UnConfuserEx

UnConfuserEx Fork mejorado de UnconfuserEx con soporte mejorado para variantes modernas de ConfuserEx2, recuperación anti-manipulación, eliminación de compresor, restauración del flujo de control y reconstrucción de recursos...

Learning-Linux-Binary-Analysis

学习 Linux 二进制分析 学习 Linux 二进制分析 这是 学习 Linux 二进制分析 的代码仓库，由 Packt 出版。 学习 Linux 二进制分析 本书内容简介 《学习 Linux 二进制分析》内容丰富，包含大量代码，将教你 ELF 格式的内部工作原理，以及黑客和安全分析师用于病毒分析、二进制补丁、软件保护等方法。 本书涵盖以下精彩主题： 探索 ELF 二进制格式的内部工作原理 学习 UNIX 病毒感染与分析技术 掌握二进制加固与软件防篡改方法 修补可执行文件与进程内存 绕过恶意软件中使用的反调试手段 执行高级二进制取证分析 用 C 语言设计 ELF 相关工具 使用...

UnconfuserEx

UnConfuserEx Una herramienta para desofuscar binarios C protegidos con ConfuserEx2. Este fue originalmente un proyecto privado que decidí hacer público después de que ya no tuviera utilidad real para mí. La eliminación de protecciones se centró en un binario específico que estaba reversando y...

Anti-Tamper-Perturbation

🛡️ Protección Anti-Manipulación para la Generación no Autorizada de Imágenes Individuales Código Oficial para el Artículo de ICCV 2025 📄 Protección Anti-Manipulación para la Generación no Autorizada de Imágenes Individuales ⚙️ Configuración del Entorno conda create --name ATP --file...

maya

maya Anti-manipulación y anti-explotación para ELF en Linux. Prototipo de 2014. Ya no recibe mantenimiento. Binarios objetivo: solo binarios ELF de tipo ETEXEC. Maya utiliza un motor de ejecución reubicable, 'tracer.o', que finalmente se inyecta y enlaza en el binario protegido. Este es el núcleo...

EUVD-2026-91848

Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception SimpleSvm.sys on AMD; hyperkd.sys and hyperhv.dll on Intel...

CVE-2026-105051

Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception SimpleSvm.sys on AMD; hyperkd.sys and hyperhv.dll on Intel...

CVE-2026-105051

Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception SimpleSvm.sys on AMD; hyperkd.sys and hyperhv.dll on Intel...

CVE-2026-105051

Versions of Denuvo Anti-Tamper released through 2026-03-04 are vulnerable to a bypass of a hypervisor presence check . The root cause is CPUID interception involving specific system files: SimpleSvm.sys on AMD systems, and hyperkd.sys or hyperhv.dll on Intel systems. This vulnerability allows for...

pyrite

Hardware-Bound & Cloud-Gated Binary Execution and Anti-Tamper Envelope Sealing for Crystal. What is Pyrite? Pyrite ensures that your compiled Crystal binary only executes on your authorized infrastructure. If an adversary extracts, leaks, steals, or modifies the binary, execution halts immediatel...

FakeEnclave

FakeEnclave Una prueba de concepto que abusa de Enclave Probado en Win10 1809 ¿Qué puede hacer? Anti-manipulación Puede que no haya nada que hacer Compilar Visual Studio 2022 & WDK10 llvm-msvc enlace...

CVE-2026-105051: Use of Less Trusted Source

Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception SimpleSvm.sys on AMD; hyperkd.sys and hyperhv.dll on Intel...

PT-2026-104454

Name of the Vulnerable Software and Affected Versions Denuvo Anti-Tamper versions prior to 2026-03-04 Description The software allows a bypass of the hypervisor presence check. This is achieved through CPUID interception, affecting SimpleSvm.sys on AMD systems and hyperkd.sys and hyperhv.dll on...

beyondtrust-cve-2026-1232

🔍 Investigación de Vulnerabilidades Una colección seleccionada de informes detallados de vulnerabilidades que cubren incidentes de seguridad reales en el ecosistema de software. Cada entrada incluye un análisis técnico completo, prueba de concepto, listado de IOCs y guía de remediación. Propósito...

CVE-2026-0293

A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unauthorized access to protected processes and files. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is...

CVE-2026-0293 Prisma Access Agent: Anti-Tamper Protection Bypass on Windows

A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unauthorized access to protected processes and files. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is...

CVE-2026-0293

A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unauthorized access to protected processes and files. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is...

CVE-2026-0293

Prisma Access Agent for Windows is affected by CVE-2026-0293, which enables a local attacker with administrator privileges to bypass anti-tamper protection and gain unauthorized access to protected processes and files. The vulnerability does not affect Prisma Access Agent on Linux, macOS, iOS, An...

EUVD-2026-57707

A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unauthorized access to protected processes and files. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is...

CVE-2026-0293 Prisma Access Agent: Anti-Tamper Protection Bypass on Windows

A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unauthorized access to protected processes and files. The Prisma Access Agent on Linux, macOS, iOS, Android, and Chrome OS is...