Phantom-Evasion-Loader

SROP 기반 Cross-Memory Attach CMA 인젝션 직접 시스템 콜 사용 👻 Phantom-Evasion-Loader x64 Linux Phantom-Evasion-Loader는 현대 EDR/XDR 솔루션 및 FalcoeBPF와 같은 커널 수준 모니터의 탐지 표면을 최소화하기 위해 설계된 독립형 순수 x64 어셈블리 인젝션 엔진입니다. SROP 및 Zero-Copy Injection과 같은 고급 기술을 활용하여 페이로드를 머신 속의 유령처럼 전달합니다. 🧠 이 코드는 도대체 실제로 무엇을 하나요? 기존의 시끄러운...

linux_injector

linuxinjector x64 Linux向けの、ptraceを使わないシンプルな共有ライブラリインジェクタです。 使い方 linuxinjector mode 1. 通常の dlopen 2. memfd + dlopen（コンテナへの注入用） 3. 生のシェルコード pid 対象プロセスID。それに対するptrace権限が必要です（/proc/$pid/mem にアクセスするために必要）。ptraceは行われないため、他のプロセスが自由にptraceできます。 file モード1: 注入するモジュール。リモートプロセス内で dlopen されます。解決にはリモートの...

shopify-scripts: Denial of service (segfault) due to null pointer dereference in mrb_obj_instance_eval

Introduction ============ Provided PoC segfaults at mrbobjinstanceeval due to null pointer dereference. Proof of concept ================ Attached the poc. Crash report ============ ./sandbox eval.rb ./sandbox:20: BUG Segmentation fault at 0x00000000000003 ruby 2.3.1p112 2016-04-26 x8664-linux-gn...

Flash - PCRE Regex Compilation Zero-Length Assertion Arbitrary Bytecode Execution

Source: https://code.google.com/p/google-security-research/issues/detail?id=224&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id There’s an error in the PCRE engine version used in Flash that allows the execution of arbitrary PCRE bytecode, with potential for memory corrupti...

x64 Linux bind TCP port shellcode 81 bytes, 96 with password

x64 Linux bind TCP port shellcode 81 bytes, 96 with password. Shellcode exploit for linx86-64 platform / Author: Sean Dillon Copyright: c 2014 CAaNES, LLC. http://caanes.com Release Date: December 19, 2014 Description: x64 Linux null-free TCP bind port shellcode, optional 4 byte password Assemble...

x64 Linux reverse TCP connect 77 to 85 bytes, 90 to 98 with password

x64 Linux reverse TCP connect 77 to 85 bytes, 90 to 98 with password. Shellcode exploit for linx86-64 platform / Author: Sean Dillon Copyright: c 2014 CAaNES, LLC. http://caanes.com Release Date: December 19, 2014 Description: x64 Linux null-free reverse TCP shellcode, optional 4 byte password...

linux/x64 reverse TCP connect shellcode 85 bytes

x64 Linux reverse TCP connect shellcode 77 to 85 bytes, 90 to 98 with password / Author: Sean Dillon Copyright: c 2014 CAaNES, LLC. http://caanes.com Release Date: December 19, 2014 Description: x64 Linux null-free reverse TCP shellcode, optional 4 byte password Assembled Size: 77 - 85 bytes, 90 ...