Linux Ptrace Inject Evasion

Generate a Linux x64 ELF that performs classic ptrace injection: PTRACEATTACH, remote mmap via syscall gadget, PTRACEPOKEDATA, RIP hijack. !/usr/bin/env python3 -- coding: utf-8 -- """ Classic ptrace shellcode injection Linux x64. Spawns a sacrificial process, attaches with ptrace, remote-mmaps v...

Microsoft Windows MS17-010 EternalBlue SMB Remote Windows Kernel Pool Corruption Exploit

This Metasploit module is a port of the Equation Group ETERNALBLUE exploit, part of the FuzzBunch toolkit released by Shadow Brokers. There is a buffer overflow memmove operation in Srv!SrvOs2FeaToNt. The size is calculated in Srv!SrvOs2FeaListSizeToNt, with mathematical error where a DWORD is...

MS17-010 EternalBlue SMB Remote Windows Kernel Pool Corruption

This module is a port of the Equation Group ETERNALBLUE exploit, part of the FuzzBunch toolkit released by Shadow Brokers. There is a buffer overflow memmove operation in Srv!SrvOs2FeaToNt. The size is calculated in Srv!SrvOs2FeaListSizeToNt, with mathematical error where a DWORD is subtracted in...