Reaper

「💀」 О Reaper Reaper — это proof-of-concept, предназначенный для эксплуатации уязвимости драйвера BYOVD Bring Your Own Vulnerable Driver. Этот вредоносный метод включает внедрение легитимного уязвимого драйвера в целевую систему, что позволяет злоумышленникам использовать драйвер для выполнения...

EUVD-2026-90203

restbed through 5.0.0 accepts WebSocket frames with declared payload lengths up to 2^63 bytes and buffers the payload without size limits in an unbounded stream buffer. Remote unauthenticated attackers can declare large frame sizes and stream payload data to exhaust server memory, causing denial ...

CVE-2026-103472

The restbed library (versions through 5.0.0 ) is vulnerable to a memory exhaustion issue within its WebSocket implementation. The root cause is that the library accepts WebSocket frames with declared payload lengths up to 2^63 bytes and buffers them in an unbounded stream buffer without size limi...

fake-sandbox

Fake Sandbox Processes FSP Этот небольшой скрипт имитирует фейковые процессы аналитического ПО, песочницы и виртуальной машины, которых некоторые вредоносные программы стараются избегать. Оригинальный скрипт от @x0rz можно скачать здесь спасибо ему за это. Также вы можете скачать мою слегка...

Skrull

Skrull Skrull — это DRM для вредоносного ПО, которое предотвращает автоматическую отправку образцов антивирусами/EDR и сканирование сигнатур на уровне ядра. Он генерирует загрузчики, способные запускать вредоносное ПО на жертве с использованием техники Process Ghosting. Кроме того, загрузчики...

SharpBlock

SharpBlock Метод обхода активных DLL проецирования EDR путем предотвращения выполнения точки входа. Возможности Блокирует выполнение точки входа DLL EDR, что предотвращает установку хуков EDR. Беспатчевый обход AMSI, не обнаруживаемый сканерами, ищущими исправления кода Amsi.dll во время...

CVE-2024-3094

CVE-2024-3094 CVE-2024-3094는 xz 유틸리티의 업스트림 tarball에서 버전 5.6.0부터 발견된 심각한 보안 취약점입니다. 이 취약점은 복잡한 난독화를 통해 liblzma의 빌드 프로세스를 조작하는 악성 코드와 관련이 있습니다. 이 저장소는 무엇을 위한 것인가요? 이 저장소는 시스템에서 xz가 취약한지 확인하고 이를 자동으로 수정하는 데 도움을 주기 위한 것입니다. 사용법: $ python3 detect.py 데모:...

ring3-kit

ring3-kit Скрывает процесс из Диспетчера задач с помощью NT-перехвата NtQuerySystemInformation. Простой руткит уровня Ring-3 режим пользователя. Как Перехватываем функцию API NtQuerySystemInformation нашей собственной функцией, которая скрывает процесс из диспетчера задач. Вместо неё вызывается...

CVE-2026-102984

Astro is a web framework for content-driven websites. Prior to 11.1.3, the @astrojs/node adapter builds a request URL from the Host header, and a malformed port can make that URL invalid. The recovery path reuses the same malformed host and throws an uncaught TypeError: Invalid URL before routing...

CVE-2026-102984 Astro: Malformed port in the Host header can crash the Node adapter

Astro is a web framework for content-driven websites. Prior to 11.1.3, the @astrojs/node adapter builds a request URL from the Host header, and a malformed port can make that URL invalid. The recovery path reuses the same malformed host and throws an uncaught TypeError: Invalid URL before routing...

CVE-2026-102984 Astro: Malformed port in the Host header can crash the Node adapter

Astro is a web framework for content-driven websites. Prior to 11.1.3, the @astrojs/node adapter builds a request URL from the Host header, and a malformed port can make that URL invalid. The recovery path reuses the same malformed host and throws an uncaught TypeError: Invalid URL before routing...

EUVD-2026-89970

Astro is a web framework for content-driven websites. Prior to 11.1.3, the @astrojs/node adapter builds a request URL from the Host header, and a malformed port can make that URL invalid. The recovery path reuses the same malformed host and throws an uncaught TypeError: Invalid URL before routing...

RootKit

이것은 ubuntu-16.04.6-desktop-amd64 Linux 4.4에서 테스트된 루트킷이지만, 다른 커널 버전으로 포팅하기 쉬워야 합니다. 동영상 링크 -- https://drive.google.com/file/d/1yDktAg9vIPBH3OPEBYset9OdQb0LMevA/view?usp=sharing 설치 저장소를 클론합니다 git clone https://github.com/Asekon/RootKit 폴더로 이동합니다 cd RootKit 컴파일합니다 sudo make 루트로 커널에 모듈을 삽입합니다 sudo...

MAL-2026-17417 Malicious code in beautifytext (PyPI)

beautifytext 1.0.3 imports beautifyText/compat.py from its init.py and from a setup.py install hook. That module starts a detached background process that registers the host hostname, user, OS, working directory with https://bleodw.wisp.uno, then polls it for jobs to run shell commands or read an...

CVE-2021-31760

..| CVE-2021-31760 |.. 설명 : Webmin의 실행 중인 프로세스 기능을 통해 사이트 간 요청 위조CSRF 공격을 악용하여 원격 명령 실행RCE을 달성합니다. 테스트된 버전 : Webmin 1.973 GitHub의 최신 버전 07/03/2021 공격 유형: 원격 영향 : 원격 명령 실행 익스플로잇 코드 POC : YouTube POC : https://youtu.be/D45FN8QrzDo 제품 공급업체 : https://www.webmin.com 추가 정보 : "Webmin은 Unix 계열 서버와 서비스를 위...

CVE-2026-92960

A flaw was found in vm2. In configurations allowing built-in modules, vm2 fails to restrict access to the host operating system and Domain Name System DNS modules. An attacker who can execute code inside the sandbox can exploit this flaw to hijack the host process DNS resolver, redirecting outbou...

CVE-2026-92954

A flaw was found in vm2. An attacker capable of running untrusted code within the sandbox can trigger a Denial of Service DoS by causing the host application process to terminate. This vulnerability exists because asynchronous operations Promises returned from the host environment are not properl...

CVE-2021-3156-Mitigation-ShellScript-Build

CVE-2021-3156-Mitigation-ShellScript-Build 2021年のSUDO脆弱性（CVE-2021-3156）に焦点を当てて これは、プロセスチェッカーのスクリプトを作成し、指定されたプロセスが存在する場合に 認証を呼び出してシステムをロックアウトする試みです。...

ingress-nginx-0.21-1.19.5

빌드: cd ./ingress-nginx-0.21-1.19.5 cd images/nginx/ make cd - cd images/e2e/ make docker-build cd - e2etag=docker images|grep e2e|awk 'print $2' sed -i "s/e2e:v12232020-dce860a/e2e:$e2etag/" build/go-in-docker.sh make echo -e '\n\n\n\n\n' docker images|grep ingress-nginx...

CVE-2026-97496

A flaw was found in the Linux kernel's AMD GPU driver amdkfd. A local attacker can trigger this vulnerability during process restoration by supplying manipulated queue descriptor values that lack proper boundary validation. This issue results in an out-of-bounds memory read, potentially exposing...