hitron-cfg-decrypter

Descifrador de CFG Hitron Descarga root@kitploit: git clone https://github.com/Manouchehri/hitron-cfg-decrypter cd hitron-cfg-decrypter/ Descifrado root@kitploit: python decrypt.py -i sample.cfg.enc Cifrado root@kitploit: python decrypt.py -i sample.cfg.dec -m encrypt Obteniendo el CFG Gracias a...

Advanced-Loader-Reverse-Engineering

De Shellhost a 3 DLLs: Analizando un Cargador Avanzado con Inyección de Payload, Bypass de CFG y Ataques de Degradación Resumen Este análisis cubre un sofisticado cargador multiphase que apunta a Shellhost.exe, amsi.dll, mstscax.dll y clbcatq.dll. El cargador utiliza module stomping, bypass de CF...

B2R2

B2R2 B2R2 是一个完全托管的二进制分析框架，使用 F 编写。它为逆向工程、程序分析和二进制级检查提供了丰富的算法、函数和工具。 名称 B2R2 的灵感来源于星球大战中的标志性机器人 R2-D2。最初名为 B2-R2 ，后来因为 .NET 标识符和命名空间不允许使用连字符，项目采用了无连字符形式 B2R2 。该名称反映了项目的用途："B" 和 "2" 暗示二进制和二态计算，而 "R" 代表逆向（reversing）。简而言之，B2R2 是为二进制逆向而构建的。 概述 1. B2R2 是 分析友好型 的：它使用 F...

-CVE-2018-0834-aab-aar

致谢 @reubensammut，你是个狠人，兄弟。CVE-2018-0834 完整代码执行。包含静态偏移量，绕过 cfg、dep、aslr : 享用。...

PESTO

PESTO：PE（文件）统计工具 描述 PESTO 是一个 Python 脚本，用于提取 PE 文件的某些安全特征或标志，并将其保存到数据库中。它会搜索整个目录中的每个 PE 二进制文件，并将结果存入数据库。 它检查头文件中的架构标志，以及以下安全标志：ASLR、NOSEH、DEP 和 CFG。代码足够清晰，您可以根据需要修改标志和格式。 更多详情和标志说明请参见： https://www.slideshare.net/elevenpaths/anlisis-del-nivel-proteccin-antiexploit-en-windows-10 功能...

ghidra-evm

Ghidra EVM Module In the last few years, attacks on deployed smart contracts in the Ethereum blockchain have ended up in a significant amount of stolen funds due to programming mistakes. Since smart contracts, once compiled and deployed, are complex to modify and update different practitioners ha...

ghidra-evm

Ghidra EVM 模块 在过去几年中，针对以太坊区块链上已部署智能合约的攻击因编程错误导致大量资金被盗。由于智能合约一旦编译并部署后，修改和更新较为复杂，不同从业者建议在仅能获取以太坊虚拟机（EVM）字节码的区块链上审查其安全性。在这方面，通过反汇编和反编译进行逆向工程可能很有效。 ghidra-EVM 是一个用于智能合约逆向工程的 Ghidra 模块。它可用于从以太坊区块链下载以太坊虚拟机（EVM）字节码，并对智能合约进行反汇编和反编译。此外，它还能分析创建代码、查找合约方法并定位不安全的指令。...

t-reqs

T-Reqs HTTP Fuzzer T-Reqs（两 个请求 ）是一个基于语法的HTTP Fuzzer，作为论文T-Reqs: HTTP Request Smuggling with Differential Fuzzing的一部分编写，该论文发表于ACM CCS 2021。 论文的BibTeX： root@kitploit: @inproceedingsccs2021treqs, title=T-Reqs: HTTP Request Smuggling with Differential Fuzzing, author=Jabiyev, Bahruz and Sprecher,...

gftrace

gftrace A command line Windows API tracing tool for Golang binaries. Note: This tool is a PoC and a work-in-progress prototype so please treat it as such. Feedbacks are always welcome! How it works? Although Golang programs contains a lot of nuances regarding the way they are built and their...

DataInject-BOF

Data Inject BOF Una implementación en beacon object file de la prueba de concepto de inyección de procesos de mi entrada de blog Control Flow Hijacking via Data Pointers. Secuestra el flujo de control sobrescribiendo los punteros de función de Control Flow Guard de combase.dll que son llamados po...

CVE-2026-80627

In the Linux kernel, the following vulnerability has been resolved: MIPS: mm: Fix out-of-bounds write in maarreswalk maarreswalk uses wi-numcfg as the index into the fixed-size wi-cfg array, but checks whether the array is full only after it has filled the selected entry. If walksystemramrange...

CVE-2026-81334 darknet through 6.0 Out-of-Bounds Read and Write via Unchecked Layer Index in .cfg Parser

darknet subscripts its layer array with an index taken from a configuration file without checking it against the array's length. The array is allocated in src-lib/darknetnetwork.cpp as xcallocnet.n, sizeofDarknet::Layer, sized to exactly the number of layer sections the file declares. The shortcu...

CVE-2026-81334 darknet through 6.0 Out-of-Bounds Read and Write via Unchecked Layer Index in .cfg Parser

darknet subscripts its layer array with an index taken from a configuration file without checking it against the array's length. The array is allocated in src-lib/darknetnetwork.cpp as xcallocnet.n, sizeofDarknet::Layer, sized to exactly the number of layer sections the file declares. The shortcu...

CVE-2026-81334

darknet through 6.0 is vulnerable to an out-of-bounds read and write in its .cfg parser. The layer array in src-lib/darknet_network.cpp is sized to the declared number of layer sections, but the shortcut, scale_channels, and sam sections (via their from field) and the route section (via its layer...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: aoe: fixed the potential use-after-free issue in aoecmdcfgpkts. This patch addresses CVE-2023-6270. The description of the vulnerability is as follows: A flaw was discovered in the ATA over Ethernet AoE driver within the Linux...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move the cfglogverbose check before calling lpfcdmpdbg In an attempt to log message 0126 using LOGTRACEEVENT, the following hard lockup occurred, causing the system to hang. Call Trace: rawspinlockirqsave+0x32/0x40...

CVE-2026-72852 darknet Integer Overflow in Convolutional Layer Buffer Sizing Leads to Heap Buffer Overflow

hank-ai/darknet sizes a convolutional layer's weight and output heap buffers by multiplying configuration fields taken from a .cfg file in unchecked 32-bit int arithmetic. In src-lib/convolutionallayer.cpp, l.nweights is computed as c / groups n size size and l.outputs as l.outh l.outw l.outc, an...

CVE-2026-72852

hank-ai/darknet (a neural network framework) is affected by an integer overflow in src-lib/convolutional_layer.cpp that leads to a heap buffer overflow . Buffer sizes for convolutional layer weights and outputs are computed using unchecked 32-bit integer arithmetic on fields parsed from a .cfg fi...

EUVD-2026-63536

hank-ai/darknet sizes a convolutional layer's weight and output heap buffers by multiplying configuration fields taken from a .cfg file in unchecked 32-bit int arithmetic. In src-lib/convolutionallayer.cpp, l.nweights is computed as c / groups n size size and l.outputs as l.outh l.outw l.outc, an...

CVE-2026-72852 darknet Integer Overflow in Convolutional Layer Buffer Sizing Leads to Heap Buffer Overflow

hank-ai/darknet sizes a convolutional layer's weight and output heap buffers by multiplying configuration fields taken from a .cfg file in unchecked 32-bit int arithmetic. In src-lib/convolutionallayer.cpp, l.nweights is computed as c / groups n size size and l.outputs as l.outh l.outw l.outc, an...