nocturne

nocturne Named after one of my favorite games, "nocturne" is a bin2bin x86-64 PE code virtualizer and binary rewriter. Features Native Call Bridge 30+ VM Handlers Built-in junk code obfuscation Thread-safe per-invocation VM state Usage To use the Nocturne virtualizer, copy and include...

asm-copyfail

CVE-2026-31431 Copy Fail — Analysis and development in x86-64 Assembly Based on the source code published in Theori, we will do several exercises until we fully convert it to pure Assembly language without external libraries.python !/usr/bin/env python3 Archivo: copyfail.py import os as...

static_asm

staticasm A header-only C++20 library for compile-time x86/x86-64 instruction encoding. This project is dual-licensed under the Boost Software License 1.0 and the MIT License. You may choose either license. Purpose Learning x86 assembly encoding in a practical and fun way Generating assembly...

vxlang-page

VxLang Contents Docs What is VxLang? Supported File Formats Preview Virtualization Preview Dual-Mode Preview Obfuscation Preview Code-Flattening Preview Tutorial Usage & Guide-Code Precautions How to get the full version Donate and Subscription Patreon Link Event 2026 June Event Extension-Codes a...

monomorph

root@kitploit: ════════════════════════════════════╦═══ ╔═╦═╗ ╔═╗ ╔═╗ ╔═╗ ╔═╦═╗ ╔═╗ ╔══╔═╗ ╠═╗ ═╩ ╩ ╩═╚═╝═╩ ╩═╚═╝═╩ ╩ ╩═╚═╝═╩ ╠═╝═╩ ╩═ ════════════════════════════════╩═══════ By Retr0id ═══ MD5-Monomorphic Shellcode Packer ═══ USAGE: python3 monomorph.py inputfile outputfile payloadfile What doe...

lfi

Lightweight Fault Isolation LFI Welcome to the top-level repository for the Lightweight Fault Isolation LFI project. What is LFI? LFI is a system for sandboxing native code. Like WebAssembly and Native Client, LFI isolates sandboxed code in-process i.e., in the same address space as a host...

covirt

covirt An x86-64 code virtualizer for VM based obfuscation. Features Stack-based virtual machine architecture MBA, self-modifying code obfuscation Support for both PE and ELF binaries Code markers to define protected regions PE support only tested on binaries compiled via MinGW-w64 Getting starte...

drow

drow Description TL;DR drow is a command-line utility that is used to inject code and hook the entrypoint of ELF executables post-build. It takes unmodified ELF executables as input and exports a modified ELF contianing an embedded user-supplied payload that executes at runtime. Slightly more...

exrop

Exrop x86-64 バイナリ向け自動ROPチェーン生成ツール。 Triton によるシンボリック実行を利用。 機能 レジスタを定数または他のレジスタに設定 rdi=0x41414141, rdi=rax メモリへの書き込み 定数およびレジスタベースのアドレス/値 メモリへの文字列/バイトの書き込み 定数/レジスタ/文字列引数を混在させた関数呼び出し open"/etc/passwd", 0 システムコールチェーン Badchar回避 非リターンガジェット対応 jmp reg, call reg カーネルエクスプロイトのためのJOPチェーン検索によるスタックピボット...

xori

Xori - 自定义反汇编框架 Xori 是一个面向自动化的反汇编和静态分析库，可处理 shellcode 或 PE 二进制文件，并提供初步分析数据。 致谢： Xori 的诞生离不开开源社区的启发与创意。我们深深感谢 Capstone 引擎 和 LLVM 项目 的工作。 支持的架构： i386 x86-64 文件格式 PE、PE+ 纯 Shellcode 当前功能 输出 JSON 格式的：1 反汇编结果、2 函数、3 导入表。 管理映像内存和栈内存。 两种模式： 轻模拟 - 旨在穷举所有路径（寄存器、栈、部分指令）。 全模拟 - 仅跟随代码路径（性能较慢）。 模拟 TEB 和 PEB 结...

