0x88
کانال بسته
https://github.com/DarkSec7 | Malware developer | reverse engineering | web hacking | coding | Linux | Poc #~
نمایش بیشتر976
مشترکین
-324 ساعت
-77 روز
-1730 روز
در حال بارگذاری داده‌ها
کانال‌های مشابه
ابر برچسب‌ها
اشارات ورودی و خروجی
---
---
---
---
---
---
جذب مشترکین
اکتبر '26اکتبر '26
اکتبر '26
+1
در 0 کانال‌ها
سپتامبر '260
در 0 کانال‌ها
Get PRO
اوت '26
+9
در 0 کانال‌ها
Get PRO
ژوئیه '26
+25
در 0 کانال‌ها
Get PRO
ژوئن '260
در 0 کانال‌ها
Get PRO
مه '26
+3
در 0 کانال‌ها
Get PRO
آوریل '26
+11
در 0 کانال‌ها
Get PRO
مارس '26
+16
در 0 کانال‌ها
Get PRO
فوریه '26
+54
در 0 کانال‌ها
Get PRO
ژانویه '26
+35
در 1 کانال‌ها
Get PRO
دسامبر '25
+23
در 0 کانال‌ها
Get PRO
نوامبر '25
+35
در 0 کانال‌ها
Get PRO
اکتبر '25
+33
در 0 کانال‌ها
Get PRO
سپتامبر '25
+33
در 0 کانال‌ها
Get PRO
اوت '25
+72
در 0 کانال‌ها
Get PRO
ژوئیه '25
+104
در 1 کانال‌ها
Get PRO
ژوئن '25
+131
در 0 کانال‌ها
Get PRO
مه '25
+125
در 1 کانال‌ها
Get PRO
آوریل '25
+61
در 0 کانال‌ها
Get PRO
مارس '25
+189
در 0 کانال‌ها
Get PRO
فوریه '25
+50
در 0 کانال‌ها
Get PRO
ژانویه '25
+116
در 0 کانال‌ها
Get PRO
دسامبر '24
+80
در 0 کانال‌ها
Get PRO
نوامبر '24
+8
در 0 کانال‌ها
Get PRO
اکتبر '24
+294
در 0 کانال‌ها
| تاریخ | رشد مشترکین | اشارات | کانال‌ها | |
| 29 اکتبر | 0 | |||
| 28 اکتبر | 0 | |||
| 27 اکتبر | 0 | |||
| 26 اکتبر | 0 | |||
| 25 اکتبر | 0 | |||
| 24 اکتبر | 0 | |||
| 23 اکتبر | 0 | |||
| 22 اکتبر | 0 | |||
| 21 اکتبر | 0 | |||
| 20 اکتبر | +1 | |||
| 19 اکتبر | 0 | |||
| 18 اکتبر | 0 | |||
| 17 اکتبر | 0 | |||
| 16 اکتبر | 0 | |||
| 15 اکتبر | 0 | |||
| 14 اکتبر | 0 | |||
| 13 اکتبر | 0 | |||
| 12 اکتبر | 0 | |||
| 11 اکتبر | 0 | |||
| 10 اکتبر | 0 | |||
| 09 اکتبر | 0 | |||
| 08 اکتبر | 0 | |||
| 07 اکتبر | 0 | |||
| 06 اکتبر | 0 | |||
| 05 اکتبر | 0 | |||
| 04 اکتبر | 0 | |||
| 03 اکتبر | 0 | |||
| 02 اکتبر | 0 | |||
| 01 اکتبر | 0 |
پست‌های کانال
https://github.com/cosmonic-labs/demo-zip-rce-sandbox
Improper Validation in Zip Library for Rust Affects File Writing
The Zip Library for Rust, specifically version 9.0.4, has a vulnerability where it improperly reconciles filenames in Central Directory File Header with those in Local File Header during file extraction. This can lead to a scenario where an attacker crafts a ZIP archive
| 2 | CVE-2026-98260 to gain temporary root on certain phones. Its README describes a bundled native kernel exploit, device-specific kernel offsets, and Shizuku/KernelSU integration. It’s a privilege-escalation tool, not a normal security scanner
https://github.com/Again1996-bit/CVE-2026-98260-GhostKey | 83 |
| 3 | https://www.imperva.com/blog/node2shell-from-brotli-data-to-remote-code-execution/
Node2shell ? | 226 |
| 4 | https://github.com/yetDevs/php2shell-triage | 249 |
| 5 |  https://www.zerosalarium.com/2026/09/edr-evasion-process-injection-without-WriteProcessMemory.html?m=1
The problem is that EDR monitors these interfaces through hooks in user mode and calls in the kernel, so the researcher developed a new technique that completely bypasses these two interfaces
The new mechanism
When you type commands in a terminal window for a program like nslookup.exe, this data is stored in the program's memory itself through a named pipe specifically for standard input (hStdInput)
Creating a child process (such as nslookup.exe or netsh.exe) and obtaining its input pipe handle.
