static_asm

staticasm A header-only C++20 library for compile-time x86/x86-64 instruction encoding. This project is dual-licensed under the Boost Software License 1.0 and the MIT License. You may choose either license. Purpose Learning x86 assembly encoding in a practical and fun way Generating assembly...

vxlang-page

VxLang Contents Docs What is VxLang? Supported File Formats Preview Virtualization Preview Dual-Mode Preview Obfuscation Preview Code-Flattening Preview Tutorial Usage & Guide-Code Precautions How to get the full version Donate and Subscription Patreon Link Event 2026 June Event Extension-Codes a...

nocturne

nocturne Named after one of my favorite games, "nocturne" is a bin2bin x86-64 PE code virtualizer and binary rewriter. Features Native Call Bridge 30+ VM Handlers Built-in junk code obfuscation Thread-safe per-invocation VM state Usage To use the Nocturne virtualizer, copy and include...

drow

drow Description TL;DR drow is a command-line utility that is used to inject code and hook the entrypoint of ELF executables post-build. It takes unmodified ELF executables as input and exports a modified ELF contianing an embedded user-supplied payload that executes at runtime. Slightly more...

lfi

Lightweight Fault Isolation LFI Welcome to the top-level repository for the Lightweight Fault Isolation LFI project. What is LFI? LFI is a system for sandboxing native code. Like WebAssembly and Native Client, LFI isolates sandboxed code in-process i.e., in the same address space as a host...

CVE-2026-23111-PoC

CVE-2026-23111 — Linux Kernel nftables UAF → LPE A working local-privilege-escalation exploit for CVE-2026-23111 , a use-after-free in the Linux kernel nftables subsystem. Tested on linux-6.12.69 x86-64. Target requirements The exploit assumes a target kernel built with: Option| Value| Why...

monomorph

root@kitploit: ════════════════════════════════════╦═══ ╔═╦═╗ ╔═╗ ╔═╗ ╔═╗ ╔═╦═╗ ╔═╗ ╔══╔═╗ ╠═╗ ═╩ ╩ ╩═╚═╝═╩ ╩═╚═╝═╩ ╩ ╩═╚═╝═╩ ╠═╝═╩ ╩═ ════════════════════════════════╩═══════ By Retr0id ═══ MD5-Monomorphic Shellcode Packer ═══ USAGE: python3 monomorph.py inputfile outputfile payloadfile What doe...

xori

Xori - Marco de desensamblado personalizado Xori es una librería de desensamblado y análisis estático preparada para automatización que consume shellcode o binarios PE y proporciona datos de análisis de triage. Agradecimientos: Xori no existiría sin la inspiración e ideas de la comunidad de códig...

covirt

covirt An x86-64 code virtualizer for VM based obfuscation. Features Stack-based virtual machine architecture MBA, self-modifying code obfuscation Support for both PE and ELF binaries Code markers to define protected regions PE support only tested on binaries compiled via MinGW-w64 Getting starte...

exrop

Exrop Triton 기호 실행을 기반으로 한 x86-64 바이너리용 자동 ROP 체인 생성기입니다. 특징 레지스터를 상수나 다른 레지스터로 설정 rdi=0x41414141, rdi=rax 메모리에 쓰기 상수 및 레지스터 기반 주소/값 문자열/바이트를 메모리에 쓰기 혼합된 상수/레지스터/문자열 인수를 사용한 함수 호출 open"/etc/passwd", 0 시스템 콜 체인 Badchar 회피 Non-return 가젯 지원 jmp reg, call reg 커널 익스플로잇을 위한 JOP 체인 검색을 통한 스택 피봇팅 자동...

CVE-2026-100503 Ghidra through 12.1.4 Heap Use-After-Free in Decompiler

Ghidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's Funcdata::opInsertAfter function caused by stale INDIRECT effect-op references. Attackers can craft a malicious binary with a specific x86-64 sequence that triggers the vulnerability during decompilatio...

LdrLockLiberator

LdrLockLiberator Para cuando DLLMain es la única vía LdrLockLiberator es una colección de técnicas para escapar u omitir el Loader Lock mientras ejecutas tu código desde DllMain o desde cualquier otro lugar donde el bloqueo pueda estar presente. Se publicó junto con el artículo "Perfect DLL...

how-to-bypass-aslr-on-linux-x86_64

Rompiendo ASLR de 64 bits en Linux x86-64 En este artículo, hablaré sobre la aplicación de la técnica descrita por Samuel Groß en su Explotación remota de iPhone Parte 2: Aportando luz a la oscuridad -- un bypass remoto de ASLR, para evadir ASLR en Linux x8664. Para mostrarlo, voy a resolver un...

PPPoEject

PPPoEject CVE-2026-68121 Writeup !WARNING このPoCは、防御担当者、メンテナー、および認可されたセキュリティチームが、自身が所有する、または明示的にテストを許可されたシステム上で、パッチ、緩和策、検知、および露出を検証するためにのみ提供されています。 この資料の使用が合法で、認可され、管理され、隔離されたテスト環境で実施されることを保証する責任は、あなたにのみあります。 !WARNING このPoCは破壊的です。 稼働中のカーネルメモリを意図的に破壊します。...

CVE-2026-31431

Descripción: Cfail es mi implementación en C++ x86-64 Assembly de CVE-2026-31431 también conocido como Copyfail, sin ninguna dependencia, incluida libc. De hecho, se obtiene un ejecutable universal capaz de ejecutarse de forma independiente en cualquier distribución Linux x86-64, gracias a una...

CVE-2026-31431

CVE-2026-31431 CopyFail standard binary Get all new CVE alert on https://exploitroom.com root@kitploit: mail :: /Desktop/CVE-2026 » file exploit: ELF 64-bit LSB executable, x86-64, version 1 GNU/Linux, statically linked, BuildIDsha1=9454dbdde0ac2d1a8981c06db89f24a4753ec3b7, for GNU/Linux 3.2.0, n...

fnprint

fnprint matches functions in binaries by what they do , not by what their bytes or control-flow graphs look like. it runs each function in a tiny emulator with made-up inputs, records the side effects it produces, and hashes that behavior into a fingerprint. two functions that behave the same get...

ASM-Obfuscator

ASM-Obfuscator Advanced x86-64 assembly obfuscator. Description The Assembly Code Obfuscator is a powerful and versatile tool designed to enhance the security of your x86-64 assembly code. It shields your projects from reverse engineering and analysis by employing a wide range of obfuscation...

rootkit

Linux Rootkit 遊び半分で書かれた、悪意のないシンプルなLinuxカーネルルートキットです。 機能 このルートキットは以下のことができます: ユーザーランドのプロセスにroot権限を付与する PIDを指定してプロセスを隠す 指定したPIDのプロセスを再表示する 名前を指定してファイルやディレクトリを隠す 隠したファイルやディレクトリを再表示する 自身を隠す 自身を再表示する ユーザーによるアンロードから自身を保護する アンロード保護を無効にする 対応プラットフォーム このルートキットは、Ubuntu 10.04.4 LTSおよびUbuntu 16.04...

asm-copyfail

CVE-2026-31431 Copy Fail — Analysis and development in x86-64 Assembly Based on the source code published in Theori, we will do several exercises until we fully convert it to pure Assembly language without external libraries.python !/usr/bin/env python3 Archivo: copyfail.py import os as...