Astra Linux – Vulnerability in unbound

Unbound versions 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can lead to the execution of shell code after receiving a specially crafted answer. This issue can only be exploited if Unbound was compiled with the --enable-ipsecmod option, and Isecmod is enabled and utilized...

CVE-2023-3519

Citrix ADC RCE CVE-2023-3519 Este exploit utiliza direcciones y shellcode para Citrix VPX 13.1-48.47. Para el artículo completo, haga clic aquí. Uso Se requiere NASM para compilar el shellcode. root@kitploit: $ sudo apt install nasm El shellcode incluido descargará y ejecutará un script de shell...

doublepulsar-usermode-injector

Author: Matt Hillman [email protected] - @sp1nl0ck Company: Countercept @countercept Website: https://countercept.com A utility to use the usermode shellcode from the DOUBLEPULSAR payload to reflectively load an arbitrary DLL into another process, for use in testing detection techniques or...

radare2-scripts

radare2 Scripts Summary A 'collection' of scripts to be used with radare2. r2bincarver.py - A script used to carve files from memory dumps. r2hashfuncdecoder.py - A script used to decode hashed functions, commonly found in shellcode. Scripts Binary Carver This script will carve files from memory...

win-exec-calc-shellcode

win-exec-calc-shellcode Small null-free shellcode that execute calc.exe. Runs on x86 and x64 versions of Windows 5.0-6.3 2000, XP, 2003, 2008, 7, 8, 8.1, all service packs. Sizes build 306...

Linux_X86_Reverse_TCP_Alphanumeric_Staged_Shellcode_Execve-bin-bash

This repository does not have a README...

cve-2018-9948-9958-exp

2018-9948-9958-exp "getshellcodefrommsf.py" es un script de Python para obtener shellcode de msfvenom, luego copiar la salida al exp.pdf reemplazando el bloque de shellcode 'calc', y finalmente funciona. Ooooops, es un shellcode de reverse tcp. un código de ejemplo es así: python...

CVE-2021-21220

First install: https://commondatastorage.googleapis.com/chromium-browser-snapshots/index.html?prefix=Winx64/848005/ Chrome version: 90.0.4403.0 install chrome-win.zip 1. node server.js run ./chrome.exe --no-sandbox go to localhost:8888 Note that the CVE which this exploits relies on is CVE...

CVE-2022-42475-POC

CVE-2022-42475 Antecedentes Este es el exploit para la entrada del blog aquí: https://bishopfox.com/blog/exploit-cve-2022-42475 Versión Redactada Esta versión del exploit no funcionará sin que tú, el hacker, proporciones las direcciones de memoria necesarias para los gadgets ROP, etc. El trabajo...

CVE-2021-40449_poc

CVE-2021-40449 Más información aquí: https://kristal-g.github.io/2021/11/05/CVE-2021-40449POC.html Compilación Hice un pequeño apaño con la librería MinHook para que soporte de forma algo parcial el Platform Toolset de 2019. Por eso incluí los archivos lib en este repositorio. Adaptación a...

Java-Shellcode-Loader

Java ShellCode Loader A ShellCode loader implemented in Java, compatible with 32-bit and 64-bit platforms. The core principle is to use Jna to call Windows APIs to achieve shellcode injection. Runtime environment: Jre = 1.5 Note: This project is already integrated into the ShellCodeLoader module ...

SleepyCrypt

SleepyCrypt Una función de shellcode para cifrar la imagen de un proceso en ejecución en memoria mientras duerme. Este es el código complementario de mi publicación de blog aquí. Compilación Solo ejecuta build.sh para compilar el código C, extraer la sección .text como shellcode y compilarlo en u...

MAL-2026-15933 Malicious code in houdus (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f1c6df3b6cf8e44eceecfcd1aa44ee0301e8921b0c5294560c0031c0b17b6e6 The package advertises random-number helpers but its generator.py side-loads houdus/assests/ssd.wav as Python via importlib.util.specfromfilelocation...

Malicious code in houdus (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f1c6df3b6cf8e44eceecfcd1aa44ee0301e8921b0c5294560c0031c0b17b6e6 The package advertises random-number helpers but its generator.py side-loads houdus/assests/ssd.wav as Python via importlib.util.specfromfilelocation...

binary-exploitation-mitigation-bypass-lab

Binary Exploitation Mitigation Bypass Lab A progressive, from...

Exploit for Out-of-bounds Write in Mozilla Firefox

CVE-2024-29943, but with wasm Because chaining a real Pwn2O...

exploit-development-framework

Exploit Development Framework EDF A modular, educational ex...

Malicious code in streak-math-calc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f98537ccfd6214a3970375d9c210e83853153b35b19193b4b1850fe6450ed4f The package's main entry dist/index.mjs runs a top-level IIFE that chmod +x's a bundled ELF at dist/math-calc.bin and spawns it detached with piped...

FTP Fetch, DNS TXT Record Payload Download and Execution

Fetch and execute an x86 payload from an FTP server. Performs a TXT query against a series of DNS records and executes the returned x86 shellcode. The DNSZONE option is used as the base name to iterate over. The payload will first request the TXT contents of the a hostname, followed by b, then c,...

FTP Fetch, Windows shellcode stage, Windows Reverse HTTPS Stager (wininet)

Fetch and execute an x86 payload from an FTP server. Custom shellcode stage. Tunnel communication over HTTPS Windows wininet Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule inclu...