Writing malicious code by calling WriteFile on the pipe – the bytes are transferred to the target process's memory without ever calling WriteProcessMemory
Locating the code A unique byte sequence (marker) is added at the beginning of the payload to facilitate its search within the target process's memory
This is the best | 426 |
| 6 |  what ❕
Do you think this could happen?
What problems arise from this? I think it's about taking more than necessary. ❗️
Share this post | 260 |
| 7 |  بدون متن... | 90 |
| 8 | VLC 2026 — Two New Memory-Corruption Vulnerabilities
CVE-2026-56711 — PNG Integer Overflow → Heap Out-of-Bounds Write
Affected 3.0.0 – 3.0.23
Type Integer Overflow / Heap
Out-of-Bounds Write
CWE CWE-190 + CWE-787
CVSS 3.1 8.8 HIGH
CVSS 4.0 8.6 HIGH
Trigger Malicious PNG
User interaction Required
The vulnerability was published on September 9, 2026.
The interesting part is that the bug is not simply "PNG parsing is broken."
The problem occurs when VLC calculates how much memory is required to store an image.
Conceptually, VLC needs something like:
required_memory =
bytes_per_line × number_of_lines
For example:
pitch = 4000 bytes
lines = 3000
4000 × 3000
= 12,000,000 bytes
Everything is normal.
The problem appears when attacker-controlled image dimensions become extremely large.
The Integer Overflow
The relevant VLC code uses integer values for parts of the picture structure.
The vulnerable calculation is essentially:
i_bytes += p->i_pitch * p->i_lines;
The important detail is that the multiplication can happen using 32-bit integer arithmetic.
A simplified example
2,000,000,000
×
2
=
4,000,000,000
But a signed 32-bit integer cannot represent that value normally.
The result can wrap around:
4,000,000,000
↓
32-bit integer overflow
↓
negative/small wrapped value
The allocation logic can therefore believe that it needs a relatively small amount of memory when the decoder later works with the much larger dimensions | 88 |
| 9 | https://github.com/fkie-cad/awesome-embedded-and-iot-security
Embedded / IoT
│
├── Firmware
│ ├── Extraction
│ ├── Analysis
│ ├── Emulation
│ └── Fuzzing
│
├── Hardware
│ ├── JTAG
│ ├── UART
│ ├── SPI
│ └── I²C
│
├── Wireless
│ ├── BLE
│ ├── Zigbee
│ ├── RFID/NFC
│ └── SDR
│
├── Research
├── Books
├── Case Studies
└── Training | 374 |
| 10 | Your LG TV is eavesdropping on you. It transcribes what you say, copies what is on your screen, and scans every device on your network, and researchers say the collection keeps running after you disconnect it, uploading the moment it reconnect to the internet.
Researchers advise disconnecting LG TVs from any network. | 202 |
| 11 | Kaspersky has become a threat ;) | 454 |
| 12 | Kaspersky Antivirus for Endpoint Zero-Day Privilege Escalation Vulnerability
https://github.com/MSNightmare/HardBreacher | 503 |
| 13 | A challenge was created by the Bang1338
A unique experience
https://crackmes.one/crackme/6a891ed9cab6678aefe9da84 | 582 |
| 14 | Damn
https://youtu.be/PNWABi6Dcl8?si=mW_jQS8JBXLUnWJX | 492 |
| 15 | https://www.pizzint.watch/ | 471 |
| 16 | Yes | 1 |
| 17 |  An office that orders a lot of pizza
Those who know | 514 |
| 18 | Attempts to cause rights elevation w GhostLock via TCP Zerocopy
https://github.com/Meowkis/tcp-zerocopy-sm | 344 |
| 19 | Flutter SSL Pinning Bypass — Android & iOS
https://github.com/f3rb123/kill_flutter | 416 |
| 20 | Non-destructive detection for WordPress core exposure to wp2shell (CVE-2026-63030 / CVE-2026-60137). Fingerprints the core version and confirms the REST /batch/v1 route is reachable; sends no exploit payload.
Link 🔗 | 499 |
