211 matches found
santa
Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...
RIPPL
RIPPL Manipulating PPL protected processes without using a driver This tool implements a userland exploit to manipulate Windows PPL protected processes. The technique was initially discussed by James Forshaw a.k.a. @tiraniddo and Clément Labro a.k.a. @itm4n in the following blogposts. Blog post...
RunAsWinTcb
RunAsWinTcb Overview RunAsWinTcb uses an userland exploit to run a DLL with a protection level of WinTcb-Light. Overview of the vulnerability and the capabilites of an exploit can be found here: https://tastypepperoni.medium.com/running-exploit-as-protected-process-ligh-from-userland-f4c7dfe63387...
BadExclusionsNWBO
BadExclusions Now With Better Opsec BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR. How it works? BadExclusionsNWBO copies and runs HookChecker.exe in all folders and subfolders of a given path. You need to have HookChecker.exe ...
userland-exec
Userland Exec Userland exec replaces the existing process image within the current address space with a new one. It mimics the behavior of the system call execve, but the process structures describing the process image remain unchanged. In other words, the process name reported by system utilitie...
UserLAnd
Bienvenido a UserLAnd La forma más fácil de ejecutar una distribución o aplicación Linux en Android. Características: Ejecuta distribuciones Linux completas o aplicaciones específicas sobre Android. Instala y desinstala como una aplicación normal. No se requiere root. ¿Tienes un informe de error ...
the-backdoor-factory
¡La nueva versión de BACKDOOR FACTORY está disponible! Obtén acceso aquí: https://github.com/sponsors/secretsquirrel ADVERTENCIA: Las Pull Requests SERÁN IGNORADAS Y CERRADAS. The Backdoor Factory BDF Solo para profesionales de la seguridad e investigadores. El objetivo de BDF es parchear binario...
pbscan
SUMMARY polarbearscan is an attempt to do faster and more efficient banner grabbing and port scanning. It combines two different ideas which hopefully will make it somewhat worthy of your attention and time. The first of these ideas is to use stateless SYN scanning using cryptographically protect...
ulexecve
Inicio Rápido Ejecuta binarios ELF Linux compilados de forma dinámica o estática sin nunca llamar a execve. root@kitploit: cat /bin/echo | ulexecve - hello hello Introducción Esta herramienta en Python se llama ulexecve y significa userland execve. Te ayuda a ejecutar binarios ELF arbitrarios en...
avml
AVML Linux용 휘발성 메모리 획득 요약 Linux용 휴대용 휘발성 메모리 획득 도구. AVML은 Rust로 작성된 X8664 사용자 영역userland 휘발성 메모리 획득 도구로, 정적 바이너리로 배포되도록 설계되었습니다. AVML은 대상 OS 배포판이나 커널을 사전에 알지 못해도 메모리를 획득할 수 있습니다. 대상 시스템에서의 컴파일이나 핑거프린팅이 필요하지 않습니다. 기능 Azure Blob Store 또는 HTTP PUT을 통해 캡처한 이미지를 외부 위치에 저장 Azure Blob Storage 업로드는 Azure...
PPLmedic
PPLmedic This tool implements a Userland exploit chain for injecting arbitrary code into a PPL with the signer type Windows and elevating to the signer type WinTcb. These techniques were originally discussed by James Forshaw a.k.a. @tiraniddo in his blog post Injecting Code into Windows Protected...
NTDLLReflection
NTDLLReflection Bypass Userland EDR hooks by Loading Reflective Ntdll in memory from a remote server based on Windows ReleaseID to avoid opening a handle to ntdll , and trigger exported APIs from the export table...
PPLdump
PPLdump ⚠️ 2022-07-24 - A partir de Windows 10 21H2 10.0.19044.1826 actualización de julio de 2022, el exploit implementado en PPLdump ya no funciona. Un parche en NTDLL ahora evita que los PPL carguen Known DLLs. Más información aquí. Esta herramienta implementa un exploit en espacio de usuario...
Freeze
ESTE REPOSITORIO HA SIDO ARCHIVADO Para ver la última versión de Freeze o enviar un problema, consulte https://github.com/Tylous/Freeze. Freeze Más Información Si desea obtener más información sobre las técnicas utilizadas en este marco, eche un vistazo a SourceZero Blog Descripción Freeze es una...
Freeze.rs
ESTE REPOSITORIO HA SIDO ARCHIVADO Para ver la última versión de Freeze.rs o enviar un problema, consulta https://github.com/Tylous/Freeze.rs. Freeze.rs Más Información Si quieres aprender más sobre las técnicas utilizadas en este framework, echa un vistazo al Blog de SourceZero y a la herramient...
wifit3 v0.0.5
wifit3 A standalone USB Wi-Fi auditor for Linux, Windows, and macOS. At least one of the supported USB adapters is required. Why? Cross-Platform: Runs identically on Linux, macOS, and Windows. Wireless Driver Heaven: Built-in wireless stack avoids kernel driver versioning hell and Windows' NDIS...
SUSE CVE-2026-53373
In the Linux kernel, the following vulnerability has been resolved: mm/vma: do not try to unmap a VMA if mmapprepare invoked from mmap The mmapprepare hook functionality includes the ability to invoke mmapprepare from the mmap hook of existing 'stacked' drivers, that is ones which are capable of...
CVE-2026-53373
In the Linux kernel, the following vulnerability has been resolved: mm/vma: do not try to unmap a VMA if mmapprepare invoked from mmap The mmapprepare hook functionality includes the ability to invoke mmapprepare from the mmap hook of existing 'stacked' drivers, that is ones which are capable of...
EUVD-2026-45446
In the Linux kernel, the following vulnerability has been resolved: mm/vma: do not try to unmap a VMA if mmapprepare invoked from mmap The mmapprepare hook functionality includes the ability to invoke mmapprepare from the mmap hook of existing 'stacked' drivers, that is ones which are capable of...
