nccfsas

Introduction This repository holds information released publicly by NCC Group's Full Spectrum Attack Simulation FSAS team...

CVE-2019-2215

CVE-2019-2215 Andriod binder bug record.Just only test on emulator : ubuntu 22.04 | 4G | 4 cpus andriod studio Pixel2 | Andriod 10.0Q--Google Play Intel x86 Atom 64 System Image | API-29 ndk 21.0.6113669 origin/android-goldfish-4.14-dev | kernel version is 4.14.175 some important config options...

ps5-umtxdbg

NOTES The bug was found in early december 2020, not by me, but a genius who looked 15mins at fbsd and immediately spotted it 🙇‍♂️. This c++ impl was made when experimenting with increasing exploit reliability after ps5 kernel added some heap randomization features. setup vm get vm image wget...

hyenae-ng

Hyenae NG Hyenae NG Next Generation is a re-write of the original Hyenae tool which was originally published back in the year 2010. Besides switching from C to C++, using modern design concepts, Hyenae NG was just like the original Hyenae written with maximum portability in mind. Since the origin...

Invoke-PSObfuscation

Invoke-PSObfuscation Traditional obfuscation techniques tend to add layers to encapsulate standing code, such as base64 or compression. These payloads do continue to have a varied degree of success, but they have become trivial to extract the intended payload and some launchers get detected often...

pidrila

PIDRILA Current Release: v0.1.0 2020.11.08 Overview PIDRILA : P ython I nteractive D eepweb-oriented R apid I ntelligent L ink A nalyzer is really fast async web path scanner prototype developed by BrightSearch team for all ethical netstalkers. Installation & Usage git clone...

snapchat-map-scraper

Snapchat Story Downloader This program can search Snapchat's public Snap Map at multiple locations and download all stories for later investigation and categorization. A lot is unknown about how Snapchat decides which videos show up at which "point" on the map, so the scraper can also randomize t...

bantam

Bantam An advanced PHP backdoor management tool, with a lightweight server footprint, multi-threaded communication, and an advanced payload generation and obfuscation tool. Features end to end encryption with request unique encryption keys, and payload streaming designed to bypass WAF, IDS, SIEM...

hide-me

Mac and hostname random changer hide-me Every time I was trying to do an Network Penetration Testing, I needed to do some steps to make sure I was hidden, put my interface down, change my mac address, change my hostname, putting interface back up, and restarting network-manager service, and when...

LightsOut

LightsOut LightsOut will generate an obfuscated DLL that will disable AMSI & ETW while trying to evade AV. This is done by randomizing all WinAPI functions used, xor encoding strings, and utilizing basic sandbox checks. Mingw-w64 is used to compile the obfuscated C code into a DLL that can be...

TREVORproxy

TREVORproxy A SOCKS proxy written in Python that randomizes your source IP address. Round-robin your evil packets through SSH tunnels or give them billions of unique source addresses! See the accompanying Blog Post for a fun rant and some cool demos! Note: If you're looking to defend against this...

CodiMD <2.5.4 - Insecure Filename Randomization

CodiMD does not require valid authentication to access uploaded images or to upload new image data. An attacker who can determine an uploaded image's URL can gain unauthorised access to uploaded image data. Due to the insecure random filename generation in the underlying Formidable library, an...

Malleable-C2-Randomizer

Malleable-C2-Randomizer This script randomizes Cobalt Strike Malleable C2 profiles through the use of a metalanguage, hopefully reducing the chances of flagging signature-based detection controls. In short, the script parses the provided template, substitutes the variables for a random value from...

F31

F31: Hiding Kali Linux F31 is a bash script that hardens your Kali Linux and allows you to minimize noise in the air. Useful for pentesters or Red Team operators where it is important to have minimal impact on the infrastructure to avoid network performance issues. The tool does not guarantee you...

autodeauth

autodeauth A tool/service built to automatically deauth local networks Tested on Raspberry Pi OS and Kali Linux Setup $ chmod +x setup.sh $ sudo ./setup.sh This can be changed by editing /etc/systemd/system/autodeauth.service ? Enter your WiFi interface to use with the autodeauth service: wlan0...

hawkopsec

HawkOpsec One-tap Linux OPSEC hardening & anonymity toolkit Pick a profile and HawkOpsec starts Tor, encrypts DNS, spoofs your identity, hardens the kernel and checks for DNS / IP leaks — Reset system rolls everything back. Architecture Install With pipx Debian / Ubuntu / Kali / Mint sudo apt...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.13 contains a security vulnerability. This vulnerability arises from the x86/mm incorrectly applying va-align randomization to hugetlb mappings. As a result, vmunmappedarea returns an address that exceeds the page boundary. When the process is terminated, BUGON is...

Astra Linux – Vulnerability in Linux, Linux 5.10

A flaw in the processing of received ICMP errors such as ICMP fragments and ICMP redirections within the Linux kernel’s functionality was identified. This flaw allows an off-path remote user to quickly scan open UDP ports. This vulnerability enables a remote user to bypass the UDP source port...

Waveform Randomization for Secure ISAC

This paper studies waveform-level security for Integrated Sensing and Communication ISAC. Instead of relying on spatial beamforming or power allocation, we randomize the sensing waveform itself using phase keys and tangent Artificial Noise AN applied to a Fourier-curve constellation. Coordinated...

Astra Linux – Vulnerability in Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ELF: fixed the double read of kernel.randomizevaspace. The ELF loader uses “randomizevaspace” twice. This is a sysctl setting that can be changed at any time; therefore, two reads could potentially access different values,...