2212 matches found
impersonate-rs
IRS Impersonate-RS š” IRS is a library version of https://github.com/zblurx/impersonate-rs, zblurx Reimplementation of Defte Impersonate in plain Rust. For more informations about it, see this blogpost. The token impersonation approach is a bit different from Defte Impersonate : here you have to...
dismember
šŖ Dismember Dismember is a command-line toolkit for Linux that can be used to scan the memory of all processes or particular ones for common secrets and custom regular expressions, among other things. It will eventually become a full /proc toolkit. Using the grep command, it can match a regular...
CVE-2021-3899_PoC
CVE-2021-3899 PoC Reproduce 0. Install an older version of apport: sudo apt-get install apport=2.20.11-0ubuntu27 any version apportstart: 597 errorlog'process was replaced after Apport started, ignoring' 598 sys.exit0 But this pid could be re-used just after apport launched. In such case,...
CVE-2016-10924
CVE-2016-10924 CVE-2016-10924 - Directory traversal vulnerability in WordPress ebook-download plugin1.2. PoC + PID Bruteforce in Python. Usage git clone https://github.com/rvizx/CVE-2016-10924 cd CVE-2016-10924 python pidbrute.py...
tugtainer-1.30.2-CVE-2026-55494-and-CVE-2026-62308-to-RCE
Tugtainer v1.30.2 RCE The RCE is obtained by abusing 2 vulnerabilities CVE-2026-55494 CVE-2026-62308 In short, a SSRF vulnerability is abused to call to an unauthenticated service in the internal network to create a docker that shares the same pid with tugtainer, thus making the file system of th...
CVE-2026-108835
A flaw has been found in Yungengxin Yun Jia Security Guard up to 2.7.1.9. Impacted is the function sub14000885C in the library kgameprotect.sys. Executing a manipulation of the argument Pid can lead to improper privilege management. The attack requires local access. The vendor was contacted early...
EUVD-2026-97368
A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11. Affected by this vulnerability is the function sub14000443C in the library LWBilling64.sys of the component IOCTL Process Termination. Executing a manipulation of the argument Pid can lead to exposed ioctl with insufficient access...
CVE-2026-108835
A flaw exists in Yungengxin Yun Jia Security Guard (versions up to 2.7.1.9 ) within the kgameprotect.sys library. Specifically, the function sub_14000885C is susceptible to improper privilege management due to the manipulation of the Pid argument. Exploitation of this vulnerability requires local...
nysm
nysm Un contenedor sigiloso de post-explotaciĆ³n. Tabla de contenido 1. IntroducciĆ³n 2. InstalaciĆ³n 2.1 Requisitos 2.2 Headers de Linux 2.3 CompilaciĆ³n 3. Uso 3.1 Ejemplos 4. CĆ³mo funciona 4.1 En general 4.2 Ocultar objetos eBPF 4.3 Ocultar registros de Auditd 4.4 Ocultar PIDs 4.5 Ocultar...
docker_lightman_exploit
Docker Lightman Exploit Docker CVE-2022-37708. This exploit relies on how the UNIX filesystem has UID and GID on files that Docker shares between the Host running the Docker and the Client being run within the Docker as well as relies on the nature of how Process ID ownership works. The Problem i...
CVE-2012-0056
Linux Local Privilege Escalation via SUID /proc/pid/mem Write Mempodipper Introducing Mempodipper, an exploit for CVE-2012-0056. /proc/pid /mem is an interface for reading and writing, directly, process memory by seeking around with the same addresses as the process's virtual memory space. In...
CVE-2019-5736-PoC
Usage PoC was created to the scenario were victim is executing for example docker exec sh. Before running exploit it's required to overwrite sh binary in the container file system: printf '!/proc/self/exe' /bin/sh After that, when victim executes exec command, runc binary in the host file system...
truffleproc
truffleproc ā hunt secrets in process memory Usage Run truffleproc.sh against your current Bash shell e.g. $$: $ ./truffleproc.sh $$ coredumping pid 6174 Reading symbols from od... Reading symbols from /usr/lib/systemd/systemd... Reading symbols from /lib/systemd/libsystemd-shared-247.so... Readi...
process-enumeration-stealth
š“ process-enumeration-stealth What is this? This is a simple PoC which allows you to return a list of PIDs currently using NTFS, by querying the \ntfs\ base device the Windows filesystem base object. Using this method circumvents the need to use typical APIs, such as NtQuerySystemInformation or t...
usbrip
usbrip inherited from "USB Ripper", not "USB R.I.P." is a simple forensics tool with command line interface that lets you keep track of USB device artifacts i.e., USB event history on Linux machines. Table of Contents: Description Quick Start Showcase System Log Structure Dependencies deb pip...
CVE-2018-6606
CVE-2018-6606 This terminates any PID. Tested on Windows 10 64-bit, Flare VM. Administrator privileges are required. Some adjustments may be needed ā see resource.rc. Toolchain Download:...
asminject
asminject.py asminject.py is a heavily-modified fork of David Buchanan's dlinject project. Injects arbitrary assembly or precompiled binary payloads directly into x86-64, x86, and ARM32 Linux processes by accessing /proc//mem instead of attaching via ptrace. Useful for tampering with trusted...
CVE-2022-1227_Exploit
CVE-2022-1227Exploit A script for exploiting CVE-2022-1227. Background Ubuntu 20.10 is recommanded. Podman TODO: add what is the principle of this vulnerability Install podman Follow the instruction in the official document: https://podman.io/getting-started/installationinstalling-on-linux For...
Astra Linux ā Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: Tracing: A silence warning is issued when chunk allocation fails in tracepidwrite. Syzkaller triggers a fault injection warning: WARNING: CPU: 1 PID: 12326 at tracepointaddfunc+0xbfc/0xeb0 Modules linked in: CPU: 1 UID: 0 PID:...
Astra Linux ā Vulnerability in unbound
Unbound from NLnet Labs, including versions up to and including 1.12.0, and NSD from NLnet Labs, including versions up to and including 4.3.3, contain a local vulnerability that allows for a local symlink attack. When creating the PID file, Unbound and NSD either create the file if it does not...