CVE-2023-40296

CVE-2023-40296 async-sockets-cpp fino alla versione 0.3.1 contiene una vulnerabilità di buffer overflow off-by-one in static void ReceiveFromUDPSocket udpSocket in udpsocket.hpp, intorno alle righe 160-167. Il buffer overflow interessa tutti i server UDP corrispondenti. Il remote buffer overflow...

rat-shell

Trojan di accesso remoto RAT per Windows che utilizza socket .NET Binari e codice sorgente client-server per controllare una macchina remota dietro un NAT tramite una shell da riga di comando in Windows. Sebbene il core fornisca supporto alla comunicazione con più RAT, l'interfaccia a riga di...

PiX-C2

Applicazione server C2 ICMP PiX-C2 scritto da NoCow email: [email protected] Il progetto C2 ICMP cioè PiX-C2 è un'applicazione client/server che consente il comando e controllo utilizzando solo ICMP. Il server eseguirà lo sniffing dei pacchetti ICMP e preleverà le informazioni dal payload da...

CVE-2023-38632

CVE-2023-38632 async-sockets-cpp के 0.3.1 तक के संस्करणों में tcpsocket.hpp की पंक्तियों 102-110 पर स्थित static void ReceiveTCPSocket socket में एक रिमोट बफ़र ओवरफ़्लो भेद्यता मौजूद है। यह बफ़र ओवरफ़्लो सभी संबंधित TCP सर्वरों को प्रभावित करता है। रिमोट बफ़र ओवरफ़्लो को किसी सॉकेट से कनेक्ट होकर...

NetLlix

NetLlix Un progetto creato con l'obiettivo di emulare e testare l'esfiltrazione di dati su diversi protocolli di rete. L'emulazione viene eseguita senza l'uso di API native. Questo aiuterà i blue team a scrivere regole di correlazione per rilevare qualsiasi tipo di comunicazione C2 o esfiltrazion...

ksubdomain

KSubdomain: Strumento di Brute Force per Sottodomini Ultra Veloce e Senza Stato English | 中文 KSubdomain è uno strumento di brute force per sottodomini basato su tecnologia stateless, che offre una velocità di scansione senza precedenti e un consumo di memoria estremamente ridotto. Utilizza socket...

CVE-2026-65183 Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.42 throug...

publications

Publicações de Calif MAD Bugs: Mês de Bugs Descobertos por IA Internos da Apple Uma série sobre engenharia reversa dos internos da Apple. Pesquisa de Segurança Uma Corrida Dentro de Uma Corrida: Explorando a CVE-2025-38617 em Linux Packet Sockets Auditorias de Segurança Auditoria de Segurança do...

udp2raw

Udp2raw-tunnel Un tunnel che trasforma il traffico UDP in traffico FakeTCP/UDP/ICMP crittografato utilizzando Raw Socket, aiutandoti a bypassare i firewall UDP o ambienti UDP instabili. Se usato da solo, udp2raw tunnella solo traffico UDP. Tuttavia, se usi udp2raw insieme a qualsiasi VPN basata s...

botb

Break out the Box BOtB BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform commo...

CVE-2022-3168-adb-unexpected-reverse-forwards

Die Reverse-Tunnel-Funktion in Android Debug Bridge adb war anfällig, da sie es bösartigen adb-Daemons erlaubte, Verbindungen zu beliebigen Hosts/Ports und Unix-Domain-Sockets auf dem Host zu öffnen. Fenster des Angreifers wo der schädliche Daemon läuft: root@kitploit: $ ./adbroguedaemon.py Fenst...

nysm

nysm A stealth post-exploitation container. Table of Content 1. Introduction 2. Installation 2.1 Requirements 2.2 Linux headers 2.3 Build 3. Usage 3.1 Examples 4. How it works 4.1 In general 4.2 Hide eBPF objects 4.3 Hide Auditd logs 4.4 Hide PIDs 4.5 Hide sockets 5. Limitations Introduction...

CVE-2026-74709

A flaw was found in the Linux kernel's xsk AFXDP sockets component. A local attacker, by manipulating metadata flags after request processing, could cause the kernel to write a timestamp into the metadata area even when not explicitly requested. This could lead to unintended data modification...

CVE-2026-74707

A flaw was found in the Linux kernel's xsk AFXDP sockets component. This vulnerability allows a local user to bypass security validation by modifying transmission TX metadata after it has been initially checked but before it is used to prepare hardware requests. This could lead to unexpected syst...

uptux

uptux Specialized privilege escalation checks for Linux systems. Implemented so far: Writable systemd paths, services, timers, and socket units Disassembles systemd unit files looking for: References to executables that are writable References to broken symlinks pointing to writeable directories...

copy-fail-mcp

Copy Fail MCP 📖 Guia de Instalação — início rápido, configuração manual e solução de problemas CVE-2026-31431 — A pior vulnerabilidade do Linux já descoberta. Agora controlável via MCP. 732 bytes de Python. Sem compilação. Sem condição de corrida. Sem offsets específicos por distribuição. Um únic...

CVE-2026-74731

In the Linux kernel, the following vulnerability has been resolved: schedext: Skip sub-disable teardown for never-linked sub-schedulers A sub-scheduler enable can fail before scxlinksched links the sched into the hierarchy, e.g. when the parent is already being disabled, and cleanup still runs th...

CVE-2026-74713

In the Linux kernel, the following vulnerability has been resolved: vhostiotlb: bound map allocation in addrange vhostiotlbaddrangectx only retires an old entry when the table has a non-zero limit, has exactly reached that limit and has VHOSTIOTLBFLAGRETIRE set. Non-retiring tables can keep...

CVE-2026-74708

In the Linux kernel, the following vulnerability has been resolved: xsk: validate launch-time metadata size Launch-time metadata extends beyond the first 16 bytes of struct xsktxmetadata. Reject the request when the registered metadata area does not contain the complete field. Snapshot the...

CVE-2026-74704

In the Linux kernel, the following vulnerability has been resolved: net/sched: schcake: drop WARNON1 for malformed packets in ACK filter The schcake ACK filter parses packets to find the TCP header and filter duplicated ACKs if the flow is backlogged. The parsing code contains a WARNON1 which can...