volatility

This project is archived. See Volatility 3 for modern investigations: https://github.com/volatilityfoundation/volatility3 ============================================================================ Volatility Framework - Volatile memory extraction utility framework The Volatility Framework is a...

pafish

Pafish Pafish 是一款测试工具，使用与恶意软件家族相同的手法检测虚拟机和恶意软件分析环境。 该项目免费且开源；所有反分析技术的代码均已公开。适用于 Windows（x86 32 位和 64 位）的 Pafish 可执行文件可从发布页面下载。 目标 本项目的目标是收集恶意软件样本中常见的用于逃避分析系统的技术。这样分析师可以研究这些技术，并测试分析环境是否正确实现。 构建 Pafish Pafish 使用 C 语言编写，可通过 Mingw-w64 和 make 构建。 wiki 页面“构建方法”包含详细说明。 作者 Alberto Ortega 以及众多出色的贡献者。 许可证...

DKMC

别杀我的猫 DKMC Windows 10 现在限制了 shellcode 载荷的正常运行，因为需要 RWX 页面来解码和执行 shellcode。DKMC 可以更新以设置具有适当权限的内存页面。 别杀我的猫是一款工具，它能生成存储在多重图像中的混淆 shellcode。该图像 100% 有效，同时也是 100% 有效的 shellcode。其思路是避免沙箱分析，因为它只是一张简单的“合法”图像。目前该工具依赖 PowerShell 来执行最终的 shellcode 载荷。 为什么叫“别杀我的猫”？因为我不擅长为工具起名，所以决定利用默认 BMP 图像是一只猫的事实来命名。...

haxx

haxx 在 iOS 14 - iOS 14.8.1 上以 root 权限实现未绑定 + 未沙盒化的代码执行 haxx。 基于 CoreTrustDemo，另外请注意证书不受版权保护。 使用 注意：需要 macOS + 已越狱设备 启动与运行 此方法适用于 14.0-14.6。14.7 14.7b1-14.8.1 需要替换 launchd（参见 launchd.c），安全性较低。 1. 确保你拥有来自 Procursus Team 的 ldid。 2. 根据需要修改 haxx.c 以包含你自己的代码。 3. 运行 make 构建。如果你不在 macOS 上，请指定...

V8-sbx-bypass-collection

Colección de escapes/bypasses/violaciones del sandbox de V8 y VR Una colección de enlaces relacionados con VR del sandbox de V8 y explotación Contenido IssueTracker Articles Papers & Slides Design documents IssueTracker 2023: "issue id: 40940619, Escape del sandbox de V8 debido a que las etiqueta...

DRMBinViaOrdinalImports

DRMBinViaOrdinalImports - Crear malware DRM anti-copia Enlaces rápidos Maldev Academy Inicio Maldev Academy Temario Maldev Academy Precios Resumen Este repositorio utiliza una técnica para modificar la Tabla de Direcciones de Importación IAT de un programa, reemplazando los nombres de las funcion...

CVE-2025-2783

Chromium CVE-2025-2783: 沙箱逃逸与全链远程代码执行利用 本仓库包含针对CVE-2025-2783 的全链利用实现。漏洞位于Chromium的Ipcz 通信层，允许攻击者从受限的渲染进程实现沙箱逃逸和任意代码执行。此利用支持至134.0.6998.177 版本。 https://github.com/user-attachments/assets/a3e2bf34-739c-4db7-9101-0f4d48987ad0 1. 项目结构 src/ ：核心利用实现。包含针对CVE-2025-2783的Ipcz劫持逻辑、V8钩子以及线程劫持执行流程。 demo/...

SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2026:4247-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4247-1 advisory. Update to Firefox Extended Support Release 153.3.0 ESRi MFSA 2026-93, bsc1280371 - CVE-2026-92005: Use-after-free in the Audio/Vide...

EulerOS Virtualization 2.11.0 : python-jinja2 (EulerOS-SA-2026-3547)

According to the versions of the python-jinja2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed environment detects calls t...

EulerOS Virtualization 2.11.1 : python-jinja2 (EulerOS-SA-2026-3460)

According to the versions of the python-jinja2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed environment detects calls t...

openSUSE 16: MozillaFirefox / MozillaFirefox-branding-upstream / etc (openSUSE-SU-2026:21853-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21853-1 advisory. Firefox Extended Support Release 153.2.0 ESR MFSA 2026-85 bsc1278001: CVE-2026-75874 bmo2039972 Sandbox escape in the Remote Settings Client...

jlangch__venice_CVE-2022-36007_1-10-16

Venice...

CVE-2025-56015

CVE-2025-56015 GenieACS RCE Resumen Prueba de concepto del exploit para CVE-2025-56015 , una vulnerabilidad crítica de escape de la sandbox e inyección de código en GenieACS que permite la ejecución arbitraria de JavaScript en el contexto de aprovisionamiento. Al aprovechar la cadena de prototipo...

CVE-2025-4517-Python-tarfile-filter-data-Bypass-PoC

CVE-2025-4517 — Python tarfile filter="data" Bypass PoC Vulnerabilidad de Path Traversal en el módulo tarfile de Python que afecta a las versiones 3.8.0 hasta 3.13.1. El sandbox filter="data" — diseñado para evitar extracciones no seguras — puede ser evadido creando rutas que exceden PATHMAX 4096...

DEBIAN-CVE-2026-93373

Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: High...

CVE-2026-93375

Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-93372

Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-93374

Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-93376

Out of bounds read in DataTransfer in Google Chrome prior to 153.0.8010.52 allowed a local attacker leveraging social engineering to read memory outside the sandbox via a local program. Chromium security severity: Medium...

CVE-2026-93373

Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: High...