20 matches found
SILVERPICK
SILVERPICK ใใผใธใงใณ v1.1 ๆฆ่ฆ ใใญใธใงใฏใ SILVERPICK ใฏใWindows ใฆใผใถใผใขใผใใทใงใซใณใผใ้็บใใฌใผใ ใฏใผใฏ WUMSDF ใงใใใใใฎๅฏไธใฎ็ฎ็ใฏใใฑใคใใใชใใฃ้็บ่ ใ C/C++ ใไฝฟ็จใใฆ Windows x64 ๅใใฎ Position Independent Code PIC ใใญใใๅฎนๆใซๆง็ฏใงใใใใใซใใใใฎใใใชๅใ็ตใฟใฎ้็บใณในใใๅๆธใใใใจใงใใ ใใใฏใใญใธใงใฏใ WILDBEAST ใใๆดพ็ใใฆใใใไปฅไธใฎใใฎใๆดป็จใใพใ๏ผ 1. ใณใผใใจใใฃใฟใจใใฆ Visual Studio Code 2...
venom-rs
Rust ่ฃฝ Shellcode Reflective DLL Injection sRDI๏ผใณใผใใใผใ : Venom๏ผ Shellcode reflective DLL injection๏ผsRDI๏ผใฏใใใญใปในใคใณใธใงใฏใทใงใณๆๆณใฎไธ็จฎใงใๆๅฎใใ DLL ใไฝ็ฝฎ็ฌ็ซใณใผใ๏ผposition-independent code๏ผใธๅคๆใใใๆฐใซๅ ฅใใฎ shellcode ใคใณใธใงใฏใทใงใณ๏ผๅฎ่กๆๆณใไฝฟใฃใฆๆณจๅ ฅใงใใใใใซใใใใฎใงใใ ็นๅพด ใชใใฌใฏใใฃใใญใผใใผใฎใตใคใบใฏ็ด 4KB ใงใใ...
mkPIVM
Read the research paper written for 1.0.0. mkPIVM ใฏใWindows x86 ใใใณ x64๏ผใพใใชใ Linux ๅฏพๅฟ๏ผๅใใฎใใใชใขใผใใฃใใฏใชไฝ็ฝฎ็ฌ็ซใทใงใซใณใผใไปฎๆณๅใใผใซใงใใ...
HandleKatz
HandleKatz ์ด ๋๊ตฌ๋ Brucon2021 ์ปจํผ๋ฐ์ค ๋ฐํ์ ์ผํ์ผ๋ก ๊ตฌํ๋์์ผ๋ฉฐ, Lsass์ ๋ํ ๋ณต์ ๋ ํธ๋ค ์ ์ฌ์ฉํ์ฌ ๋์ผํ ํ๋ก์ธ์ค์ ๋๋ ํ๋ ๋ฉ๋ชจ๋ฆฌ ๋คํ๋ฅผ ์์ฑํ๋ ๋ฐฉ๋ฒ์ ๋ณด์ฌ์ค๋๋ค. ์ด ๋๊ตฌ๋ ์ ์ ์ผ๋ก ํ ์คํธ ์ธ๊ทธ๋จผํธ์ ์์ฃผํ๋ ์คํ ํ์ผ๋ก ์ปดํ์ผ๋ฉ๋๋ค. ๋ฐ๋ผ์ PE ํ์ผ์์ ์ถ์ถ๋ .text ์ธ๊ทธ๋จผํธ๋ ์์ ํ ์์น ๋ ๋ฆฝ ์ฝ๋PIC์ด๋ฏ๋ก, ์ผ๋ฐ์ ์ธ ์ ธ์ฝ๋์ฒ๋ผ ์ทจ๊ธ๋ ์ ์์ต๋๋ค. ๋ฉ๋ชจ๋ฆฌ์์ HandleKatz๋ฅผ ์คํํ ๋ ํํ๋ฆฐํธ๊ฐ ๋งค์ฐ ์์ต๋๋ค. ์์ฒด์ ์ผ๋ก ๋ ์ด์ ์คํ ๊ฐ๋ฅํ ๋ฉ๋ชจ๋ฆฌ๋ฅผ ํ ๋นํ์ง ์๊ธฐ ๋๋ฌธ...
execute-assembly-pico
Execute Assembly PICO Crystal PalaceๅใใฎPICOใงใใใdonut ใทใงใซใณใผใใธใงใใฌใผใฟใผใจๅใๆๆณใไฝฟ็จใใฆใ่ฟฝๅ ใใใ.NETใขใปใณใใชใใกใขใชๅ ใงๅฎ่กใใใใใฎใใคใใฃใCLRใในใใฃใณใฐใๅฎ่ฃ ใใฆใใพใใใใใซใใใRubeusใSeatbeltใชใฉใฎ.NETใใผใซใใใใฃในใฏไธใซ้ ็ฝฎใใใซไฝ็ฝฎ็ฌ็ซใณใผใใใ่ชญใฟ่พผใใใจใใงใใพใใ ใใซใ ใใญใธใงใฏใใใชใณใฏใใใซใฏใMinGW GCCใzipใฆใผใใฃใชใใฃใใใใณCPLๅฎ่กใใกใคใซใๅฟ ่ฆใงใใconfig.spec...
