upx-recovery-tool

upx-recovery-tool upx-recovery-tool is a script that aims to repair the most common modifications done by malware creators to ELF UPX-compressed files done to prevent their automatic unpacking with a standard UPX tool. Implemented UPX fixes / Features This tool detects and repairs the following...

malwoverview

Malwoverview !Alt...

CVE-2023-0386-go-poc

Go PoC of CVE-2023-0386 ./main /tmp/fuse Will run the program and create a fuse mount on "/tmp/fuse" directory. Expects you've compiled the shell in the root directory with a name of "shell" by default. After you've run the program, there should be an executable binary in the "/tmp/ovlmerged/"...

aiiroverlay

Why an overlay, not a replacement. The thesis. Part of the AI IR Overlay™ framework. SeeCONTENTMAP.md for the full repository map. The AI IR Overlay: Framework Overview Current release: v0.35.0 · 2026-07-09 · CHANGELOG A practical incident-response baseline for AI agents in production. Adapt and...

WantasticCore

Wantastic A self-hosted WireGuard mesh with a browser admin portal, all in one container. Try the demo → · Join Discord → Why Wantastic The overlay-VPN space is crowded — Tailscale, Headscale, NetBird, wg-easy. They all stop at "your devices can reach each other." Wantastic keeps going. 1. You...

pentoo-overlay

Pentoo Penetration Testing Overlay Gentoo overlay for security tools as well as the heart of the Pentoo Livecd Pentoo is a Live CD and Live USB designed for penetration testing and security assessment. Based on Gentoo Linux, Pentoo is provided both as 32 and 64 bit installable livecd. Pentoo is...

umbra

Umbra An external overlay for THE FINALS on Linux. It reads the game's memory from a separate process, draws a transparent click-through window on top of it, and provides an aim assist and a triggerbot. Nothing is injected into the game and nothing is ever written back; the tool reads memory and...

holos

Docker compose for KVM. Define multi-VM stacks in one YAML file. No libvirt, no XML, no distributed control plane. Website and docs: https://zeroecco.github.io/holos/ The primitive is a VM, not a container. Every workload instance gets its own kernel boundary, qcow2 overlay, cloud-init seed, and...

Android-Imgui-Template

Android ImGui Template Android menu template using Zygisk + ImGui. https://github.com/user-attachments/assets/816113d9-611d-4909-a08e-0f4e8ab6d03b Requirements Android NDK r27 ndk;27.0.12077973 Build Locally export ANDROIDNDKHOME=/path/to/ndk/27.0.12077973 $ANDROIDNDKHOME/ndk-build ...

CVE-2020-0096-StrandHogg2

This design flaw allows an attacker to display their own activity page on top of another application, potentially causing users to lose track of their private data. This vulnerability is called StrandHogg 2.0 and was recently disclosed by the Norwegian security company Promon. Scope: Theoreticall...

Vulnerable-Docker-Engine

CVE-2021-41091 This exploit offers an in-depth look at the CVE-2021-41091 security vulnerability and provides a step-by-step guide on how to utilize the exploit script to achieve privilege escalation on a host. Vulnerability Summary CVE-2021-41091 is a flaw in Moby Docker Engine that allows...

pilotprotocol

Pilot Protocol The network stack for AI agents. Addresses. Ports. Tunnels. Encryption. Trust. Docs · Wire Spec · Whitepaper · IETF Draft · Agent Skills · Polo Live Dashboard The internet was built for humans. AI agents have no address, no identity, no way to be reached. Pilot Protocol is an overl...

CVE-2023-0386

Compilation make all Usage Start two terminals, in the first terminal enter ./fuse ./ovlcap/lower ./gc In the second terminal enter ./exp Effect Privilege escalation effect Effect demonstration...

CVE-2023-0386

README gcc -Wall exp.c pkg-config fuse --cflags --libs -o exp ./exp /tmp Vulnerability Analysis The theoretical knowledge in this article namespaces, overlay filesystem, fuse filesystem, etc. comes from ChatGPT. Vulnerability Overview Vulnerability ID: CVE-2023-0386 Vulnerable Product: Linux kern...

CVE-2021-41091

CVE-2021-41091 This exploit offers an in-depth look at the CVE-2021-41091 security vulnerability and provides a step-by-step guide on how to utilize the exploit script to achieve privilege escalation on a host. Vulnerability Summary CVE-2021-41091 is a flaw in Moby Docker Engine that allows...

PoC_CVE-2017-0807

Proof of concept of CVE-2017-0807 This is a demo application with deliberately sloppy interface for the CVE-2017-0807 reported by Efthimios Alepis and Constantinos Patsakis. The vulnerability illustrates that due to security issues in every Android version up to Nougat, an unprivileged user can...

CVE-2026-98831

A flaw was found in the Linux kernel's Device Tree overlay subsystem. This flaw allows a local user to cause a Denial of Service DoS through memory exhaustion. When an overlay changeset fails during target or symbol lookup, the kernel fails to release previously acquired fragment references durin...

CVE-2026-98855

A flaw was found in the Linux kernel's Device Tree overlay subsystem. When an error occurs while adding a property to a device tree overlay changeset, the allocated property is freed during error cleanup but remains tracked, leading to a second release double-free when the overlay node is torn...

CVE-2026-98854

A flaw was found in the Linux kernel's Device Tree overlay subsystem. When applying an overlay fails during identifier allocation, the error cleanup routine incorrectly treats negative error codes as valid identifiers. A local user could trigger this vulnerability during resource allocation...

CVE-2026-98782

A flaw was found in the Linux kernel's MediaTek DRM Direct Rendering Manager driver. When device initialization fails or during driver removal, the driver fails to unregister an allocated overlay adaptor platform device. A local user could exploit this flaw to cause a resource leak, potentially...