57 matches found
wasmforge
WasmForge WasmForge kompiliert Go- und C-Programme zu WebAssembly und verpackt sie dann als einzelne native Binärdateien. Die resultierenden ausführbaren Dateien sandboxen den Gastcode in einer WASM-Laufzeitumgebung einem pro Build erstellten Fork von wazero. Innerhalb dieser Sandbox erhalten Gäs...
Ekko
Ekko Uma pequena técnica de ofuscação de sleep que usa a API Win32 CreateTimerQueueTimer. Prova de Conceito. Pode ser feita melhor. NOTA Esta implementação tem falhas conhecidas. Portanto, não recomendaria usá-la sem saber como funciona ou saber como identificar e corrigir essas falhas. TLDR: não...
thematrix
TheMatrix Questo progetto è stato creato per facilitare il processo di analisi dei malware. L'obiettivo è creare un binario attivatore il cui scopo è caricare un binario definito dall'utente e monitorare l'esecuzione utilizzando hook delle API Win32. I dati rilevanti vengono quindi salvati su...
C2-Hunter
C2-Hunter C2-Hunter ist ein Programm, das für Malware-Analysten entwickelt wurde, um Command-and-Control-C2-Datenverkehr von Schadsoftware in Echtzeit zu extrahieren. Das Programm verwendet einen einzigartigen Ansatz, indem es in win32-Verbindungs-APIs einhakt. Mit C2-Hunter können...
p-invoke.net
p-invoke.net Dieses Repository enthält die meisten P/Invoke-Definitionen von der größtenteils offline verfügbaren pinvoke.net und fügt für jede den Link zur Microsoft-Dokumentation hinzu. Das Gitbook ist verfügbar unter https://ricardojoserf.gitbook.io/pinvoke. Hinweise Ich habe dies gemacht, um...
charlotte
charlotte c++ vollständig unerkannter Shellcode-Launcher ; veröffentliche dies, um die Geburt meines Neugeborenen zu feiern Beschreibung 13/05/2021: 1. c++ Shellcode-Launcher, vollständig unerkannt 0/26 zum 13. Mai 2021. 2. dynamisches Aufrufen von Win32-API-Funktionen 3. XOR-Verschlüsselung von...
charlotte
charlotte c++ fully undetected shellcode launcher ; releasing this to celebrate the birth of my newborn description 13/05/2021: 1. c++ shellcode launcher, fully undetected 0/26 as of 13th May 2021. 2. dynamic invoking of win32 api functions 3. XOR encryption of shellcode and function names 4...
XeytanWin32-RAT
AVISO Este é um RAT cheio de bugs, incompleto, instável. Ainda é um aplicativo "work in progress". Introdução Projeto criado para matar um pouco do meu tempo livre, não é mantido ativamente. Há muitas coisas a melhorar/corrigir, e levará tempo para atingir estabilidade neste projeto...
staged-DLL-Injection-SMB-
staged-DLL-Injection Prova de conceito de injeção DLL em estágios construída em C usando APIs Win32 — desenvolvida em ambiente de laboratório isolado para estudo de certificação de red team CRTO. ⚠️ Aviso: Este projeto foi desenvolvido estritamente em ambiente de laboratório isolado para fins...
TokenPlayer
TokenPlayer विंडोज़ एक्सेस टोकन्स में हेरफेर और दुरुपयोग। TokenPlayer एक छोटा सा टूल है जो मैंने win32 api प्रोग्रामिंग सीखने और विंडोज़ के एक्सेस टोकन मॉडल को बेहतर ढंग से समझने के लिए बनाया है। विशेषताएँ: प्राथमिक टोकन चुराना और प्रतिरूपित impersonate करना। संरक्षित प्रक्रियाओं Protected...
D1rkSleep
D1rkSleep Verbesserte Version von EKKO durch @5pider, die nur Image-Sektionen verschlüsselt. Sleep-Obfuskationstechnik, die die Win32-API CreateTimerQueueTimer verwendet. Danksagungen: https://github.com/Cracked5pider/Ekko...
CVE-2024-4577-checker
CVE-2024-4577 Vulnerability Checker Der CVE-2024-4577 Vulnerability Checker ist ein Bash-Skript, das mehrere Domains auf die CVE-2024-4577-Schwachstelle in PHP-CGI überprüft. Dieses Tool ermöglicht es Sicherheitsforschern und Systemadministratoren, schnell zu beurteilen, ob ihre Systeme oder eine...
Exploit for OS Command Injection in Php
CVE-2024-4577 usage: CVE-2024-4577.py -h -v RHOST RPO...
PHP 8.3.x < 8.3.12 Multiple Vulnerabilities
The version of PHP installed on the remote host is prior to 8.3.12. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.3.12 advisory. - In PHP versions 8.1. before 8.1.30, 8.2. before 8.2.24, 8.3. before 8.3.12, when using a certain non- standard configurations ...
Exploit for OS Command Injection in Php
PHP CGI Argument Injection CVE-2024-4577 RCE 📜 Descripti...
CVE-2024-4577 Argument Injection in PHP-CGI
In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may...
CVE-2024-4577 Argument Injection in PHP-CGI
In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may...
CVE-2024-4577
In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may...
Microsoft Windows UTF-8 Buffer Overruns Exploit
When Microsoft released UTF-8 support for the -A interfaces of the Windows API, it appears to have introduced buffer overrun conditions. Hi @ll, almost 4 years ago, with Windows 10 1903, after more than a year beta-testing in insider previews, Microsoft finally released UTF-8 support for the -A...