donut
ํ์ฌ ๋ฒ์ : v1.1 ๋ชฉ์ฐจ 1. ์๊ฐ 2. ์๋ ๋ฐฉ์ 3. ๋น๋ 4. ์ฌ์ฉ๋ฒ 5. ํ์ ํ๋ก์ ํธ 6. Donut์ ์ด์ฉํ ๊ฐ๋ฐ 7. ์ง๋ฌธ ๋ฐ ํ ๋ก 8. ๋ฉด์ฑ ์กฐํญ 1. ์๊ฐ Donut ์ VBScript, JScript, EXE, DLL ํ์ผ ๋ฐ dotNET ์ด์ ๋ธ๋ฆฌ๋ฅผ ๋ฉ๋ชจ๋ฆฌ์์ ์คํํ ์ ์๊ฒ ํด์ฃผ๋ ์์น ๋ ๋ฆฝ์ ์ฝ๋์ ๋๋ค. Donut์ผ๋ก ์์ฑ๋ ๋ชจ๋์ HTTP ์๋ฒ์์ ์คํ ์ด์งํ๊ฑฐ๋ ๋ก๋ ์์ฒด์ ์ง์ ํฌํจ์ํฌ ์ ์์ต๋๋ค. ๋ชจ๋์ ์ ํ์ ์ผ๋ก Chaskey ๋ธ๋ก ์ํธ์ 128๋นํธ ๋ฌด์์ ์์ฑ ํค๋ฅผ ์ฌ์ฉํ์ฌ ์ํธํ๋ฉ๋๋ค. ํ์ผ...
DeepSleep
DeepSleep ROP์ PIC๋ง์ ์ฌ์ฉํ์ฌ ๋ฉ๋ชจ๋ฆฌ ์ํฐํฉํธ๋ฅผ ์จ๊ธฐ๊ธฐ ์ํ x64์ฉ Gargoyle ๋ณํ์ ๋๋ค. ํฐ ๊ฐ์ฌ๋ฅผ @waldoirc์๊ฒ ์ ํฉ๋๋ค. ๊ทธ๋ ์์ ์ ๋ธ๋ก๊ทธ์์ ์ด ๊ธฐ์ ์ ๋ง์ ๋ถ๋ถ์ ๋ฌธ์ํํ์ต๋๋ค. ์ด ๊ตฌํ์ APC๋ฅผ ์ ํ ์ฌ์ฉํ์ง ์๊ณ ์์ ํ PIC๋ก ๊ตฌํ๋์๋ค๋ ์ ์์ ๋ค๋ฆ ๋๋ค. ์ค๋ช x64์์ Gargoyle๊ณผ ์ ์ฌํ ๊ธฐ์ ์ ์ฌ์ฉํ์ฌ ๋ฉ๋ชจ๋ฆฌ ์ํฐํฉํธ๋ฅผ ํํผํ๋ ๋ฐฉ๋ฒ์ ๋ ์ ์ดํดํ๊ธฐ ์ํด ์ด ๋๊ตฌ๋ฅผ ๋ง๋ค์์ต๋๋ค. ์์ด๋์ด๋ VirtualProtect - Sleep - VirtualProtect๋ฅผ ํธ์ถ...
Lastenzug
LastenZug ่ฏฅ้กน็ฎๅฎ็ฐไบไธไธชๅบไบ websockets ็ Socks4a ไปฃ็ใ ๅฎขๆท็ซฏ็ปไปถไฝฟ็จ C ่ฏญ่จๅฎ็ฐ๏ผๅนถ็ผ่ฏไธบๅฎๅ จไฝ็ฝฎๆ ๅ ณ็ไปฃ็ ๏ผPIC๏ผใ ๅจ็ผ่ฏ่ฟ็จไธญ๏ผ้่ฟๅฉ็จไฝไบ LastenPIC/SpiderPIC ็็ฌฌไบไธชๅทฅๅ ท SpiderPIC ๏ผๅจๆฑ็ผๅฑ้ขๅบ็จๆททๆทใ SpiderPIC ๆททๆทๅ ๆฌ๏ผ ๆไปคๆฟๆข ๆทปๅ ๅๅพไปฃ็ ไปฅๅ่ทณ่ฝฌ่ถ่ฟๅๅพไปฃ็ ๆทปๅ ๆ ็จ็ๆไปค ่ฟๆจๅจ็ ดๅ้ๆ็ญพๅ๏ผไฝไฝ ้่ฆ่ฎฐไฝ๏ผAPI ๅๅธใๅญ็ฌฆไธฒๅๅ ถไปๅธธ้ๅจๆญค่ฟ็จไธญไธไผ่ขซๆททๆทใ ไฝฟ็จๆนๆณ ๅฎขๆท็ซฏ makefile ๅๆถ็ๆ PIC socks ๅฎขๆท็ซฏๅไธไธช็จไบ shellcode ็็คบไพๅ ่ฝฝๅจใ...
