Androl4b

Androl4b AndroL4b 是一款基于 ubuntu-mate 的安卓安全虚拟机，汇集了来自不同安全极客和研究者的最新框架、教程和实验室，用于逆向工程和恶意软件分析。 Androl4b v.3 有哪些新功能？ 工具已更新 新增了工具和实验室 升级到 Ubuntu mate 17.04 进行了一些清理 Mega 第一部分 Mega 第二部分 Google Drive 第一部分 Google Drive 第二部分 关注我 用户名： andro 密码： andro 模拟器 PIN： 1234 工具 Radare2 类 Unix 逆向工程框架和命令行工具 Frida 注入...

norimaci

Norimaci "Norimaci" is a simple and lightweight malware analysis sandbox for macOS. This tool was inspired by "Noriben". Norimaci uses the features of OpenBSM or Monitor.app to monitor macOS system activity instead of Sysinternals Process Monitor procmon. Norimaci consists of 3 Python scripts...

Pentest-Windows

矛·盾 武器库 v3.2 首个适配Mac M芯片的武器库 中文文档 | English README 作者博客 | 文档教程 | 安全导航 | 微信公众号导航 📖 项目概览 📝 系统简介 本环境旨在提供一个开箱即用的windows渗透测试环境； 本项目欢迎转载，转载时请注明原作者和原文链接:https://github.com/arch3rPro/Pentest-Windows 建议运行环境：【vmware：17.0 】 /【运行内存：8G】 /【虚拟机磁盘：100G】/【硬盘实际占用：30G左右】 系统账号：admin，密码：123456 登录后请及时修改密码!!!...

PowerShell-Pro-Obfuscator-Python

PowerShell Pro Obfuscator — Ofusca y virtualiza código PowerShell PowerShell Pro Obfuscator protege scripts .ps1 propietarios con renombrado, cifrado polimórfico de cadenas y enteros, aplanamiento de flujo de control, autómatas finitos FSA, un motor de VM, comprobaciones de integridad...

ESXiArgs-Recover

ESXiArgs-Recover ESXiArgs-Recover es una herramienta que permite a las organizaciones intentar recuperar máquinas virtuales afectadas por los ataques de ransomware ESXiArgs. CISA tiene conocimiento de que algunas organizaciones han informado haber logrado recuperar archivos sin pagar rescates. CI...

IoT-PT-v1

🛠️ IoT-PT OS v1 物联网渗透测试操作系统 - 版本 1 📦 什么是 IoT-PT OS v1？ IoT-PT OS v1 是一款专为物联网安全评估设计的渗透测试虚拟机。它预配置了针对固件分析、嵌入式系统攻击、无线破解等场景的工具、脚本和环境。 💾 下载 直接链接 ：下载 IoT-PT OSv1 校验和： MD5: d9c20057b14cfa3fb25f744813b828df SHA1: 8828d693dc6c809377bab40d2bc26f525685e287 📷 截图 🧰 系统信息与要求 组件| 最低要求 ---|--- 基础系统| Lubuntu 18.04...

ThreatPursuit-VM

/ || | / | \ | | \ / \ \ \ | | | Y | | \ / / | | || || || \ || |/ | \ | | \ / | | | \ \ | | | | /| | \ | | | || | | /|/ || / |/|||| || / MANDIANT 威胁情报虚拟机 版本 2020.1 [email protected] 由以下人员创建： 丹·肯尼迪 杰克·巴托 @day1player 布莱恩·斯坦西尔 @MalwareMechanic Nhan Huynh 前沿高级研究与专家团队 必要条件 Google Chrome 浏览器...

javascript-obfuscator

Ofuscador de JavaScript 🚀 Obfuscator.io con ofuscación de VM Obfuscator.io añade ofuscación de bytecode basada en VM a este paquete: tus funciones de JavaScript se compilan a bytecode personalizado que se ejecuta en una máquina virtual integrada. Cada compilación produce opcodes y estructura de V...

Lime-RAT

已过时。请归档而非删除 LimeRAT v0.1.9 Windows 远程管理工具 描述 适用于 Windows 机器的简单而强大的 RAT。该项目简单易懂，应能让您了解 .NET 恶意软件的一般知识及其行为方式。 主要功能 .NET 使用 Visual Basic .NET 编写，客户端依赖框架 2.0 或 4.0，服务端为 4.0 连接 使用 pastebin.com 作为 ip:port，取代 noip.com DNS，并支持多端口 插件 使用插件系统以减小 stub 体积并降低杀毒软件检测率 加密 服务端与客户端之间的通信使用 AES 加密 传播 感染 USB...

CVE-2026-100658

A flaw was found in Netty. An unbounded memory queue in the WebSocket server extension handler allows an unauthenticated remote attacker to cause a Denial of Service DoS. By sending pipelined HTTP requests faster than the server produces responses, an attacker can force the connection queue to gr...

CVE-2026-43499

CVE-2026-43499 ⚡ 简单用法 请仅在安全且经过授权的环境中使用此项目，例如： 本地虚拟机 Docker 容器 隔离的实验室环境 获得授权的渗透测试环境 示例搭建： git clone cd Project use python follow below Create a virtual environment python -m venv venv Activate the virtual environment macOS / Linux source venv/bin/activate Windows Git Bash / WSL source...

CVE-2026-93604

A flaw was found in vm2. Untrusted guest code can exploit this vulnerability when the crypto builtin is explicitly allowlisted for a NodeVM Node.js Virtual Machine. By calling the crypto.setFips function, an attacker can modify the FIPS Federal Information Processing Standards mode of the entire...

CVE-2026-66079

A flaw was found in RabbitMQ. An unauthenticated network attacker can exploit an issue in the AMQP 1.0 listener by sending a specially crafted 19-byte frame. This causes the system to attempt to build a list of approximately 4 billion empty elements, exhausting heap memory and terminating the...

CVE-2026-89425

A flaw was found in FasterXML jackson-core. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted, malformed token to the JsonFactory.createParserDataInput method. The UTF8DataInputJsonParser component, responsible for handling DataInput...

ROS-20260923-73-0012

The vulnerability of the kvmresetdirtygfn function in the virt/kvm/dirtyring.c module of the Kernel-based Virtual Machine KVM subsystem of the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise...

com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser

A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This...

rabbitmq-server: RabbitMQ: Denial of Service via AMQP 1.0 array32 parsing

A flaw was found in RabbitMQ. An unauthenticated network attacker can exploit an issue in the AMQP 1.0 listener by sending a specially crafted 19-byte frame. This causes the system to attempt to build a list of approximately 4 billion empty elements, exhausting heap memory and terminating the...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: igb: Initialize the mailbox message for VF reset When a MAC address is not assigned to the VF, that portion of the message sent to the VF is not set. However, memory is allocated from the stack, which means that information may b...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Do not retire an aborted MMIO instruction Returning an abort to the guest for an unsupported MMIO access is a documented feature of the KVM UAPI. However, it’s clear that this functionality has been tested limitedly, ...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Platform/x86: ISST: Fixed the KASAN report “slab-out-of-bounds” bug. Attaching an SST PCI device to a virtual machine causes the issue “BUG: KASAN: slab-out-of-bounds”. Kasan report: 19.411889...