engine

Droidefense Engine Advance Android Malware Analysis Framework Latest release Download What Droidefense is Droidefense originally named atom: a nalysis t hrough o bservation m achine is the codename for android apps/malware analysis/reversing tool. It was built focused on security issues and trick...

PipeViewer

A GUI tool for viewing Windows Named Pipes and searching for insecure permissions. The tool was published as part of a research about Docker named pipes: "Breaking Docker Named Pipes SYSTEMatically: Docker Desktop Privilege Escalation – Part 1" "Breaking Docker Named Pipes SYSTEMatically: Docker...

Coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through many methods. Windows Support To build a binary for Windows, download the installer.ps1 script from this repository. Run it simply with no arguments to create a binary in the working directory...

Remote-BOF-Runner

Remote BOF Runner Crystal Palace 기반 PIC 로더를 사용하여 Beacon Object FilesBOF를 원격으로 실행할 수 있는 Havoc 확장 프레임워크입니다. 개요 Remote BOF Runner는 Crystal Palace PIC 로더를 활용하여 임의의 프로세스에서 BOF를 안전하게 실행할 수 있게 해줍니다. 이 프레임워크는 명명된 파이프를 통한 정교한 프로세스 간 통신IPC 메커니즘을 구현하여 인젝션된 프로세스의 비콘 출력을 명령 및 제어C2 서버로 투명하게 전달합니다. 설정 및 설치 확장...

powershell-reverse-tcp

PowerShell 역방향 TCP 원격 호스트와 통신하기 위한 PowerShell 스크립트. 원격 호스트는 클라이언트와 모든 기본 시스템 명령에 대한 완전한 제어 권한을 갖게 됩니다. 다음을 기반으로 하는 셸을 확인하세요: Invoke-Expression PowerShell 명령 여기, 프로세스 파이프 여기. Windows 10 Enterprise OS 64비트에서 PowerShell v5.1.19041.2673으로 테스트되었습니다. 교육 목적으로 제작되었습니다. 도움이 되길 바랍니다! 이 저장소에는 알려진 시그니처가 포함되기...

pipe_finder

Pipe Finder 1.0 SMB 프로토콜에서 사용 가능한 파이프 이름을 검색하는 자동화 스크립트 스크린샷 요구 사항 metasploit-framework wget locate pipeauditv2.rb 모듈 https://github.com/peterpt/pipeauditorfb - 첫 실행 시 설치됩니다. 설치 요구 사항 apt-get install metasploit-framework wget locate && updatedb updatedb는 metasploit-framework 디렉터리를 얻기 위해 'locate' ...

DFShell

██████╗ ███████╗███████╗██╗ ██╗███████╗██╗ ██╗ ██╔══██╗██╔════╝██╔════╝██║ ██║██╔════╝██║ ██║ ██║ ██║█████╗ ███████╗███████║█████╗ ██║ ██║ ██║ ██║██╔══╝ ╚════██║██╔══██║██╔══╝ ██║ ██║ ██████╔╝██║ ███████║██║ ██║███████╗███████╗███████╗ ╚═════╝ ╚═╝ ╚══════╝╚═╝ ╚═╝╚══════╝╚══════╝╚══════╝...

CVE-2022-25365

CVE-2022-25365 Windows版Docker Desktopにおける権限昇格の脆弱性 参照: https://www.cyberark.com/resources/threat-research-blog/breaking-docker-named-pipes-systematically-docker-desktop-privilege-escalation-part-1 ファイル一覧 poc.py 作成者: followboy1999 createsymlink.exe 作成者: James Forshaw junction64.exe 作成者: Mark...

pipe-intercept

pipe-intercept Burp または類似の HTTP プロキシツールを使用して Windows の名前付きパイプ通信を傍受します 名前付きパイプは、Windows 上でのプロセス間通信において非常に広く使われています。Windows リモートプロシージャ コール RPC を含む多くのアプリケーションで使用されています。このツールの目的は、セキュリティ研究者やペネトレーションテスターが、名前付きパイプを使用するアプリケーションに対してセキュリティ評価を行えるようにすることです。 このプロジェクトは、CyberArk Labs による素晴らしい MITMIntercept...

Windows-Kernel-Exploitation

1. 名前付きパイプを用いた非ページプールオーバーフロー悪用手法 CVE-2020-17087とオフバイワンオーバーフローで実証された、プールオーバーフロー悪用のための名前付きパイプベースの手法 2. セグメントヒープVSアロケータメタデータの悪用 セグメントヒープVSアロケータのメタデータを悪用して、限定的な書き込みプリミティブ（例：プールオーバーフロー）を重複チャンク割り当てに変換する手法 ツール 現在、セグメントヒープの内部状態を検査するためのwindbgスクリプトが含まれています...

SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536

SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536 이 취약점은 무엇에 관한 것인가? SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 및 SAP Web Dispatcher는 요청 스머글링request smuggling과 요청 연결request concatenation에 취약합니다. 인증되지 않은 공격...

CVE-2019-19470-RedTeamRD

CVE-2019-19470-RedTeamRD 이 저장소는 CODEWHITE가 발견한 CVE-2019-19470 익스플로잇을 재현하기 위한 코드와 지침을 포함하고 있습니다. 여기에는 HackTheBox 미트업에서 이 익스플로잇을 만드는 학습 과정과 생성을 설명하기 위해 사용한 예제들의 소스 코드가 있습니다. Named Pipe Client and Server Example 1 Named Pipe Client and Server Example 2 디컴파일 예제 WinDbg 명령어 PEB 수정 코드 익스플로잇 -...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: can: mcbausb: properly checking the endpoint type Syzbot reported a warning in usbsubmiturb, which is caused by an incorrect endpoint type. We should check that the endpoint actually exists to prevent this warning. Pipes found ar...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: drm/amd/display: The denominator “cbppipes” must not be 0; it is checked before being used. WHAT & HOW The denominator cannot be 0, and is checked before being used. This fix addresses two “DIVIDEBYZERO” issues reported by...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: “pipe: wakeup wrwait after setting maxusage” The commit c73be61cede5 “pipe: Add general notification queue support” introduced a regression that could cause pipes with resized sizes to become locked under certain conditions. See...

CVE-2026-82235

filebrowser through 2.63.23 fails to validate named pipes in its directory archive and public download handlers. This causes blocking open syscalls that pin server goroutines and exhaust connection resources, resulting in a denial of service . Both authenticated users and anonymous visitors with ...

EUVD-2026-67687

filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server...

CVE-2026-82235 filebrowser through 2.63.23 Denial of Service via named pipes

filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server...

CVE-2026-82235 filebrowser through 2.63.23 Denial of Service via named pipes

filebrowser through 2.63.23 fails to validate named pipes in directory archive and public download handlers, allowing attackers to trigger blocking open syscalls. Authenticated users or anonymous visitors with public share links can repeatedly request archives containing named pipes to pin server...

Windows-Non-Paged-Pool-Overflow-Exploitation

Índice Índice Introdução Introdução a Named Pipes Exploração Espalhamento do pool não paginado Divulgação de memória/Leitura arbitrária Controle completo sobre os dados de transbordo Controle limitado sobre os dados de transbordo Escrita arbitrária Liberação arbitrária de objetos...