Bitmancer
Bitmancer Bitmancer ใฏใNim ใงๆธใใใ Windows ใชใใฌใผใใฃใณใฐใทในใใ ๅใใฎ Offensive Security ใใผใซ้็บใฎใใใฎใฉใคใใฉใชใงใใ้ซๅบฆใซ่จญๅฎๅฏ่ฝใงใไฝ็ฝฎ้ไพๅญใใคในใฟใณใใขใญใณใชๅฎ่ฃ ใๅใใใๅ ฑ้ APIใใซใผใใณใใใฏใญใๆไพใใใใจใ็ฎ็ใจใใฆใใพใใ ใคใณใใฉใณใใ้็บใใใๅ ดๅใใ็ฐกๅใช PoC ใใในใใใใๅ ดๅใใใใใฏใพใฃใใๆฐใใ็ด ๆดใใใใใผใซใๆธใใใๅ ดๅใBitmancer ใฏใใชใใฎ้็บใๆฏๆดใใพใ๏ผ โ ๏ธ ใใฎใชใใธใใชใฏ็พๅจใๅคง่ฆๆจกใช WIP ใงใ๏ผ...
Lastenzug
LastenZug ใใฎใใญใธใงใฏใใฏใWebSocketใใผในใฎSocka4aใใญใญใทใๅฎ่ฃ ใใฆใใพใใ ใฏใฉใคใขใณใใณใณใใผใใณใใฏC่จ่ชใงๅฎ่ฃ ใใใฆใใใๅฎๅ จใซไฝ็ฝฎ็ฌ็ซใณใผใPICใซใณใณใใคใซใใใพใใ ใณใณใใคใซๅฆ็ไธญใซใใขใปใณใใชใฌใใซใงใฎ้ฃ่ชญๅใใLastenPIC/SpiderPICใซใใ2็ช็ฎใฎใใผใซ:SpiderPIC ใๅฉ็จใใฆ้ฉ็จใใใพใใ SpiderPIC ้ฃ่ชญๅใซใฏไปฅไธใๅซใพใใพใ: ๅฝไปคใฎ็ฝฎๆ ใใฉใใทใฅใฎ่ฟฝๅ ใจใใใฉใใทใฅใ้ฃใณ่ถใใใธใฃใณใใฎ่ฟฝๅ ็ก้งใชๅฝไปคใฎ่ฟฝๅ ...
BloodfangC2
Bloodfangใฏใ64ใใใใใใณ32ใใใใฎWindowsใทในใใ ใซใณใณใใคใซใใใไฝ็ฝฎ็ฌ็ซใณใผใใๅใใๆๆฐใฎใคใณใใฉใณใใงใใใณใณใใคใซใใใใคใณใใฉใณใใฎใทใงใซใณใผใใฏ็ด6KB๏ผใญใญใใคใ๏ผใงใใใกใขใชๅ ใงใฎๅฎ่กใใใใใชใณใใฏ้ๅธธใซๅฐใใใชใฃใฆใใพใใ Props to: https://5pider.net/blog/2024/01/27/modern-shellcode-implant-design ใจใฏใใใBloodfangใฏ้็บ้ไธญใงใใใในใใซในใชๅฎ่กไปฅๅคใฎๅคใใฎๆฉ่ฝใๆฌ ใใฆใใพใใ...
EUVD-2011-2811
Malware in sbrugna...
Security update for giflib (low)
openSUSE Security Update: Security update for giflib Announcement ID: openSUSE-SU-2021:0650-1 Rating: low References: 1184123 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for giflib fixes the following issues: - Enable...
OPENSUSE-SU-2021:0650-1 Security update for giflib
This update for giflib fixes the following issues: - Enable Position Independent Code and inherit CFLAGS from the build system bsc1184123. This update was imported from the SUSE:SLE-15:Update update project...
SUSE SLED15 / SLES15 Security Update : giflib (SUSE-SU-2021:1409-1)
This update for giflib fixes the following issues : Enable Position Independent Code and inherit CFLAGS from the build system bsc1184123. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatical...
SUSE-SU-2021:1409-1 Security update for giflib
This update for giflib fixes the following issues: - Enable Position Independent Code and inherit CFLAGS from the build system bsc1184123...
Nord Security: nordvpn Linux Desktop executable application does not use pie / no ASLR
Summary: The nordvpn Linux binary application is not compiled as position independent code or position independent Executable. Steps To Reproduce: POC: $file /usr/bin/nordvpn /usr/bin/nordvpn: ELF 64-bit LSB executable, x86-64, version 1 SYSV, dynamically linked, interpreter...
graphite2 security, bug fix, and enhancement update
1.3.6-1 - Related: rhbz1309052 CVE-2016-1521 CVE-2016-1522 CVE-2016-1523 CVE-2016-1526 1.3.5-1 - Resolves: rhbz1309052 CVE-2016-1521 CVE-2016-1522 CVE-2016-1523 CVE-2016-1526 1.2.4-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora24MassRebuild 1.2.4-5 - Rebuilt for...