PPLFault

PPLFault 著者: Gabriel Landau（Elastic Security）。 Black Hat Asia 2023 で発表された PPLdump は死んだ。PPLdump 万歳！ より。 PPLFault 2024-02 更新: Microsoft は 2024 年 2 月 13 日に PPLFault にパッチを適用しました。関連する議論はこのスレッド を参照してください。 Windows コード整合性の TOCTOU を悪用して、WinTcb-Light として任意のコード実行を実現し、指定されたプロセスをダンプします。エクスプロイトの詳細については、私の スライド...

KsDumper

🔴 이 저장소는 Capcom 드라이버가 패치되어 더 이상 사용되지 않습니다 🔴 mastercodeon314 덕분에 이제 Windows 11에서 작동하는 포트가 있습니다. 즐기세요! https://github.com/mastercodeon314/KsDumper-11 KsDumper 저는 항상 리버스 엔지니어링에 관심이 있었습니다. 며칠 전 재미로 게임 내부를 살펴보고 싶었는데, 해당 게임은 패킹되어 있고 EACEasyAntiCheat로 보호되어 있었습니다. 즉, 핸들이 제거되어 Ring3에서 프로세스를 덤프할 수 없었습니다...

CVE-2022-28291

Insufficiently Protected Credentials: An authenticated user with debug privileges can retrieve stored Nessus policy credentials from the “nessusd” process in cleartext via process dumping. The affected products are all versions of Nessus Essentials and Professional. The vulnerability allows an...

CVE-2024-26330

An issue was discovered in Kape CyberGhostVPN 8.4.3.12823 on Windows. After a successful logout, user credentials remain in memory while the process is still open, and can be obtained by dumping the process memory and parsing it...

CVE-2022-28291

Insufficiently Protected Credentials: An authenticated user with debug privileges can retrieve stored Nessus policy credentials from the “nessusd” process in cleartext via process dumping. The affected products are all versions of Nessus Essentials and Professional. The vulnerability allows an...

CVE-2022-28291

Insufficiently Protected Credentials: An authenticated user with debug privileges can retrieve stored Nessus policy credentials from the “nessusd” process in cleartext via process dumping. The affected products are all versions of Nessus Essentials and Professional. The vulnerability allows an...

Linux Memory Cryptographic Keys Extractor: CryKeX

Some work has been already published regarding the subject of cryptograhic keys security within DRAM. Basically, we need to find something that looks like a key entropic and specific length and then confirm its nature by analyzing the memory structure around it C data types. The idea is to dump...