metame

metame metame is a simple metamorphic code engine for arbitrary executables. From Wikipedia: Metamorphic code is code that when run outputs a logically equivalent version of its own code under some interpretation. This is used by computer viruses to avoid the pattern recognition of anti-virus...

CVE-2026-53359

🚨 CVE-2026-53359 — Januscape Linux KVM Shadow Paging Use-After-Free Guest-to-Host Escape Januscape is a Linux Kernel KVM vulnerability caused by a Use-After-Free UAF condition in the x86 Shadow MMU. Under vulnerable configurations, a malicious guest can corrupt host memory, leading to host crashe...

makin

I create makin to make initial malware assessment little bit easier for me, I think it's useful for others as well, It helps to reveal a debugger detection techniques used by a sample. Any feedback is greatly appreciated: @qazqaz How does it work? makin opens a sample as a debuggee and injects...

CVE-2019-5786

CVE-2019-5786 Chrome 72.0.3626.119 estable Exploit FileReader UaF para Windows 7 x86. Este exploit utiliza el aislamiento de sitios para forzar la vulnerabilidad. iframe.html es el script contenedor que carga el exploit, contenido en los otros archivos, repetidamente en un iframe. Aloja iframe.ht...

moneta

/ \ / | / \ / \ / \ / / \ \ / Y | \ /| | / | //| | / | / / / / / Moneta v1.0 | Forrest Orr | 2020 REQUIRED -m |region|referenced|ioc -p |PID OPTIONAL -v detail|debug|surface -d --option from-base|statistics --filter unsigned-module|clr-prvx|clr-heap|metadata-modules --address --region-size -m...

cve-2016-7255_x86_x64

cve-2016-7255 x86, x64 porting CVE-2016-7255 to x86 for educational purposes. reference code https://github.com/rlarabee/exploits/tree/master/cve-2016-7255...

drow

drow Description TL;DR drow is a command-line utility that is used to inject code and hook the entrypoint of ELF executables post-build. It takes unmodified ELF executables as input and exports a modified ELF contianing an embedded user-supplied payload that executes at runtime. Slightly more...

CVE-2017-8464-EXP

CVE-2017-8464-EXP Compatibilidad con x86 y x64 Solo para pruebas Archivo Lnk de: https://github.com/rapid7/metasploit-framework/pull/8767 Gracias a ykoster Pequeño cambio, reemplaza el archivo dll, corrige el error de bloqueo de explorer.exe. ykoster ha corregido este error POC: x86: x64: Si pued...

v0ltpwn

V0LTpwn V0LTpwn CVE-2019-11157 es un ataque de fallo controlado por software en procesadores x86. Es el primer ataque que corrompe la integridad de los enclaves SGX. Descripción Todos los procesadores Intel recientes presentan una interfaz de software para controlar los voltajes del núcleo sin...

cve-2014-0038

Local root exploit for CVE-2014-0038 Bug: The X86X32 recvmmsg syscall does not properly sanitize the timeout pointer passed from userspace. Exploit primitive: Pass a pointer to a kernel address as timeout for recvmmsg, if the original byte at that address is known it can be overwritten with known...

x86-cpp-reversing-skill

x86-cpp-reversing A Claude Code skill for reverse-engineering 32-bit little-endian x86 IA-32 binaries and disassembly compiled from C++. Recovers class layouts, vtables, virtual dispatch, and RTTI/inheritance hierarchies from ELF or PE binaries, and covers the workflows that come up once you have...

grap

grap: define and match graph patterns within binaries https://github.com/QuoSecGmbH/grap grap takes patterns and binary files, uses a Casptone-based disassembler to obtain the control flow graphs from the binaries, then matches the patterns against them. Patterns are user-defined graphs with...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: x86/efistub: Calls boot services in mixed mode on the firmware’s stack Normally, the EFI stub calls into EFI boot services using the stack that was active when the stub was entered. According to the UEFI specification, this stack...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: using arrayindexnospec with indices that come from the guest min and destid are guest-controlled indices. Using arrayindexnospec after the bounds checks helps to mitigate speculative execution side-channels by clamping...

CVE-2019-0708

CVE-2019-0708 PoC Shellcode only tested on x86 versions of Windows thus far. Be responsible and only use this with good intentions...

PinTheft-asm

pintheft-asm Reescribí PinTheft-go en asm x86-64 puro porque, ¿por qué no? root@kitploit: make ./pintheft Lanza un shell root. El comando de restauración se imprime al salir. Para más detalles → PoC original...

win-exec-calc-shellcode

win-exec-calc-shellcode Shellcode pequeño y libre de NUL que ejecuta calc.exe. Se ejecuta en versiones x86 y x64 de Windows 5.0-6.3 2000, XP, 2003, 2008, 7, 8, 8.1, todos los service packs. Tamaños build 306...

Linux_X86_Reverse_TCP_Alphanumeric_Staged_Shellcode_Execve-bin-bash

Este repositorio no tiene un README...

CVE-2014-3153

Towelroot para Ubuntu x86 Este exploit ha sido probado en ubuntu 14.04 x86 y ubuntu 12.04.2 x86 con éxito. Aprendiendo CVE2014-3153 y towelroot. Kernel hasta la versión 3.14, usa rbtree para almacenar rtwaiter no plistnode, ¡más complejo! IA tiene threadinfo diferente a ARM!! Fuente de...

CVE-2017-8464-EXP

CVE-2017-8464-EXP 支持 x86 和 x64 仅供测试 Lnk文件来自： https://github.com/rapid7/metasploit-framework/pull/8767 感谢 ykoster 微小修改，替换了DLL文件，修复了资源管理器explorer.exe崩溃的bug。ykoster已经修复了这个bug POC： x86: x64: 如果你能确定U盘，一个LNK文件就足够了，比如这样： 更多详情：...