17 matches found
SharpHook
SharpHook SharpHook ist inspiriert vom SharpRDPThief-Projekt. Es verwendet verschiedene API-Hooks, um die gewünschten Anmeldeinformationen zu erhalten. Im Hintergrund nutzt es das EasyHook-Projekt. Sobald der gewünschte Prozess läuft, injiziert SharpHook automatisch seine Abhängigkeiten in den...
Cmulator
Cmulator - Skriptfähiger x86 RE Sandbox-Emulator v0.3 Beta Cmulator ist ein x86 - x64 skriptfähiger Reverse-Engineering-Sandbox-Emulator für Shellcode und PE-Binärdateien, basierend auf Unicorn & Capstone Engine & Javascript. 💬 Dies ist die letzte unterstützte Pascal-Version und die neue Codebasi...
cuckoo-modified
Esta é uma versão fortemente modificada do Cuckoo Sandbox fornecida sob a GPL. Ela oferece várias vantagens sobre o Cuckoo original: Nomes de arquivos e registro totalmente normalizados Análise de 64 bits Tratamento do redirecionamento do sistema de arquivos WoW64 Muitos hooks adicionais de API...
thematrix
TheMatrix Dieses Projekt wurde erstellt, um die Malware-Analyse zu erleichtern. Ziel ist es, eine Aktivator-Binärdatei zu erstellen, die eine benutzerdefinierte Binärdatei lädt und die Ausführung mithilfe von Win32-API-Hooks überwacht. Relevante Daten werden dann auf der Festplatte gespeichert. D...
ghost
Ghost Ghost ist ein Tool zur Erkennung von Prozessinjektionen, geschrieben in Rust. Es überwacht laufende Prozesse und versucht verdächtige Aktivitäten wie Code-Injektion, Speichermanipulation und andere Tricks zu erkennen, die Malware zur Tarnung verwendet. Was es tut Die Grundidee ist einfach:...
C2-Hunter
C2-Hunter C2-Hunter ist ein Programm, das für Malware-Analysten entwickelt wurde, um Command-and-Control-C2-Datenverkehr von Schadsoftware in Echtzeit zu extrahieren. Das Programm verwendet einen einzigartigen Ansatz, indem es in win32-Verbindungs-APIs einhakt. Mit C2-Hunter können...
Inspeckage
Inspeckage - Inspetor de Pacotes Android Inspeckage é uma ferramenta desenvolvida para oferecer análise dinâmica de aplicativos Android. Ao aplicar hooks em funções da API Android, o Inspeckage ajudará você a entender o que um aplicativo Android está fazendo em tempo de execução...
PyHook
PyHook PyHook ist die Python-Implementierung meines SharpHook-Projekts. Es verwendet verschiedene API-Hooks, um die gewünschten Anmeldeinformationen zu erhalten. PyHook verwendet frida, um seine Abhängigkeiten in den Zielprozess zu injizieren. Unterstützte Prozesse...
CVE-2019-17271
vBulletin 5.5.4 allows SQL Injection via the ajax/api/hook/getHookList or ajax/api/widget/getWidgetList where parameter...
Site-wide CSRF (Bypass Strict Cookie) leave to Website Takeover
I reported this vulnerability once a long time ago, but you still haven't fixed it. I report back to remind you need to fix it. Description At the api/hooks.unfurl, when sending a post request containing a param challenge, the server will return the value of that param, which inadvertently leave ...
Malicious code in @instant-api-hooks/assethub-campaigns (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3cd0ffbe2349da7aea9f042d99b1fc38ec727b62ded2bee52f82d613acfc9f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SharpHook - Tool Tath Uses Various API Hooks In Order To Give Us The Desired Credentials
SharpHook is inspired by the SharpRDPThief project, It uses various API hooks in order to give us the desired credentials. In the background it uses the EasyHook project, Once the desired process is up and running SharpHook will automatically inject its dependencies into the target process and...
Using Speakeasy Emulation Framework Programmatically to Unpack Malware
Andrew Davis recently announced the public release of his new Windows emulation framework named Speakeasy. While the introductory blog post focused on using Speakeasy as an automated malware sandbox of sorts, this entry will highlight another powerful use of the framework: automated malware...
Inspeckage - (Android Package Inspector) Dynamic Analysis With Api Hooks, Start Unexported Activities And More
Inspeckage is a tool developed to offer dynamic analysis of Android applications. By applying hooks to functions of the Android API, Inspeckage will help you understand what an Android application is doing at runtime. http://ac-pm.github.io/Inspeckage https://twitter.com/inspeckage...
Android Package Inspector: Inspeckage
Inspeckage is a tool developed to offer dynamic analysis of Android applications. By applying hooks to functions of the Android API, Inspeckage will help you understand what an Android application is doing at runtime. Inspeckage will let you interact with some elements of the app, such as...
Using EMET to Disable EMET
UPDATE July 7: This post has been updated in advance of a Black Hat 2016 presentation. Microsoft’s Enhanced Mitigation Experience Toolkit EMET is a project that adds security mitigations to user mode programs beyond those built in to the operating system. It runs inside “protected” programs as a...