PPPoEject

PPPoEject CVE-2026-68121 Writeup !WARNING 本 PoC 仅用于帮助防御者、维护者和经授权的安全团队验证其拥有或明确获授权测试的系统上的补丁、缓解措施、检测规则和暴露面。 您需自行确保对本材料的使用是合法、经授权、受控的，并在隔离的测试环境中进行。 !WARNING 本 PoC 具有破坏性。 它会故意破坏活动内核内存。 一次位置错误的覆写可能会破坏无关的内核内存，导致机器挂起/崩溃。 仅在一次性 VM/临时主机上运行。 该 PoC： 1. 编译内嵌的辅助程序，并通过 x86-64 prefetch/RDTSCP 计时侧信道定位随机化的内核代码基址 2...

LdrLockLiberator

LdrLockLiberator For when DLLMain is the only way LdrLockLiberator is a collection of techniques for escaping or otherwise forgoing Loader Lock while executing your code from DllMain or anywhere else the lock may be present. It was released in conjunction with the "Perfect DLL Hijacking" article...

how-to-bypass-aslr-on-linux-x86_64

在 Linux x86-64 上绕过 64 位 ASLR 在这篇文章中，我将讨论 Samuel Groß 在他的 Remote iPhone Exploitation Part 2: Bringing Light into the Darkness -- a Remote ASLR Bypass 中描述的技术在 Linux x8664 上绕过 ASLR 的应用。 为了展示这一点，我将解决来自 Buckeye CTF 的一个 pwnable 挑战，即 guessgod。 我会尽量让内容对初学者友好，如果你觉得自己已经足够自信，或者只想直接看漏洞利用，可以随意跳过任何部分。 0. 引言...

CVE-2026-31431

Description: Cfail is my implementation in C++ x86-64 Assembly of CVE-2026-31431 aka Copyfail, with no dependecy required at all, included libc. In fact, you obtain am universal executable able to run stand-alone on every Linux x86-64 distribution, thanks to a minimal implementation of the standa...

CVE-2026-90383

In the Linux kernel, the following vulnerability has been resolved: misc: sgi-gru: remove interrupt-context page-table walks The GRU TLB miss handler walks a process's page tables without holding page-table locks or a reference to the mapped page. It also uses a kernel page-table accessor on user...

CVE-2026-90383 misc: sgi-gru: remove interrupt-context page-table walks

In the Linux kernel, the following vulnerability has been resolved: misc: sgi-gru: remove interrupt-context page-table walks The GRU TLB miss handler walks a process's page tables without holding page-table locks or a reference to the mapped page. It also uses a kernel page-table accessor on user...

CVE-2026-90383

CVE-2026-90383 affects the Linux kernel's SGI GRU (General Register Unit) driver. The GRU TLB miss handler walks a process's page tables in interrupt context without holding page-table locks or a reference to the mapped page, and uses a kernel page-table accessor on user page tables, supporting o...

fnprint

fnprint matches functions in binaries by what they do , not by what their bytes or control-flow graphs look like. it runs each function in a tiny emulator with made-up inputs, records the side effects it produces, and hashes that behavior into a fingerprint. two functions that behave the same get...

CVE-2026-31431

CVE-2026-31431 Binario estándar de CopyFail Obtén todas las alertas de nuevos CVE en https://exploitroom.com root@kitploit: mail :: /Desktop/CVE-2026 » file exploit: ELF 64-bit LSB executable, x86-64, version 1 GNU/Linux, statically linked, BuildIDsha1=9454dbdde0ac2d1a8981c06db89f24a4753ec3b7, fo...

ASM-Obfuscator

ASM-Obfuscator Advanced x86-64 assembly obfuscator. Description The Assembly Code Obfuscator is a powerful and versatile tool designed to enhance the security of your x86-64 assembly code. It shields your projects from reverse engineering and analysis by employing a wide range of obfuscation...