p-gen

...

EvilClippy

This tool was released during our BlackHat Asia talk March 28, 2019. A video recording of this talk is available at https://www.youtube.com/watch?v=9ULzZA70Dzg. Evil Clippy A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code via P-Code and...

p-invoke.net

p-invoke.net 이 저장소는 대부분 오프라인 상태인 pinvoke.net의 P/Invoke 정의 대부분을 포함하며, 각 정의에 Microsoft 문서 링크를 추가했습니다. Gitbook은 https://ricardojoserf.gitbook.io/pinvoke에서 확인할 수 있습니다. 참고 저는 pinvoke.net을 자주 사용했기 때문에 몇 가지 정의를 빠르게 확인하기 위해 이것을 만들었지만, CsWin32와 같은 더 전문적인 솔루션이 있습니다. 웹사이트에는 거의 2500개의 파일이 있으며, 이는 Gitbook의...

EUVD-2026-87373

Ghidra versions through 12.1.4 contain a stack-based out-of-bounds write vulnerability in the decompiler's leftshift128 function when processing negative shift amounts from p-code. Attackers can craft malicious binaries with specific instruction sequences that trigger the overflow when decompiled...

CVE-2026-100504

Ghidra versions through 12.1.4 contain a stack-based out-of-bounds write vulnerability in the decompiler's leftshift128 function when processing negative shift amounts from p-code. Attackers can craft malicious binaries with specific instruction sequences that trigger the overflow when decompiled...

CVE-2026-100504 Ghidra through 12.1.4 Stack-based Buffer Overflow via leftshift128

Ghidra versions through 12.1.4 contain a stack-based out-of-bounds write vulnerability in the decompiler's leftshift128 function when processing negative shift amounts from p-code. Attackers can craft malicious binaries with specific instruction sequences that trigger the overflow when decompiled...

hakuin

Hakuin is a Blind SQL Injection BSQLI optimization and automation framework written in Python 3. It abstracts away the extraction logic and allows users to easily and efficiently dump databases from vulnerable web applications. To speed up the process, Hakuin utilizes a variety of optimization...

koppeling-p

koppeling-p 適応型DLLハイジャック / 動的エクスポートフォワーディング - EAT保持 概要 このプロジェクトは、Nick Landers（@monoxgas）による素晴らしいプロジェクトの、限定されたPythonのみの拡張版です。元のプロジェクトはこちらから入手できます。 相違点 オリジナルプロジェクトとの唯一の違いは、koppeling-p（pはpreserveの略）が、クローン作成中に対象DLLのエクスポートアドレステーブルを保持することを目的としている点です。 動機...

Get-PDInvokeImports

Get-PDInvokeImports 설명: Get-PDInvokeImports는 어셈블리에서 P/Invoke, Dynamic P/Invoke 및 D/Invoke 사용을 자동으로 감지할 수 있는 도구PowerShell 모듈입니다. 참조된 모든 위치를 표시하고 DnSpyBookmarks.xml로 내보냅니다. 이 PS 모듈은 .NET 어셈블리 리버싱 중에 어셈블리에서 사용되는 관리되지 않는 API 함수 호출을 빠르게 식별하는 데 유용하고 도움이 될 수 있습니다. 때때로 악성 코드 어셈블리는 정크 코드로 가득 차 있으며 주요 기능은...

ghostrings

Ghostrings P-Code 解析を使用して Go バイナリの文字列定義を復元するスクリプト群です。 x86、x86-64、ARM、ARM64 でテストされています。 スクリプト Golang これらはスクリプトマネージャーの Golang カテゴリにあります。 GoDynamicStrings.java P-Code を解析して、スタック上に作成された文字列構造を見つけます。低レベルの "register" スタイルの解析を使用します。 GoFuncCallStrings.java P-Code...

CVE-2021-25461

CVE-2021-25461 EuroS&P 2022 で採択された SAUSAGE Security Analysis of Unix domain Socket usAGE in Android 論文のために発見された CVE の Proof of Concept を格納したリポジトリです。 私はこの論文を、脆弱性を発見し Proof of Concept を作成した Mounir Elgharabawy と共同で執筆しました。この CVE に関する彼のリポジトリはこちらで確認できます。 すべての詳細は、このリポジトリでホストされている .sh ファイルで確認できます。...

CVE-2026-97505

In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add CAPSYSADMIN check to resourceresizestore Currently, the resourceresizestore allows writing to the resourceNresize sysfs attribute to change a BAR's size without checking for capabilities, currently relying only on...

CVE-2026-97501

In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: paris: bypass pinctrl GPIO layer in set GPIO direction pinctrlgpiodirectioninput / pinctrlgpiodirectionoutput take the pinctrl mutex. This causes a gpiochip operations to need to sleep. Worse yet, the .cansleep...

CVE-2026-97473

In the Linux kernel, the following vulnerability has been resolved: powercap: intelrapl: Fix memory leak in rapladdpackagecpuslocked When topologyphysicalpackageid/topologylogicaldieid returns a negative value, rapladdpackagecpuslocked returns ERRPTR-EINVAL directly without freeing the raplpackag...

CVE-2026-97443

In the Linux kernel, the following vulnerability has been resolved: perf/ftrace: Fix WARNING in unregisterftracefunction perfftracefunctionunregister unconditionally calls unregisterftracefunction without checking whether the ftraceops was ever successfully registered. This triggers a WARNON in...

CVE-2026-97412

In the Linux kernel, the following vulnerability has been resolved: pdscore: quiesce DMA before freeing resources pdscteardown frees DMA buffers but does not disable bus mastering, leaving the device able to perform DMA after the buffers are freed. This can lead to use-after-free if the device...

CVE-2026-93822

In the Linux kernel, the following vulnerability has been resolved: PCI: iproc: Protect root bus removal with rescan lock Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may lead ...

CVE-2026-93821

In the Linux kernel, the following vulnerability has been resolved: PCI: altera: Protect root bus removal with rescan lock Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may lead...

CVE-2026-93820

In the Linux kernel, the following vulnerability has been resolved: PCI: rockchip: Protect root bus removal with rescan lock Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may le...

CVE-2026-93818

In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Protect root bus removal with rescan lock Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may lead t...