CVE-2024-0044

CVE-2024-0044/A-307532206 is a High severity vulnerability in the Android framework that allows attackers with adb access to run arbitrary code under the UID of arbitrary app. It was originally found by Tom Hebb from Meta Red Team X. You can found many articles on exploit this vulnerability on th...

onelinepy

onelinepy Python Obfuscator for FUD Python Code. Download & Run git clone https://github.com/spicesouls/onelinepy cd onelinepy chmod +x setup.sh ./setup.sh onelinepy Usage Guide | || | . | | -| | | | -| . | | |Python |||||||||| | |Obfuscator || || usage: oneline.py -h -m M -i I --script SCRIPT...

awesome-pentest

Awesome Penetration Testing A collection of awesome penetration testing and offensive cybersecurity resources. Penetration testing is the practice of launching authorized, simulated attacks against computer systems and their physical infrastructure to expose potential security weaknesses and...

foolav

foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...

dr_checker

DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers This repo contains all the sources, including setup scripts. Now with an Amazing UI to view the warnings along with corresponding source files. Tested on Ubuntu = 14.04.5 LTS Announcements 16 Feb 2018 : DR.CHECKER has bee...

trajan

Trajan: CI/CD Security Scanner Trajan scans CI/CD pipelines for security vulnerabilities that attackers use to compromise software supply chains. It supports GitHub Actions, GitLab CI, Azure DevOps, Jenkins, and JFrog. What it does Trajan parses workflow YAML files, builds dependency graphs, runs...

cve_2024_0044

CVE 2024 0044 CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a "run-as any app" attack, leading to local escalation of...

SharpHide

SharpHide Just a nice persistence trick to confuse DFIR investigation. Uses NtSetValueKey native API to create a hidden null terminated registry key. This works by adding a null byte in front of the UNICODESTRING key valuename. More info about this technique can be found in the following...

CVE-2023-36123

CVE-2023-36123 For demonstration purposes only. Exploit works on all Versions of Plain Craft Launcher 2. Download Custom.xaml and import into Plain Craft Launcher 2,then click "Run Command". https://github.com/Hex-Dragon/PCL2/assets/140469824/636d1436-a26d-4f54-ad4f-a7b1bb123783...

ohmybackup

ohmybackup ohmybackup - Scan Victim's Backup Directories & Backup Files ohmybackup Scans backup folders on target sites. Searches archived files in the folders it finds. With the 2-file scanning system, it adds extensions and filenames in different ways, making it more likely to be found. 1 -...

cve_2024_0044

CVE 2024 0044 CVE-2024-0044, identifiée dans la fonction createSessionInternal du fichier PackageInstallerService.java, est une vulnérabilité de haute sévérité affectant les versions Android 12 et 13. Cette vulnérabilité permet à un attaquant d'effectuer une attaque de type « run-as any app »,...

quick-lookup-ptrun

Plugin de recherche rapide pour PowerToys Run Ce plugin pour PowerToys Run vous permet de rechercher rapidement une adresse IP, un nom de domaine, un hash ou tout autre point de données dans une liste d'outils de cybersécurité. Il est parfait pour les analystes en sécurité, les testeurs...

timesketch

Timesketch Table of Contents 1. About Timesketch 2. Getting started 3. Community 4. Contributing About Timesketch Timesketch is an open-source tool for collaborative forensic timeline analysis. Using sketches you and your collaborators can easily organize your timelines and analyze them all at th...

vulnerability-in-Remix-React-Router-CVE-2025-31137-

aperçu après avoir lu le write-up de @zhero dans son blog personnel, j'ai décidé de construire ce CTF pour apprendre comment les choses fonctionnent, puis j'ai décidé de le partager avec tous ceux qui veulent apprendre à exploiter cette vulnérabilité. J'ai essayé de créer un CTF avec la version...

cve-2024-0044

CVE-2024-0044 CVE-2024-0044 позволяет выполнить атаку "run-as", что приводит к локальному повышению привилегий. Это даёт злоумышленнику доступ к приватным файлам, хранящимся локально любым приложением на мобильном устройстве, что нарушает гарантии безопасности, обеспечиваемые "Application Sandbox...

Nginx UI <= 2.3.7 - Unauthenticated Installer Exposure

Nginx UI 2.0.0 to 2.3.8 contains an authentication bypass caused by unauthenticated access to /api/install during first-run setup, letting remote attackers claim the initial admin account, exploit requires attacker to access the service before legitimate operator. id: CVE-2026-42221 info: name:...

Chrome-Forensic_CVE-2024-0044

🔍 Chrome Forensic - CVE-2024-0044 Un outil robuste de criminalistique numérique pour extraire et analyser les artefacts Google Chrome depuis des appareils Android Fonctionnalités • Installation • Utilisation • Documentation 👤 Informations sur l'auteur Auteur : JackTekno GitHub :...

android_autorooter

Android Autorooter Это скорее просто заметка для себя, чтобы дальше исследовать возможности работы, проделанной здесь: https://rtx.meta.security/exploitation/2024/03/04/Android-run-as-forgery.html...

zoshrinkC2

MeliziaC2 Целевое вредоносное ПО через DNS-over-HTTPS запускается только один раз ! Некоторые функции пока недоступны ! ! WIP, не используйте в продакшене ! Ключевые особенности Автоудаление вредоносного ПО при сбое Полностью зашифрованная индивидуальным RSA-ключом жертвы связь через DoH...

lenovo-a1000g-mt8317-A412_01_09_130907-kernel-3.4.0-root-cve-2016-5195

Lenovo IdeaTab A1000G — Root Примечание: Эта документация и код эксплойта созданы с помощью ИИ Kiro. Проверяйте перед использованием — ИИ может и допускает ошибки. Устройство Поле| Значение ---|--- Модель| Lenovo IdeaTab A1000G SoC| MediaTek MT8317 = MT6517 Процессор| Dual-core Cortex-A9 @ 1.2GHz...