angr

angr angr is a platform-agnostic binary analysis framework. It is brought to you by the Computer Security Lab at UC Santa Barbara, SEFCOM at Arizona State University, their associated CTF team, Shellphish, the open source community, and @rhelmot. Project Links Homepage: https://angr.io Project...

pharos

Pharos Static Binary Analysis Framework The Pharos static binary analysis framework is a project of the Software Engineering Institute at Carnegie Mellon University. The framework is designed to facilitate the automated analysis of binary programs. It uses the ROSE compiler infrastructure develop...

retdec

Warning The RetDec project is currently in a limited maintenance mode due to a lack of resources: Pull Requests are welcomed. They are reviewed with priority, if possible without delays. Issues are reacted on with delays up to one quarter. Issues are not actively solved unless they relate to a...

panopticon

УСТАРЕЛО Проект Panopticon переехал наGitlab и был реструктурирован в несколько крейтов. Qt GUI заменён на Verso. Я буду принимать PR, но не буду делать существенной работы над этой версией. Большинство ссылок ниже нерабочие. Panopticon — Свободный кроссплатформенный дизассемблер Panopticon — это...

jadx

JADX jadx - Dex to Java decompiler Command line and GUI tools for producing Java source code from Android Dex and Apk files !WARNING Please note that in most cases jadx can't decompile all 100% of the code, so errors will occur. Check Troubleshooting guide for workarounds. Main features: decompil...

DataInject-BOF

Data Inject BOF 제 블로그 게시물 Control Flow Hijacking via Data Pointers의 프로세스 인젝션 개념 증명PoC을 BOFBeacon Object File로 구현한 것입니다. COM 프록시 함수가 호출하는 combase.dll의 Control Flow Guard 함수 포인터를 덮어써 제어 흐름을 가로챕니다. 중요 참고 사항 제 테스트 결과, explorer.exe는 COM 프록시에 크게 의존하기 때문에 트리거가 쉬운 현재 최적의 후보입니다. 직접 실험해 보시길 권장합니다. 이 BOF는...

vmp2

Введение Этот репозиторий представляет собой набор устаревших инструментов для работы с бинарными файлами, защищёнными VMProtect 2. Эти инструменты обеспечивают распаковку, анализ и экспериментальную девиртуализацию программного обеспечения, защищённого VMProtect 2. В основе этой коллекции лежит...

octopus

Octopus Un grand merci à QuoScient pour avoir sponsorisé ce projet. Octopus est un framework d'analyse de sécurité pour les modules WebAssembly et les smart contracts de blockchain. Le but d'Octopus est de fournir un moyen simple d'analyser les modules WebAssembly et le bytecode des smart contrac...

ved-ebpf

VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF VED Vault Exploit Defense-eBPF leverages eBPF extended Berkeley Packet Filter to implement runtime kernel security monitoring and exploit detection for Linux systems. Introduction eBPF is an in-kernel virtual machine that allows code...

ved-ebpf

VED-eBPF : Détection d'exploits et de rootkits du noyau avec eBPF VED Vault Exploit Defense-eBPF exploite eBPF extended Berkeley Packet Filter pour implémenter une surveillance de la sécurité du noyau en temps réel et une détection d'exploits pour les systèmes Linux. Introduction eBPF est une...

ScratchABit

ScratchABit ScratchABit est un désassembleur incrémental interactif avec des capacités d'analyse de flux de données et de contrôle. ScratchABit est dédié aux efforts de la communauté de rétro-ingénierie OpenSource rétro-ingénierie pour produire des pilotes/firmware OpenSource pour du matériel mal...

pyt

.. image:: https://travis-ci.org/python-security/pyt.svg?branch=master :target: https://travis-ci.org/python-security/pyt .. image:: https://readthedocs.org/projects/pyt/badge/?version=latest :target: http://pyt.readthedocs.io/en/latest/?badge=latest .. image::...

CVE-2026-20276

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. Th...

EUVD-2026-70203

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. Th...

CVE-2026-20276 Cisco IOS XR Software Security Hardening Release: September 2026

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. Th...

CVE-2026-20276

CVE-2026-20276 affects Cisco IOS XR Software and stems from insufficient control flow management (CWE-691), identified during an internal security review as part of a September 2026 hardening release. The CVSS 3.1 score is 8.6 (HIGH) with a network attack vector, no privileges required, no user i...

tenda-ac8v4-rop

Tenda-Ac8v4-PoC Tenda Ac8v4 Overflow basé sur la pile vers exécution de code à distance via détournement du flux d'exécution et exploitation par manipulation de multiples registres ; les CVE sont : CVE-2023-33675 CVE-2023-33673 CVE-2023-33672 CVE-2023-33671 CVE-2023-33670 CVE-2023-33669 Marqué...

cve-2016-7190

Aperçu CVE-2016-7190 0 est un débordement de tas dans la fonction Array.map de ChakraCore qui permet d'écraser la mémoire adjacente. L'idée principale pour obtenir un accès en lecture-écriture arbitraire est d'abord d'allouer plusieurs tableaux d'entiers JavaScript consécutifs, puis d'exploiter l...

polytracker

PolyTracker PolyTracker — это инструмент, изначально созданный для Автоматической лексической аннотации и навигации парсеров Automated Lexical Annotation and Navigation of Parsers, обратного акронима, придуманного исключительно для того, чтобы называть его The ALAN Parsers Project. Однако со...

CVE-2026-82539

CVE-2026-82539 Отправитель: Nicola Giuffrida Информация Производитель: TOTOLINK Веб-сайт производителя: TOTOLINK Модель: A720R Версия прошивки: V4.1.5cu.630B20250509 Адрес загрузки прошивки: TOTOLINK Серьёзность Базовый показатель CVSS v4.0: 8.7 Высокий Вектор:...