NimDllSideload

Nim DLL サイドローディング このリポジトリを使用すると、サイドローディング/プロキシローディングに利用できる Nim DLL を簡単に生成できます。 DLL サイドローディングに詳しくない場合は、こちらのブログ記事をご覧ください。 どうやって使うのか？ プロキシしたい正規の DLL（または複数の DLL）をこのリポジトリの build ディレクトリに置き、make を実行してください。 これにより、out ディレクトリに2つの .dll が生成されます。 ランダムな名前のものは、関数呼び出しがプロキシされる元の DLL です。 もう1つはあなたのペイロードになります。...

CVE-2026-25855

OpenBullet2 through version 0.3.2 contains a remote code execution vulnerability that allows authenticated users to execute arbitrary commands by uploading script files .bat.ps1.sh through the FileProxySource proxy loading feature. Attackers can upload malicious script files as proxy sources,...

CVE-2026-25855 OpenBullet2 0.3.2 Authenticated RCE via FileProxySource Script Upload

OpenBullet2 through version 0.3.2 contains a remote code execution vulnerability that allows authenticated users to execute arbitrary commands by uploading script files .bat.ps1.sh through the FileProxySource proxy loading feature. Attackers can upload malicious script files as proxy sources,...

OpenBullet2 操作系统命令注入漏洞

OpenBullet2 is a cross-platform automated testing and data scraping tool developed by the OpenBullet team. Versions of OpenBullet2 prior to 0.3.2 contained an operating system command injection vulnerability. This vulnerability originated from the FileProxySource proxy loading function, which cou...

PT-2026-47344

OpenBullet2 through version 0.3.2 on Windows contains a credential disclosure vulnerability that allows remote attackers to capture the NTLMv2 hash of the process user by configuring a job proxy source with a UNC path pointing to an attacker-controlled server. When the job starts, the application...

Persistence – DLL Proxy Loading

DLL Proxy Loading is a technique which an arbitrary DLL exports the same functions as the legitimate DLL and forwards the calls to the legitimate… Continue reading - Persistence - DLL Proxy Loading...