KSMBD-CVE-2025-37947

PoC для CVE-2025-37947 в ksmbd Для получения дополнительной информации см. статью здесь. Файлы bpf-tracer.sh - BPF-трассировщик msgmsg CVE-2025-37947.c - эксплойт для CVE-2025-37947 proof-of-concept.c - минимальный триггер, вызывающий запись за пределами буфера OOB write ksmbd.conf -...

Nodejs-Tracer

nodejs-tracer Простой трассировщик для Node.js, который логирует вызовы основных модулей, может подделывать определённые вызовы для обхода анти-анализа, сохранять файлы, записанные приложением, и многое другое. Полезен для анализа сильно обфусцированного вредоносного ПО на Node.js. Использование...

kube-knark

Projet Kube-Knark Tracez votre runtime Kubernetes !! Kube-Knark est un traceur open-source qui utilise les technologies pcap et ebpf pour effectuer un traçage runtime sur un cluster Kubernetes déployé. Il trace l'exécution de l'API Kubernetes et les changements de permissions des fichiers de...

exif-gps-tracer

exif-gps-tracer Скрипт на Python, который позволяет извлекать данные геолокации из ваших файлов изображений, хранящихся в наборе данных. Он также создает выходные данные в формате CSV и в HTML Google Maps. Предварительные требования Для бесперебойной работы этого скрипта: 1 У вас должен быть ключ...

azazel

Azazel Un tracer di sicurezza runtime leggero basato su eBPF, progettato specificamente per sandbox di analisi malware. Inserisci un campione in un contenitore isolato e Azazel cattura ogni syscall, accesso a file, connessione di rete e comportamento sospetto, fornendoti un flusso JSON pulito di...

nova-tracer

Nova-tracer Monitoraggio e Visibilità degli Agenti Monitoraggio della sicurezza e difesa contro l'iniezione di prompt per Claude Code utilizzando il NOVA Framework. Caratteristiche Tracciamento delle Sessioni - Cattura tutti gli utilizzi degli strumenti con timestamp e metadati Rilevamento di...

snoop

snoop Ein Syscall-Tracer für Linux, basierend auf eBPF. Wie strace, aber mit einer Live-TUI, intelligenten Filtern und Argument-Dekodierung, die man tatsächlich lesen kann. root@kitploit: $ sudo snoop curl https://example.com 0.001 curl1234/1234 openatATFDCWD, "/etc/ssl/certs/ca-certificates.crt"...

IP-Tracer

IP-Tracer IP-Tracer è utilizzato per tracciare un indirizzo IP. IP-Tracer è sviluppato per sistemi Termux e basati su Linux. Puoi facilmente ottenere informazioni su un indirizzo IP usando IP-Tracer. IP-Tracer utilizza ip-api per tracciare l'indirizzo IP. Come installare IP-Tracer ? apt update ap...

drltrace

Drltrace Windows test build Linux test build Drltrace is a dynamic API calls tracer for Windows and Linux applications. Drltrace is built on top of DynamoRIO dynamic binary instrumentation framework. Drltrace was initialy implemented by Derek Bruening and distributed with DynamoRIO and DrMemory...

strace

strace - the linux syscall tracer This is strace -- a diagnostic, debugging and instructional userspace utility with a traditional command-line interface for Linux. It is used to monitor and tamper with interactions between processes and the Linux kernel, which include system calls, signal...

strace

strace - il tracer di syscall Linux Questo è strace -- un'utilità diagnostica, di debugging e didattica per lo spazio utente con un'interfaccia a riga di comando tradizionale per Linux. Viene utilizzato per monitorare e alterare le interazioni tra i processi e il kernel Linux, che includono...

Orbit Tracer

Orbit Tracer Agente di Sicurezza Orbit Tracer per la Risoluzione Intelligente della Sicurezza Automatizza l'analisi delle vulnerabilità di sicurezza, la valutazione del rischio e la risoluzione su tutta la codebase utilizzando l'IA e il knowledge graph di Orbit Il Problema I team di sicurezza...

CVE-2026-39808

CVE-2026-39808 Fortinet FortiSandbox 4.4.0-4.4.8 - OS Command Injection via tracer-behavior Endpoint Fortinet FortiSandbox ist eine fortschrittliche Bedrohungsschutzlösung, die isolierte Umgebungen schafft, um verdächtige Dateien, URLs und Netzwerkverkehr auf schädliches Verhalten zu analysieren...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: rvcv: fixed an oops caused by the irqsoff latency tracer. The tracehardirqson,off functions require the caller to properly set up the frame pointer. This is because these two functions use the macro CALLERADDR1 also known as...

PT-2026-79722

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fw tracer, return NULL on create error Tracer creation can fail by returning either NULL or ERR PTR. The return value is stored without a check on the device, and users treat ERR PTR and NULL the same way. This also...

CVE-2026-72357

A flaw was found in the Linux kernel's uprobes/x86 component. The inuprobetrampoline function incorrectly uses the current process's memory management current-mm for Virtual Memory Area VMA lookups during the unregistration process. This occurs because the lookup is performed in the tracer's...

CVE-2026-72357

In the Linux kernel, the following vulnerability has been resolved: uprobes/x86: Use proper mmstruct in inuprobetrampoline In the unregister path we use inuprobetrampoline check with current-mm for the VMA lookup, which is wrong, because we are in the tracer context, not the traced process. Add...

UBUNTU-CVE-2026-72357

In the Linux kernel, the following vulnerability has been resolved: uprobes/x86: Use proper mmstruct in inuprobetrampoline In the unregister path we use inuprobetrampoline check with current-mm for the VMA lookup, which is wrong, because we are in the tracer context, not the traced process. Add...

CVE-2026-72012

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Call synchronizercu when unregistering This ensures that any RCU readers traversing the instance list have finished, before releasing the reference on the tracer that the instance points to...

CVE-2026-72357 uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline

In the Linux kernel, the following vulnerability has been resolved: uprobes/x86: Use proper mmstruct in inuprobetrampoline In the unregister path we use inuprobetrampoline check with current-mm for the VMA lookup, which is wrong, because we are in the tracer context, not the traced process. Add...