211 matches found
pbscan
SUMMARY polarbearscan is an attempt to do faster and more efficient banner grabbing and port scanning. It combines two different ideas which hopefully will make it somewhat worthy of your attention and time. The first of these ideas is to use stateless SYN scanning using cryptographically protect...
santa
Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...
ulexecve
Quick Start Execute dynamic or statically compiled ELF Linux binaries without ever calling execve. root@kitploit: cat /bin/echo | ulexecve - hello hello Introduction This Python tool is called ulexecve and it stands for userland execve. It helps you execute arbitrary ELF binaries on Linux systems...
userland-exec
Userland Exec Userland exec reemplaza la imagen del proceso existente dentro del espacio de direcciones actual por una nueva. Imita el comportamiento de la llamada al sistema execve, pero las estructuras del proceso que describen la imagen del proceso permanecen sin cambios. En otras palabras, el...
BadExclusionsNWBO
BadExclusions Now With Better Opsec BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR. How it works? BadExclusionsNWBO copies and runs HookChecker.exe in all folders and subfolders of a given path. You need to have HookChecker.exe ...
the-backdoor-factory
¡La nueva versión de BACKDOOR FACTORY está disponible! Obtén acceso aquí: https://github.com/sponsors/secretsquirrel ADVERTENCIA: Las Pull Requests SERÁN IGNORADAS Y CERRADAS. The Backdoor Factory BDF Solo para profesionales de la seguridad e investigadores. El objetivo de BDF es parchear binario...
avml
AVML 为 Linux 获取易失性内存 概述 一个用于 Linux 的便携式易失性内存获取工具。 AVML 是一款用 Rust 编写的 X8664 用户态易失性内存获取工具，旨在以静态二进制形式部署。AVML 无需预先了解目标操作系统的发行版或内核即可获取内存。无需在目标上进行编译或指纹识别。 功能特性 通过 Azure Blob Store 或 HTTP PUT 将捕获的镜像保存到外部位置 Azure Blob Storage 上传会通过 Azure SDK 的默认指数退避策略重试瞬时故障（8 次尝试，总耗时上限为一分钟）。 使用 Snappy 进行可选的分页级压缩。 使用 LiME...
RIPPL
RIPPL Manipulando procesos protegidos por PPL sin usar un controlador Esta herramienta implementa un exploit de userland para manipular procesos protegidos por PPL de Windows. La técnica fue discutida inicialmente por James Forshaw también conocido como @tiraniddo y Clément Labro también conocido...
RunAsWinTcb
RunAsWinTcb Resumen RunAsWinTcb utiliza un exploit de espacio de usuario para ejecutar una DLL con un nivel de protección de WinTcb-Light. Puede encontrar una descripción general de la vulnerabilidad y las capacidades de un exploit aquí:...
UserLAnd
Welcome to UserLAnd The easiest way to run a Linux distribution or application on Android. Features: Run full linux distros or specific applications on top of Android. Install and uninstall like a regular app. No root required. Have a bug report or a feature request? You can see our templates by...
PPLmedic
PPLmedic Esta herramienta implementa una cadena de exploits en modo usuario para inyectar código arbitrario en un PPL con el tipo de firmante Windows y elevarlo al tipo de firmante WinTcb. Estas técnicas fueron discutidas originalmente por James Forshaw también conocido como @tiraniddo en su...
NTDLLReflection
NTDLLReflection Evita los hooks de EDR en Userland cargando un Ntdll reflectivo en memoria desde un servidor remoto basado en el ReleaseID de Windows para evitar abrir un manejador de ntdll, y activar las APIs exportadas desde la tabla de exportaciones...
PPLdump
PPLdump ⚠️ 2022-07-24 - A partir de Windows 10 21H2 10.0.19044.1826 actualización de julio de 2022, el exploit implementado en PPLdump ya no funciona. Un parche en NTDLL ahora evita que los PPL carguen Known DLLs. Más información aquí. Esta herramienta implementa un exploit en espacio de usuario...
Freeze
THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of Freeze or to submit an issue, reference https://github.com/Tylous/Freeze. Freeze More Information If you want to learn more about the techniques utilized in this framework, please take a look at SourceZero Blog Description Freeze is ...
Freeze.rs
THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of Freeze.rs or to submit an issue, reference https://github.com/Tylous/Freeze.rs. Freeze.rs More Information If you want to learn more about the techniques utilized in this framework, please take a look at SourceZero Blog and the...
wifit3 v0.0.5
wifit3 A standalone USB Wi-Fi auditor for Linux, Windows, and macOS. At least one of the supported USB adapters is required. Why? Cross-Platform: Runs identically on Linux, macOS, and Windows. Wireless Driver Heaven: Built-in wireless stack avoids kernel driver versioning hell and Windows' NDIS...
SUSE CVE-2026-53373
In the Linux kernel, the following vulnerability has been resolved: mm/vma: do not try to unmap a VMA if mmapprepare invoked from mmap The mmapprepare hook functionality includes the ability to invoke mmapprepare from the mmap hook of existing 'stacked' drivers, that is ones which are capable of...
CVE-2026-53373
In the Linux kernel, the following vulnerability has been resolved: mm/vma: do not try to unmap a VMA if mmapprepare invoked from mmap The mmapprepare hook functionality includes the ability to invoke mmapprepare from the mmap hook of existing 'stacked' drivers, that is ones which are capable of...
EUVD-2026-45446
In the Linux kernel, the following vulnerability has been resolved: mm/vma: do not try to unmap a VMA if mmapprepare invoked from mmap The mmapprepare hook functionality includes the ability to invoke mmapprepare from the mmap hook of existing 'stacked' drivers, that is ones which are capable of...
