fb-sleep-stats

fb-sleep-stats: 利用Facebook追踪朋友的睡眠 一个小工具，展示现代社交媒体潜藏的隐私风险。通过追踪Facebook好友的在线/离线状态，可以准确掌握他们的睡眠模式。 阅读博文：https://medium.com/@sqrendk/how-you-can-use-facebook-to-track-your-friends-sleeping-habits-505ace7fffb6 安装 前提条件 Git（安装方法） Node.js（安装方法） 克隆仓库 root@kitploit: git clone...

mysqli

MySQLi.py - Inyección SQL ciega basada en tiempo para MySQL MySQLi.py es un proyecto personal de práctica, inspirado en el exploit 46635 de Exploit-DB, utilizado durante la sala SimpleCTF de TryHackMe. Lo que me llamó la atención del exploit original fue su capacidad para extraer credenciales e...

CVE-2026-80776

CVE-2026-80776 is a race condition in the Linux kernel futex subsystem, specifically in futex_pivot_pending() during a custom private hash resize. Because futex_pivot_pending() reads the hash_new and hash fields without serialization, a resize task can observe a pre-pivot hash_new alongside a pos...

sleep_python_bridge

Cobalt Strike Sleep Python Bridge Este proyecto es un 'puente' entre el lenguaje sleep y python. Permite el control de un teamserver de Cobalt Strike a través de python sin necesidad del cliente GUI estándar. NOTA: Este proyecto está muy en BETA. El objetivo es proporcionar un campo de pruebas pa...

Shelter

Shelter Shelter 是一种完全武器化的睡眠混淆技术，它通过广泛使用 ROP 来实现内存中 payload 的完全加密。 该 crate 具有以下特点： AES-128 加密。 完整 PE 加密能力。 在睡眠期间移除执行权限。 不使用 APC/HWBP/定时器，仅使用 ROP 实现混淆。 使用 Unwinder 在执行 ROP 链之前实现调用栈欺骗。 提供不同的执行方式以适应各种情况。 其他 OPSEC 考虑：DInvokers、间接系统调用、字符串字面量加密等。 内容 用法 示例 fluctuate fluctuatefromaddress...

napper-for-tpm

root@kitploit: ,----------------, ,---------, ,-----------------------, ," ,"| ," Napper v1.3 for TPM ," | ," ," | +-----------------------+ | ," ," | | .-----------------Z | | +---------+ | | | Z | | | | -==----'| | | | ︶ ︶ z | | | | | | | | - | | |/----| ==== oo | | | | | | | ,/| | ," |...

beacon_health_check

Beacon Health Check Aggressor Script Joe Vest Twitter: @joevest 描述 该攻击脚本利用信标的备注字段来指示信标的健康状态。这是通过以下方式实现的： 跟踪每个信标的当前睡眠/抖动时间 根据“最大预期签入时间”计算健康状态 每分钟使用事件 heartbeat1m 用适当的图标更新备注字段 将新信标标记为“NEW”并附上到达时间 将信标 ID 和 PID 添加到初始信标事件日志消息中 演示 YouTube 上的演示 健康检查与图标 ☑ - 符号表示信标处于活动状态且正常工作 计算方式为上次签入时间小于最大预期签入时间 sleep +...

Exploit_CVE-2021-24762

exploitcve-2021-24762 Este repositorio muestra un exploit para CVE-2021-24762. Es un exploit de Blind SQLi que, en la configuración predeterminada, obtiene la contraseña del administrador. Mientras realizaba un laboratorio, basado en WordPress con el plugin PerfectSurvey, me topé con una...

CVE-2026-80716

A flaw was found in the Linux kernel. Specifically, in the Advanced Linux Sound Architecture ALSA Pulse-Code Modulation PCM subsystem, a use-after-free vulnerability exists. This occurs when a linked stream is unlinked, and a wait entry is not properly removed from the drained peer's sleep list. ...

PayloadAutomation

¿Qué es Payload Automation? Ahora disponible como paquete PyPi: https://pypi.org/project/payload-automation/ Payload Automation es una colección de clases de Python que sirven como puente entre Sleep y Python, y que pueden usarse para ayudar a automatizar el desarrollo de payloads, las pruebas, l...

Ekko

Ekko Una pequeña técnica de ofuscación de sleep que utiliza la API Win32 CreateTimerQueueTimer. Prueba de concepto. Se puede hacer mejor. NOTA Esta implementación tiene fallos conocidos. Por lo tanto, no recomendaría usarla sin saber cómo funciona o saber cómo detectar y corregir esos fallos. TLD...

TickTock

TickTock Questo repository dimostra uno scanner di memoria PoC per l'enumerazione dei timer-queue timers come utilizzati in Ekko Sleep Obfuscation: https://github.com/Cracked5pider/Ekko. Per una guida tecnica completa, fare riferimento al post del blog di accompagnamento qui:...

NimShellcodeFluctuation

NimShellcodeFluctuation Porting in Nim del repository originale: https://github.com/mgeeky/ShellcodeFluctuation Tutti i commenti sono stati copiati e incollati così com'erano dal repository originale, perché mi hanno davvero aiutato a comprendere la tecnica. Per maggiori informazioni sulla tecnic...

D1rkSleep

D1rkSleep Versione migliorata di EKKO di @5pider che crittografa solo le sezioni dell'immagine. Tecnica di offuscamento dello sleep che utilizza l'API Win32 CreateTimerQueueTimer. Crediti: https://github.com/Cracked5pider/Ekko...

HeapCrypt

HeapCrypt Crittografare l'Heap durante il sonno intercettando e modificando Sleep con una nostra funzione che crittografa l'heap, dorme per un momento e poi decrittografa l'heap: Crittografia xor dell'heap con chiave a 16 bit : Decrittografia xor dell'heap con chiave a 16 bit : Riferimenti :...

effective-waffle

effective-waffle ancora un'altra cosa per la crittografia del sonno. ho anche usato il nome predefinito del repository github per questa. TpAllocWork + TpPostWork + TpWaitForWork + TpReleaseWork per creare + eseguire + pulire la callback. La callback è un po' di assembly raffazzonato che mette in...

UBUNTU-CVE-2026-80716

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: wake linked drain waiters on unlink sndpcmdrain on a linked stream parks an on-stack wait entry on the drained peer's runtime-sleep, and after scheduletimeout removes it only if that peer is still found in the caller's...

UBUNTU-CVE-2026-74750

In the Linux kernel, the following vulnerability has been resolved: ovpn: defer key slot crypto freeing to workqueue Key slots are released through a kref and the existing release path frees the AEAD transforms from an RCU callback. That is not safe for all crypto implementations: cryptofreeaead...

CVE-2026-74750 ovpn: defer key slot crypto freeing to workqueue

In the Linux kernel, the following vulnerability has been resolved: ovpn: defer key slot crypto freeing to workqueue Key slots are released through a kref and the existing release path frees the AEAD transforms from an RCU callback. That is not safe for all crypto implementations: cryptofreeaead...

CVE-2026-74658

A flaw was found in the Linux kernel's futex subsystem. A race condition during robust futex unlock operations can occur when a process waiting on a futex is killed before it can acquire the futex, and another process subsequently re-acquires the futex through a fast path. This can lead to a...