CVE-2022-20699

CVE-2022-20699 🎧 Traído a usted por Audiobahn Cisco Anyconnect VPN unauth RCE rwx stack no está bien verificado...

CrabLoader

CrabLoader Un cargador reflectante definido por el usuario User-Defined Reflective Loader para Cobalt Strike, escrito íntegramente en Rust. Solo quería averiguar lo difícil que sería construirlo. Resulta que no es tan difícil. Puede que añada una función de ofuscación de suspensión sleep...

xnuspy

xnuspy 编译并运行 example/open1hook.c 后内核日志的输出 xnuspy 是一个 pongoOS 模块，它安装了一个新的系统调用 xnuspyctl，允许你从用户空间钩取内核函数。它支持 checkra1n 0.12.2 及以上版本的 iOS 13.x、iOS 14.x 和 iOS 15.x。不支持 4K 设备。 该模块完全禁用 KTRR/KPP，使得在 EL1 内创建 RWX 内存成为可能。请勿在你的主力设备上使用。 需要 libusb：brew install libusb 构建 在顶层目录中运行 make。它将构建加载器和模块。 构建选项 在 make...

CVE-2018-17463

CVE-2018-17463 针对 CVE-2018-17463 的工作概念验证漏洞利用，使用 WebAssembly RWX 页面执行 Shellcode。 CVE-2018-17463 源于 Google Chrome 70.0.3538.64 之前版本中 V8 的错误副作用注释，允许远程攻击者通过精心制作的 HTML 页面在沙箱内执行任意代码。 此概念验证与以下博客文章直接相关： Chrome 浏览器漏洞利用，第 1 部分：V8 和 JavaScript 内部原理介绍 Chrome 浏览器漏洞利用，第 2 部分：Ignition、Sparkplug 及通过 TurboFan 进行...

ProcessStomping

ProcessStomping ProcessOverwriting 的一种变体，用于在可执行文件的节区上执行 shellcode 这是什么 更详细的解释请参阅我的博客文章 Process Stomping 是 hasherezade 的 Process Overwriting 的一种变体，其优势在于将 shellcode 载荷写入目标节区，而不是将整个 PE 载荷写入宿主进程的地址空间。 以下是 ProcessStomping 技术的主要步骤： 1. CreateProcess - 将进程创建标志设置为 CREATESUSPENDED 0x00000004 以挂起进程的主线程。 2...

CVE-2016-4657-NintendoSwitch

CVE-2016-4657-NintendoSwitch CVE-2016-4657 para NintendoSwitch rwx ¡Esto es solo para uso educativo!...

CVE-2022-20699

CVE-2022-20699 🎧 由Audiobahn为您呈现 Cisco Anyconnect VPN 未授权RCE rwx栈 它未经过良好检查...

exec-prot-bypass

可执行空间保护绕过 CVE-2022-25265 本POC演示了在二进制文件中原本不可执行区域中的字节执行，从而完全绕过了可执行空间保护。 根本原因可在此处查看： https://github.com/torvalds/linux/blob/master/arch/x86/include/asm/elf.hL280 简介 事实证明，在不支持NX的系统或支持NX的IA32系统上构建的二进制文件，如果没有包含 PTGNUSTACK 头部，则会被标记为 exec-all。 这使得二进制文件中的任何位置都可以进行完全的读写执行（RWX）。 为了实现这一点，我们使用了“历史性”构建工具。...

EUVD-2017-16757

Malware in sbrugna...

EUVD-2013-4587

Malware in sbrugna...

EUVD-2015-8044

Malware in sbrugna...

EUVD-2021-26041

Malware in sbrugna...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Redhat Enterprise_Linux

PoC exploit for CVE-2020-2732. It is an exploit for the PlayStation 4 on 5.05 firmware. The exploit targets the kernel and allows for arbitrary code execution. The exploit includes autolaunching code for Mira and Vortex's HEN payload. The bug was discovered by qwertyoruiopz. The exploit includes...

CVE-2021-39684

In targetinit of gs101/abl/target/slider/target.c, there is a possible allocation of RWX memory due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

SUSE SLES15 Security Update : kernel (Live Patch 47 for SLE 15 SP2) (SUSE-SU-2024:4263-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4263-1 advisory. This update for the Linux Kernel 5.3.18-15020024188 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use...

SUSE-SU-2024:4250-1 Security update for the Linux Kernel (Live Patch 48 for SLE 15 SP2)

This update for the Linux Kernel 5.3.18-15020024191 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - CVE-2021-47600: dm btree remove: fix us...

SUSE-SU-2024:4235-1 Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024116 fixes several issues. The following security issues were fixed: - CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. - CVE-2024-43861: Fix memory leak for not ip packets bsc1229553. - CVE-2024-35905: Fixed int overflow for...

SUSE-SU-2024:3706-1 Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005536 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifssignalcifsdforreconnect bsc1225312. - CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfochangednotify bsc1225739. -...

SUSE-SU-2024:3695-1 Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-15040024111 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifssignalcifsdforreconnect bsc1225312. - CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfochangednotify bsc1225739. -...

SUSE-SU-2024:3690-1 Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059133 fixes several issues. The following security issues were fixed: - CVE-2024-35861: Fixed potential UAF in cifssignalcifsdforreconnect bsc1225312. - CVE-2021-47291: ipv6: fix another slab-out-of-bounds in fib6nhflushexceptions bsc1227651. -...