seccomp-tools

Seccomp Tools Powerful tools for seccomp analysis. This project is aimed primarily but not exclusively at analyzing seccomp sandboxes in CTF pwn challenges. Some features are CTF-specific, but they're just as useful for analyzing real-world seccomp filters. Features Dump - Automatically dumps...

Webmin_Exploit_reverse_shell

ntroduction: The Webmin Exploit is a targeted exploit for the Webmin service, which can be exploited on older versions of Webmin. This exploit uses various techniques to execute malicious code and gain unauthorized access to the target system. It involves: Using both C and Assembly code to execut...

strace

strace - the linux syscall tracer This is strace -- a diagnostic, debugging and instructional userspace utility with a traditional command-line interface for Linux. It is used to monitor and tamper with interactions between processes and the Linux kernel, which include system calls, signal...

nasm_linux_x86_64_pure_sharedlib

NASM Linux x8664 pure no deps shared library .so Tested with "Reflective SO injection". A library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process...

pylane

pylane 简体中文 Pylane is a python vm injector with debug tools, based on gdb and ptrace. Pylane uses gdb to trace python process, inject and run some code in its python vm. Usage use inject command to inject a python script in an process: pylane inject use shell command to inject an interactive shel...

goBox

goBox Sandbox de GO para ejecutar código no confiable. goBox usa Ptrace para interceptar las syscalls READ, dándote la opción de aceptar o denegar las syscalls antes de que se ejecuten. Uso Usage of ./gobox: gobox FLAGS command flags: -h Print Usage. -n value A glob pattern for automatically...

ptrace-vuln

ptrace-vuln To check for vulnerability CVE-2019-13272 It is just a sample proof of concept generated by LLM and does not cover all cases. The basic idea is if the system is not hardened and ptrace is not removed, the vulnerability should be considered applicable. Steps to compile code and run it:...

Hawk

Hawk Silently intercept SSH and SU credentials in real-time Hawk monitors sshd and su processes, extracting passwords from memory via ptrace without modifying target processes. Zero writes. Pure read-only credential harvesting. Demo How It Works Hawk leverages Linux's /proc filesystem to discover...

Learning-Linux-Binary-Analysis

Learning Linux Binary Analysis Learning Linux Binary Analysis This is the code repository for Learning Linux Binary Analysis, published by Packt. Learning Linux Binary Analysis What is this book about? Learning Linux Binary Analysis is packed with knowledge and code that will teach you the inner...

CVE-2019-13272

CVE-2019-13272 - Pkexec Local Privilege Escalation ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author BCOLES Description In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the...

CVE-2018-1000199

CVE-2018-1000199 The Linux ptrace code virtualizes access to the debug registers, and the virtualization code has incorrect error handling. This means that if you write an illegal value to, say, DR0, the internal state of the kernel's breakpoint tracking can become corrupt despite the fact that t...

dlinject

dlinject.py Inyecta una biblioteca compartida es decir, código arbitrario en un proceso linux en vivo, sin ptrace. Inspirado por Cexigua y linux-inject, entre otras cosas. Uso .. . | /| | || || / | .. / | | | | |/ \ | |/ / \ \ \ | \ | |/|| /| |\ \ | /| // | / /| / / /|| / source:...

strace

strace - 리눅스 시스템 호출 추적기 이것은 strace입니다 -- 리눅스를 위한 전통적인 명령줄 인터페이스를 갖춘 진단, 디버깅 및 교육용 사용자 공간 유틸리티입니다. 프로세스와 리눅스 커널 간의 상호작용시스템 호출, 시그널 전달, 프로세스 상태 변경 포함을 모니터링하고 간섭하는 데 사용됩니다. strace의 작동은 ptrace로 알려진 커널 기능에 의해 가능해집니다. strace는 GNU Lesser General Public License 버전 2.1 이상의 조건에 따라 배포됩니다. 자세한 내용은 COPYING 파일...

kernel-exploits

커널 익스플로잇 다양한 커널 익스플로잇 CVE-2021-22555 Linux 로컬 루트 익스플로잇. theflow의 exploit을 CVE-2021-22555용으로 업데이트한 버전입니다. v2.6.19-rc1부터 Linux에 영향을 미치는 힙heap 경계를 벗어난 쓰기out-of-bounds write 취약점이 net/netfilter/xtables.c에서 발견되었습니다. 이 취약점으로 인해 공격자는 사용자 네임스페이스user name space를 통해 권한을 획득하거나 DoS힙 메모리 손상을 통한를 유발할 수 있습니다...

resmack-fuzz-test

Resmack Fuzz Test This project is an exploration of a feedback-driven fuzzer that uses: ptrace for instrumentation with dynamic memory breakpoints specified by the target process process snapshotting/restoring using /proc/pid/map, /proc/pid/clearrefs, and /proc/pid/pagemap using processvmwritev...

K55

K55 - Utilidad de inyección de procesos Linux x8664 C++14 Acerca de K55 pronunciado: "kay fifty-five" La herramienta de inyección de payload K55 se utiliza para inyectar payloads de shellcode x8664 en procesos en ejecución. La utilidad fue desarrollada utilizando técnicas modernas de C++11 así co...

sudo_inject

Linux Privilege Escalation by injecting process possessing sudo tokens Inject process that have valid sudo token and activate our own sudo token Introduction We all noticed that sometimes sudo doesn't ask us for a password because he remembers us. How does he remember us and how does he identifie...

ptrace

This repository does not have a README...

linux_injector

linuxinjector A simple ptrace-less shared library injector for x64 Linux. Usage linuxinjector mode 1. normal dlopen 2. memfd + dlopen for injecting into containers 3. raw shellcode pid Target process id. Must have ptrace rights to it required for accessing /proc/$pid/mem. Not ptraced, so another...

dirtycow-vdso

0xdeadbeef PoC for Dirty COW CVE-2016-5195. This PoC relies on ptrace instead of /proc/self/mem to patch vDSO. It has a few advantages over PoCs modifying filesystem binaries: no setuid binary required SELinux bypass container escape no kernel crash because of filesystem writeback And a few cons:...