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.1.0 until 7.3.0, authenticated non-administrator users can write content under targetsmodified/ that is later executed by multiple configuration paths below the intended...

CVE-2026-77602 OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites)

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.1.0 until 7.3.0, authenticated non-administrator users can write content under targetsmodified/ that is later executed by multiple configuration paths below the intended...

CVE-2026-77602 OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites)

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.1.0 until 7.3.0, authenticated non-administrator users can write content under targetsmodified/ that is later executed by multiple configuration paths below the intended...