inficere

inficere fractalG의 onyx-the-black-cathttps://github.com/gdbinit/onyx-the-black-cat을 기반으로 제작된 내 Mac OS X 루트킷의 공개 버전입니다. Mountain Lion 10.8.210.8.5에서만 테스트되었습니다. 다른 버전에서는 작동이 보장되지 않습니다. 기능 프로세스 은닉 - 'ps PID', 'ps aux', Activity Monitor, top 등에서 숨깁니다 파일/디렉터리 은닉 사용자 은닉 - 지정된 사용자를 'who', 'w'에서 숨깁니다 자체 ...

resmack-fuzz-test

Resmack Фазз-тест Этот проект — исследование фаззера с обратной связью, который использует: ptrace для инструментирования с динамическими точками останова в памяти, задаваемыми целевым процессом создание/восстановление снимков процесса с помощью /proc/pid/map, /proc/pid/clearrefs и...

bpflock

bpflock - Lock Linux machines bpflock - eBPF driven security for locking and auditing Linux machines. Note: bpflock is currently in experimental stage , it may break, options and security semantics may change, some BPF programs will be updated to use Cilium ebpf library. Sections 1. Introduction...

CVE-2026-102110

An endpoint used during initial appliance setup did not require authentication and did not correctly enforce its intended state precondition, so during the initial activation window an unauthenticated network attacker could repeatedly re-trigger the privileged activation process. This could disru...

ProcessStomping

ProcessStomping Вариант ProcessOverwriting для выполнения шелл-кода в секции исполняемого файла Что это Более подробное объяснение можно прочитать в моем посте в блоге Process Stomping — это вариант Process Overwriting от hasherezade. Его преимущество заключается в записи полезной нагрузки...

wanderer

Wanderer Wanderer — это программа с открытым исходным кодом, которая собирает информацию о запущенных процессах. Эта информация включает уровень целостности, наличие AMSI в качестве загруженного модуля, работает ли процесс как 64-битный или 32-битный, а также уровень привилегий текущего процесса...

wanderer

Wanderer Wanderer is an open-source program that collects information about running processes. This information includes the integrity level, the presence of the AMSI as a loaded module, whether it is running as 64-bit or 32-bit as well as the privilege level of the current process. This...

DDexec

Новости DDexec Я так сильно обновил DDexec, что он едва узнаваем: разбор ELF теперь выполняется машинным кодом, а не shell-скриптом, что делает его гораздо быстрее, надёжнее и понятнее. Также количество зависимостей сведено к абсолютному минимуму. Теперь он почти не зависит от арифметики оболочки...

patriot

Patriot 인메모리 은닉 기술의 다양한 종류를 탐지하기 위한 소규모 연구 프로젝트입니다. 최신 릴리스를 여기에서 다운로드하세요. 현재 버전은 다음 탐지를 지원합니다: VirtualProtect 함수를 가리키는 의심스러운 CONTEXT 구조 탐지. Austin Hudson의 연구 및 Foliage와 Cracked5pider의 Ekko를 대상으로 함. 프로세스 할로잉 변종 탐지를 위한 메모리 내 MZ/PE 헤더 검증. 높은 무결성으로 실행되는 백업되지 않은 실행 가능 영역. 모듈 스톰핑/덮어쓰기에 사용된 수정된 코드. 기타 다...

webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash...

webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash...

webkitgtk: webkitgtk: Maliciously crafted web content may disclose process memory

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory handling, leading to disclosure of process memory...

chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia

An inappropriate implementation flaw was found in Skia in Google Chrome. This issue may allow a remote attacker to compromise the renderer process to perform a sandbox escape via a crafted HTML page...

chromium-browser: skia: chromium-browser: skia: Information disclosure via uninitialized use in Google Chrome

A flaw was found in Skia, a 2D graphics library used in Google Chrome. A remote attacker, after compromising the renderer process, could exploit an uninitialized use vulnerability by crafting a malicious HTML page. This could lead to the disclosure of sensitive cross-origin data...

chromium-browser: skia: chromium-browser: skia: Arbitrary code execution via crafted HTML page

A flaw was found in Skia, a 2D graphics library. A remote attacker, who has already compromised the renderer process, could exploit a use-after-free vulnerability by providing a specially crafted HTML page. This could lead to the execution of arbitrary code within the sandbox environment,...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause a memory corruption issue due to improper state management and result in an unexpected process crash...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in an unexpected process crash...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management...

webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management...