94 matches found
qiling
Qiling's use case, blog and related work Qiling is an advanced binary emulation framework, with the following features: Emulate multi-platforms: Windows, macOS, Linux, Android, BSD, UEFI, DOS, MBR. Emulate multi-architectures: 8086, X86, X8664, ARM, ARM64, MIPS, RISC-V, PowerPC. Support multiple...
acheron
About Acheron is a library inspired by SysWhisper3/FreshyCalls/RecycledGate, with most of the functionality implemented in Go assembly. acheron package can be used to add indirect syscall capabilities to your Golang tradecraft, to bypass AV/EDRs that makes use of usermode hooks and instrumentatio...
efiguard-detected
efiguard-detect 最简单的方法检查 EfiGuard 是否干掉了您的 PatchGuard。 工作原理 efiguard 在运行时留下了一个 SetVariable 后门——我们只需从用户态戳它一下，要求读取 ntoskrnl 基址处的 2 个字节。如果返回 MZ，则说明后门还在，efiguard 已完成其工作，PatchGuard 已失效。 局限性 仅当用户选择了默认的 DSE 绕过方法（DSEDISABLESETVARIABLEHOOK）时才有效——而这是默认设置。如果选择了 DSEDISABLEATBOOT，该钩子会在 ExitBootServices...
hidden
Hidden 🇺🇦 Hidden は、リバースエンジニアリングおよびリサーチタスクのためのソリューションとして開発されました。これは、Windows マシン上の特定の環境（インストールされた RCE プログラム（例：procmon、wireshark）、VM インフラストラクチャ（例：VMware Tools）など）を隠すために使用される、ユーザーモードインターフェースを備えた Windows ドライバです。 Features レジストリキーと値を隠す ファイルとディレクトリを隠す プロセスを隠す（ 実験的、不安定な可能性があります ） 特定のプロセスを保護する...
CVE-2024-1086
CVE-2024-1086 仅供学习目的。 参考： https://pwning.tech/nftables/ https://github.com/Notselwyn/CVE-2024-1086 Kconfig： +CONFIGCONFIGFSFS=y +CONFIGSECURITYFS=y +CONFIGNFTABLES=y mnlcbrun: Operation not supported +CONFIGNETFILTERNETLINKGLUECT=y +CONFIGNETLINKDIAG=y +CONFIGNFTCT=y +CONFIGNFTABLESIPV4=y...
osed-scripts
osed-scripts 为 Offensive Security 的 Windows 用户模式漏洞利用开发课程（OSED）量身定制的工具集 目录 独立脚本 egghunter.py find-gadgets.py shellcoder.py install-mona.sh attach-process.ps1 WinDbg 脚本 find-ppr.py find-bad-chars.py search.py 独立脚本 安装： pip3 install keystone-engine numpy egghunter.py 需要 keystone-engine usage:...
CVE-2026-80564
In the Linux kernel, the following vulnerability has been resolved: gve: fix NULL dereference due to missing ptp adjfine Fix NULL dereference due to missing implementation of adjfine, which can be triggered from usermode as follows: sudo ./testptp -d /dev/ptp0 -f 0 551.943697 BUG: kernel NULL...
UBUNTU-CVE-2026-80564
In the Linux kernel, the following vulnerability has been resolved: gve: fix NULL dereference due to missing ptp adjfine Fix NULL dereference due to missing implementation of adjfine, which can be triggered from usermode as follows: sudo ./testptp -d /dev/ptp0 -f 0 551.943697 BUG: kernel NULL...
CVE-2026-80564 gve: fix NULL dereference due to missing ptp adjfine
In the Linux kernel, the following vulnerability has been resolved: gve: fix NULL dereference due to missing ptp adjfine Fix NULL dereference due to missing implementation of adjfine, which can be triggered from usermode as follows: sudo ./testptp -d /dev/ptp0 -f 0 551.943697 BUG: kernel NULL...
CVE-2026-80564
This Linux kernel vulnerability affects the gve (Google Virtual Ethernet) driver. The root cause is a missing implementation of the adjfine PTP operation , which leads to a NULL pointer dereference in ptp_clock_adjtime. The bug can be triggered from usermode via sudo ./testptp -d /dev/ptp0 -f 0, ...
CVE-2026-80564 gve: fix NULL dereference due to missing ptp adjfine
In the Linux kernel, the following vulnerability has been resolved: gve: fix NULL dereference due to missing ptp adjfine Fix NULL dereference due to missing implementation of adjfine, which can be triggered from usermode as follows: sudo ./testptp -d /dev/ptp0 -f 0 551.943697 BUG: kernel NULL...
Linux Distros Unpatched Vulnerability : CVE-2026-80564
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gve: fix NULL dereference due to missing ptp adjfine Fix NULL dereference due to missing implementation of adjfine, which can be triggered from usermode as...
PT-2026-82180
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the gve driver due to a missing implementation of the adjfine function. This issue can be triggered from usermode through the ptp clock adjtime...
CVE-2026-80564: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: gve: fix NULL dereference due to missing ptp adjfine Fix NULL dereference due to missing implementation of adjfine, which can be triggered from usermode as follows: sudo ./testptp -d /dev/ptp0 -f 0 551.943697 BUG: kernel NULL...
Linux-Usermode-Exploitation-101
Linux Usermode Exploitation 101 Introduction The aim of th...
EUVD-2025-35892
An issue was discovered in the NDIS Usermode IO driver RtkIOAC60.sys, version 6.0.5600.16348 allowing local authenticated attackers to send a crafted IOCTL request to the driver to cause a denial of service...
CVE-2025-60419
An issue was discovered in the NDIS Usermode IO driver RtkIOAC60.sys, version 6.0.5600.16348 allowing local authenticated attackers to send a crafted IOCTL request to the driver to cause a denial of service...
CVE-2025-60419: Uncontrolled Resource Consumption
An issue was discovered in the NDIS Usermode IO driver RtkIOAC60.sys, version 6.0.5600.16348 allowing local authenticated attackers to send a crafted IOCTL request to the driver to cause a denial of service...