Huan

Huan Huan es un generador de cargadores PE cifrados que desarrollé para aprender la estructura de archivos PE y los procesos de carga de PE. Cifra el archivo PE que se ejecutará con diferentes claves cada vez y lo incrusta en una nueva sección del binario del cargador. Actualmente, funciona con...

ft9201-libfprint

ft9201-libfprint Soporte de huellas dactilares en Linux para el lector USB Focal-systems FT9201 2808:93a9, vendido como un dongle independiente de Windows Hello, como un controlador de libfprint. El sensor es un diminuto lector óptico de 96×96. El comparador incorporado de libfprint funciona mal...

dotNetPELoader

dotNetPELoader Aviso de seguridad Recientemente, descubrí una versión modificada no oficial de este proyecto que se redistribuye fuera de este repositorio. Después de revisar los archivos, identifiqué componentes ocultos adicionales y un comportamiento de carga de scripts que NO existen en el...

sRDI

sRDI - Inyección Reflexiva de DLL en Shellcode sRDI permite la conversión de archivos DLL a shellcode independiente de la posición. Intenta ser un cargador PE completamente funcional que admite permisos de sección adecuados, callbacks TLS y comprobaciones de integridad. Puede considerarse como un...

amber

Introducción Amber es un cargador de PE independiente de posición reflectivo que permite la ejecución en memoria de archivos PE nativos EXE, DLL, SYS.... Permite el despliegue sigiloso de cargas útiles en memoria que pueden utilizarse para evadir productos antivirus, firewall, IDS, IPS y...

zig-pe

zig-pe Cargador de PE reflexivo escrito en Zig. Carga y ejecuta archivos PE nativos y .NET directamente desde la memoria. Características Pipeline de Carga de PE Analizar cabeceras DOS y NT PE32 y PE32+ en tiempo de ejecución Mapear secciones en memoria asignada Resolver importaciones por nombre ...

ReflectiveDLLInjection

About Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process. As such the library is responsible for loading itself by implementing a minimal Portable Executable PE fi...

libpeconv

libPeConv PE 파일을 로드하고 조작하기 위한 라이브러리입니다. 목표 libPEConv의 목표는 PE 파일의 사용자 정의 로딩을 위한 "스위스 아미 나이프"를 만드는 것이었습니다. 이 라이브러리는 자체 로더에 빠르게 통합할 수 있는 다양한 헬퍼 함수를 모아 놓았습니다. 예를 들어: 섹션 재매핑, 재배치 적용, 임포트 로딩, 리소스 파싱 등이 있습니다. PE 파일을 로드할 수 있을 뿐만 아니라 일부 단계를 사용자 정의할 수도 있습니다. 즉, IAT 후킹사용자 정의 IAT 해석기 제공 및 함수 리디렉션을 지원합니다. 그러나...

CVE-2026-79298

🐞 CVE-2026-79298: Incomplete Remediation of UEFI Secure Boot Bypass in Howyar SysReturn A vulnerability was patched. A binary was revoked. But only half the architecture was fixed. Eighteen months later, the IA-32 boot path still carried the same custom PE loader, the same bypassed Secure Boot...

Exploit for CVE-2026-79298

🐞 CVE-2026-79298: Incomplete Remediation of UEFI Secure Boo...

EUVD-2026-29347

barebox version prior to 2026.04.0 contains multiple memory-safety vulnerabilities in the EFI PE loader in efi/loader/pe.c where integer overflow in virtual image size computation using 32-bit arithmetic on section VirtualAddress and size values allows undersized heap allocation, and PE section...

CVE-2026-34963

barebox version prior to 2026.04.0 contains multiple memory-safety vulnerabilities in the EFI PE loader in efi/loader/pe.c where integer overflow in virtual image size computation using 32-bit arithmetic on section VirtualAddress and size values allows undersized heap allocation, and PE section...

CVE-2026-34963 barebox EFI PE Loader Memory Safety Vulnerabilities

barebox version prior to 2026.04.0 contains multiple memory-safety vulnerabilities in the EFI PE loader in efi/loader/pe.c where integer overflow in virtual image size computation using 32-bit arithmetic on section VirtualAddress and size values allows undersized heap allocation, and PE section...

CVE-2026-34963 barebox EFI PE Loader Memory Safety Vulnerabilities

barebox version prior to 2026.04.0 contains multiple memory-safety vulnerabilities in the EFI PE loader in efi/loader/pe.c where integer overflow in virtual image size computation using 32-bit arithmetic on section VirtualAddress and size values allows undersized heap allocation, and PE section...

PT-2026-39869

Name of the Vulnerable Software and Affected Versions barebox versions prior to 2026.04.0 Description Multiple memory-safety issues exist in the EFI PE loader within the efi/loader/pe.c file. An integer overflow occurs during virtual image size computation when using 32-bit arithmetic on section...

Barebox 输入验证错误漏洞

Barebox is a versatile and flexible bootloader developed by Barebox Open Source. Versions of barebox prior to 2026.04.0 contained a vulnerability related to input validation errors. This vulnerability stemmed from integer overflows and unvalidated boundaries within the EFI PE loader, which could...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

Collateral Damage Collateral Damage is a kernel exploit for Xb...

Huan - Encrypted PE Loader Generator

Huan is an encrypted PE Loader Generator that I developed for learning PE file structure and PE loading processes. It encrypts the PE file to be run with different keys each time and embeds it in a new section of the loader binary. Currently, it works on 64 bit PE files. How It Works? First, Huan...

Cooolis-ms - A Server That Supports The Metasploit Framework RPC

Cooolis-ms is a server that supports Metasploit Framework RPC. It is used to work for Shellcode and PE loader, bypassing the static detection of anti-virus software to a certain extent, and allows the Cooolis-ms server to perform with the Metasploit server separate. Loader execution process: 1...

Windows Inject Reflective PE Files, Windows x64 IPv6 Bind TCP Stager

Inject a custom native PE file into the exploited process using a reflective PE loader. The reflective PE loader will execute the pre-mapped PE image starting from the address of entry after performing image base relocation and API address resolution. This module requires a PE file that contains...