119 matches found
mtk-su-reverse-cve-2020-0069
mtk-su 只是我的一些笔记 字符串表 使用 binwalk -Xe stringtabledump 获取解压缩后的字符串表 从 idb 中的地址转储 0x1F098 压缩大小:1260 如果你想要 idb,请用你的邮箱提出一个问题,我会发送它。如果你想要重写漏洞利用,这是一个很好的起点。...
binwalk
Binwalk v3 यह बिनवॉक फर्मवेयर विश्लेषण उपकरण का एक अद्यतन संस्करण है, जिसे गति और सटीकता के लिए Rust में पुनः लिखा गया है। यह क्या करता है? बिनवॉक उन फ़ाइलों और डेटा की पहचान कर सकता है, और वैकल्पिक रूप से निकाल सकता है, जो अन्य फ़ाइलों के अंदर एम्बेड किए गए हैं। जबकि इसका प्राथमिक ध्यान फर्मवेयर...
CVE-2022-4510-WalkingPath
CVE-2022-4510-Binwalk Este script te permite generar exploits para apuntar a las vulnerabilidades de Binwalk CVE-2022-4510. Los exploits se pueden usar para pruebas y demostraciones. Las opciones compatibles incluyen SSH, ejecución de comandos y reverse shell. Requisitos previos Python 3.x Uso 1...
inhale
Inhale - Malware Inhaler Inhale is a malware analysis and classification tool that is capable of automating and scaling many static analysis operations. This is the beta release version, for testing purposes, feedback, and community development. Background Inhale started as a series of small...
attifyos
AttifyOS v3.0 AttifyOS is a distro intended to help you perform security assessment and penetration testing of Internet of Things IoT devices. It saves you a lot of time by providing a pre-configured environment with all the necessary tools loaded. The new version is based on Ubuntu 18.04 64-Bit ...
binwalk
Binwalk Binwalk 是一款快速、易用的工具,用于分析、逆向工程和提取固件镜像。 EOL 通知 此分支的创建是为了修复 binwalk v2 的一些悬而未决的问题,并使其保持良好的状态。它已实现了帮助用户和发行版打包者的目的。然而,由于原作者最近用 Rust 重写了 binwalk 并再次积极开发,因此不再需要维护 binwalk v2。用户和贡献者应迁移到 binwalk v3。这个新版本还提供了 Rust 库,请参阅 https://github.com/ReFirmLabs/binwalk/wiki/Using-the-Rust-Library。 因此,此仓库将在 202...
BadPfs-CVE-2022-4510
BadPfs Script de Python que genera payloads pfs para explotar CVE-2022-4510 Simplemente crea un payload pfs usando el script. Cuando se ejecuta binwalk con -e sobre el payload, se puede sobrescribir un archivo con los permisos de binwalk. Este ejemplo sobrescribirá /etc/sudoers con el contenido d...
PYSEC-2026-787 Path traversal in binwalk
A path traversal vulnerability was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.3 inclusive. By crafting a malicious PFS filesystem file, an attacker can get binwalk's PFS extractor to extract files at arbitrary locations when binwalk is run in extraction mode -e option. Remo...
PYSEC-2026-788 binwalk vulnerable to UNIX Symbolic Link (Symlink) Following
A vulnerability, which was classified as problematic, was found in ReFirm Labs binwalk up to 2.3.2. Affected is an unknown function of the file src/binwalk/modules/extractor.py of the component Archive Extraction Handler. The manipulation leads to symlink following. It is possible to launch the...
Linux Distros Unpatched Vulnerability : CVE-2026-7179
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in OSPG binwalk up to 2.4.3. This vulnerability affects the function readnullterminatedstring of the file...
SUSE CVE-2026-7179
A security vulnerability has been detected in OSPG binwalk up to 2.4.3. This vulnerability affects the function readnullterminatedstring of the file src/binwalk/plugins/winceextract.py of the component WinCE Extraction Plugin. Such manipulation of the argument self.filename leads to path traversa...
CVE-2026-7179
A flaw was found in the WinCE Extraction Plugin of OSPG binwalk. A local attacker can exploit this vulnerability by manipulating the 'self.filename' argument in the 'readnullterminatedstring' function. This manipulation leads to a path traversal vulnerability, potentially allowing the attacker to...
DEBIAN-CVE-2026-7179
A security vulnerability has been detected in OSPG binwalk up to 2.4.3. This vulnerability affects the function readnullterminatedstring of the file src/binwalk/plugins/winceextract.py of the component WinCE Extraction Plugin. Such manipulation of the argument self.filename leads to path traversa...
CVE-2026-7179
A security vulnerability has been detected in OSPG binwalk up to 2.4.3. This vulnerability affects the function readnullterminatedstring of the file src/binwalk/plugins/winceextract.py of the component WinCE Extraction Plugin. Such manipulation of the argument self.filename leads to path traversa...
UBUNTU-CVE-2026-7179
A security vulnerability has been detected in OSPG binwalk up to 2.4.3. This vulnerability affects the function readnullterminatedstring of the file src/binwalk/plugins/winceextract.py of the component WinCE Extraction Plugin. Such manipulation of the argument self.filename leads to path traversa...
CVE-2026-7179
A security vulnerability has been detected in OSPG binwalk up to 2.4.3. This vulnerability affects the function readnullterminatedstring of the file src/binwalk/plugins/winceextract.py of the component WinCE Extraction Plugin. Such manipulation of the argument self.filename leads to path traversa...
EUVD-2026-25932
A security vulnerability has been detected in OSPG binwalk up to 2.4.3. This vulnerability affects the function readnullterminatedstring of the file src/binwalk/plugins/winceextract.py of the component WinCE Extraction Plugin. Such manipulation of the argument self.filename leads to path traversa...
CVE-2026-7179 OSPG binwalk WinCE Extraction Plugin winceextract.py read_null_terminated_string path traversal
A security vulnerability has been detected in OSPG binwalk up to 2.4.3. This vulnerability affects the function readnullterminatedstring of the file src/binwalk/plugins/winceextract.py of the component WinCE Extraction Plugin. Such manipulation of the argument self.filename leads to path traversa...
CVE-2026-7179
CVE-2026-7179 affects OSPG binwalk up to 2.4.3, specifically the WinCE Extraction Plugin’s read_null_terminated_string in src/binwalk/plugins/winceextract.py. The issue allows local path traversal via manipulation of self.file_name. Exploitation is local; the vulnerability is tied to products no ...
CVE-2026-7179
A security vulnerability has been detected in OSPG binwalk up to 2.4.3. This vulnerability affects the function readnullterminatedstring of the file src/binwalk/plugins/winceextract.py of the component WinCE Extraction Plugin. Such manipulation of the argument self.filename leads to path traversa...