Hooketh

Hooketh 一套用于简化与Frida配合使用的脚本，旨在帮助找到正确的函数进行挂钩并修改它。 使用方法 对于这两个脚本，我假设你已通过 USB 连接了一个设备，或在同一台机器上运行了模拟器。 在你的机器上安装 Frida，并确保你在 Android 设备/模拟器上运行了 Frida 服务。 使用 ActivityTracer.js 你可能有一个 apk 文件，并且想知道哪些活动会运行以及它们的顺序。在这种情况下，你可以使用 activitytracer.js： frida -U -f com.pkg.xxx.yyy -l activitytracer.js --no-pause 使用...

XSSTracer

XSSTracer v1.3 by 1N3 @CrowdShield https://crowdshield.com XSSTracer 是一个小型 Python 脚本，用于检查远程 Web 服务器的 Clickjacking、跨框架脚本、跨站追踪和主机头注入漏洞。 root@kitploit: 用法: ./xsstracer...

libptrace

libptrace libptrace是一个事件驱动的进程/线程调试、追踪和操作框架。它使用C语言编写，并具有Python 2.7和3.7的绑定。 它的设计初衷是作为库使用。API在设计时考虑了跨平台支持。虽然当前版本仅运行在32位和64位（支持wow64）的Windows上，但其设计和抽象使得其他平台甚至远程调试支持可以在同一API下添加。 它是多核/多线程感知的，可以轻松地同时运行多个事件循环。通过增加执行核心数量，可以扩展调试进程组或管道，或追踪大量进程的能力。 前言 我在2006年还在大学时编写了libptrace的初始版本，并于2011年将其重新授权给当时的雇主Immunity...

bpflock

bpflock - Lock Linux machines bpflock - eBPF driven security for locking and auditing Linux machines. Note: bpflock is currently in experimental stage , it may break, options and security semantics may change, some BPF programs will be updated to use Cilium ebpf library. Sections 1. Introduction...

TriforceAFL

Nuevo: Para aquellos que quieran jugar con TriforceAFL y TLSF, Richard Johnson creó un Dockerfile que instala ambos e incluso compila un kernel de Linux por ti. Está disponible aquí https://hub.docker.com/r/moflow/afl-triforce/tags/. También nuevo: ¡afl-tmin ahora funciona con el forkserver!...

call_map

Call Map .. default-role:: code Acerca de Call Map es una herramienta para navegar por grafos de llamadas en Python, con planes de soportar otros lenguajes. A continuación se muestra una captura de pantalla después de ejecutar callmap -m toolz, y luego hacer clic en algunas funciones. .. figure::...

kube-knark

Kube-Knark 项目 追踪你的 Kubernetes 运行时！！ Kube-Knark 是一个开源追踪器，利用 pcap 和 ebpf 技术对已部署的 Kubernetes 集群进行运行时追踪。它追踪 Kubernetes API 的执行以及主节点配置文件权限的变更。追踪匹配的事件通过 Go 插件 Webhook 进行传递。 kube-knark 追踪以下内容： 完整的 Kubernetes API 规范 执行调用，特别是变更操作 Kubernetes 主节点配置文件权限变更 CIS Kubernetes 基准规范 kube-knark 追踪数据将通过以下方式报告： 控制台仪表盘 ...

icebox

IceBox Icebox is a Virtual Machine Introspection solution that enable you to stealthily trace and debug any process kernel or user. It's based on project Winbagility. Files which might be helpful: INSTALL.md: how to install icebox. BUILD.md: how to build icebox. Demo Project Organisation fdp: Fas...

ptrace

Este repositorio no tiene un README...

CVE-2021-33831

简介 该应用程序用于根据德国感染法追踪人员，以便追溯新冠肺炎感染链。它由名为iCampus的学生项目创建，不仅用于维尔道大学，还用于科特布斯-森夫滕贝格大学。大约有1万人受到影响。大学的访客需要使用此应用程序。 该应用程序由Vue前端和Laravel后端组成。后端公开了访客用户注册端点/corona-app-backend/api/account/register，允许大学的访客注册。大学的成员可以使用他们的单点登录用户名/密码组合登录。 问题描述...

CVE-2020-0668

CVE-2020-0668 powershell 实现，利用printconfig.dll来提权 evil dll可以自己定义，我这里的dll会执行c:\programdata\setup.bat文件 Reference: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0668 https://itm4n.github.io/cve-2020-0668-windows-service-tracing-eop TODO： ​ 1.利用RASPLAP服务提权...

CVE-2026-89749

A flaw was found in the Linux kernel. Specifically, within the tracing subsystem, the eventteststuff function can pass an invalid error pointer to kthreadstop if kthreadrun fails to create a kernel thread. This improper handling of error pointers, particularly under memory pressure, leads to...

Linux Distros Unpatched Vulnerability : CVE-2026-89746

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Fix use-after-free with same-name named triggers When two hist triggers on different events are registered with the same name=, the second one reuses t...

Linux Distros Unpatched Vulnerability : CVE-2026-89748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Fix retry exhaustion in simple ring buffer reader swap simpleringbufferswapreaderpage starts with retry set to 8 and post-decrements it only after a...

CVE-2026-89747

A flaw was found in the Linux kernel's tracing component. A local attacker could exploit a use-after-free vulnerability, a type of memory corruption, by manipulating the tracepipe functionality. This occurs when the system attempts to read from memory that has already been released, leading to...

CVE-2026-89748

A flaw was found in the Linux kernel's tracing subsystem. An issue in the simpleringbufferswapreaderpage function, related to retry exhaustion during ring buffer reader page swaps, can lead to incorrect handling of successful or failed operations. This can result in corruption of the ring buffer,...

CVE-2026-89746

A flaw was found in the Linux kernel's tracing component. A local user can exploit a use-after-free vulnerability by registering multiple histogram triggers with the same name. This action causes the kernel to attempt to access freed memory, leading to a system crash and a Denial of Service DoS...

ptrace-vuln

ptrace-vuln 用于检查漏洞 CVE-2019-13272 这只是一个由LLM生成的示例概念验证，并未涵盖所有情况。 基本思路是，如果系统没有加固且 ptrace 未被移除，则应认为该漏洞适用。 编译并运行代码的步骤： root@kitploit: gcc poc.c -o test chmod +x test ./test 示例输出： root@kitploit: Syscall: 158 Syscall: 158 Syscall: 218 Syscall: 218 Syscall: 273 Syscall: 2 Syscall: 5 Syscall: 1 Hello,...

AZL-100491 CVE-2026-89749 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash passing ERRPTR to kthreadstop eventteststuff calls kthreadrun and unconditionally passes the returned taskstruct pointer to kthreadstop. kthreadrun returns an error pointer such as ERRPTR-ENOMEM when kthread...

CVE-2026-89748

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix retry exhaustion in simple ring buffer reader swap simpleringbufferswapreaderpage starts with retry set to 8 and post-decrements it only after a failed link replacement. On the final attempt, a successful replacement...