capstone/fuzz_disasmmaster: Use-of-uninitialized-value in isPrefixAtLocation

Detailed report: https://oss-fuzz.com/testcase?key=5120790969188352 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmmaster Fuzz target binary: fuzzdisasmmaster Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

capstone/fuzz_disasmnext: Use-of-uninitialized-value in EVM_insn_name

Detailed report: https://oss-fuzz.com/testcase?key=5135182867726336 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: EVMinsnname...

capstone/fuzz_disasmnext: Global-buffer-overflow in evm_insn_find

Detailed report: https://oss-fuzz.com/testcase?key=4918215883882496 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzerasancapstone Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Crash Address: 0x0000009cf9bc Crash State:...

capstone/fuzz_disasmnext: Index-out-of-bounds in fuzz_disasm.c

Detailed report: https://oss-fuzz.com/testcase?key=5740686065270784 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmnext Fuzz target binary: fuzzdisasmnext Job Type: libfuzzerubsancapstone Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: fuzzdisasm.c Sanitizer:...

capstone/fuzz_disasmmaster: Index-out-of-bounds in printT2AddrModeSoRegOperand

Detailed report: https://oss-fuzz.com/testcase?key=5752477814095872 Project: capstone Fuzzer: libFuzzercapstonefuzzdisasmmaster Fuzz target binary: fuzzdisasmmaster Job Type: libfuzzerubsancapstone Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

capstone/fuzz_disasmmaster: Crash in getRegisterName

Detailed report: https://oss-fuzz.com/testcase?key=5960154649460736 Project: capstone Fuzzer: aflcapstonefuzzdisasmmaster Fuzz target binary: fuzzdisasmmaster Job Type: aflasancapstone Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000100129beb Crash State: getRegisterName...

ROPgadget - This Tool Lets You Search Your Gadgets On Your Binaries To Facilitate Your ROP Exploitation

This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF/PE/Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC and MIPS architectures. Since the version 5, ROPgadget has a new core which is written in Python using Capstone disassembly...

Shellen - Interactive Shellcoding Environment, In Which You Can Easily Craft Your Shellcodes

Shellen is an interactive shellcoding environment. If you want a handy tool to write shellcodes, then shellen may be your friend. Also, it can be used just as assembly/disassembly tool. It uses keystone and capstone engines for all provided operations. Shellen works only on python3. Maybe it will...

IDAsec - IDA plugin for reverse-engineering and dynamic interactions with the Binsec platform

IDA plugin for reverse-engineering and dynamic interactions with the Binsec platform Features Decoding an instruction in DBA IR Loading execution traces generated by Pinsec Triggering analyzes on Binsec and retrieving results Dependencies protobuf ZMQ capstone for trace disassembly graphviz to dr...

Cisco IOS SNMP Remote Code Execution

!/usr/bin/env python if False: ''' CVE-2017-6736 / cisco-sa-20170629-snmp Cisco IOS remote code execution =================== This repository contains Proof-Of-Concept code for exploiting remote code execution vulnerability in SNMP service disclosed by Cisco Systems on June 29th 2017 - Descriptio...

Capstone Integer Overflow Vulnerability

Capstone is a set of cross-platform disassembly framework of the U.S. Capstone company , it can support for binary analysis and reverse engineering of secure communications , etc. . An integer overflow vulnerability exists in the cswinkernelmalloc function in the winkernelmm.c file in Capstone...

PYSEC-2017-113

Integer overflow in the cswinkernelmalloc function in winkernelmm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service heap-based buffer overflow in a kernel driver or possibly have unspecified other impact via a large value...

PYSEC-2017-113

Integer overflow in the cswinkernelmalloc function in winkernelmm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service heap-based buffer overflow in a kernel driver or possibly have unspecified other impact via a large value...

CVE-2017-6952

Integer overflow in the cswinkernelmalloc function in winkernelmm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service heap-based buffer overflow in a kernel driver or possibly have unspecified other impact via a large value...

CVE-2017-6952

Integer overflow in the cswinkernelmalloc function in winkernelmm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service heap-based buffer overflow in a kernel driver or possibly have unspecified other impact via a large value...

Integer overflow

Integer overflow in the cswinkernelmalloc function in winkernelmm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service heap-based buffer overflow in a kernel driver or possibly have unspecified other impact via a large value...

CVE-2017-6952

Integer overflow in the cswinkernelmalloc function in winkernelmm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service heap-based buffer overflow in a kernel driver or possibly have unspecified other impact via a large value...

CVE-2017-6952

CVE-2017-6952 is a capability in Capstone prior to 3.0.5 where an integer overflow in the winkernel_malloc path (winkernel_mm.c) can lead to a heap-based buffer overflow in a kernel driver, enabling denial of service with partial/High impact. Public details identify Capstone 3.0.4 and earlier as ...

CVE-2017-6952

Integer overflow in the cswinkernelmalloc function in winkernelmm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service heap-based buffer overflow in a kernel driver or possibly have unspecified other impact via a large value...

Interactive Disassembler: Plasma

Interactive disassembler for x86/ARM/MIPS. Generates indented pseudo-code with colored syntax code. PLASMA is an interactive disassembler. It can generate a more readable assembly pseudo code with colored syntax. You can write scripts with the available Python api. The project is still in big...