uafuzz

UAFuzz: Binary-level Directed Fuzzing for Use-After-Free Vulnerabilities Directed Greybox Fuzzing DGF like AFLGo aims to perform stress testing on pre-selected potentially vulnerable target locations, with applications to different security contexts: 1 bug reproduction, 2 patch testing or 3 stati...

reverse-engineering

Reverse Engineering resources A curated list of awesome reversing resources Awesome Reversing Books Courses Practice Hex Editors Binary Format Disassemblers Binary Analysis Bytecode Analysis Import Reconstruction Dynamic Analysis Debugging Mac Decrypt Document Analysis Scripting Android Yara Book...

silifuzz

SiliFuzz - 通过代理对 CPU 进行模糊测试 什么是 SiliFuzz SiliFuzz 是一种通过模糊测试软件代理（如 CPU 模拟器或反汇编器）来发现 CPU 缺陷的系统，然后大规模地在真实 CPU 上执行累积的测试输入（称为 corpus ）。SiliFuzz 仍在开发中，详情请参阅论文。 术语 软件模糊测试与覆盖率 模糊测试是一种使用大量即时生成的测试输入来测试目标（应用程序或 API）的技术。其目标是让这些输入尽可能有趣且多样化，以触发极端情况。换句话说，模糊测试旨在最大化组合代码覆盖率。 代码覆盖率 可能有不同的含义，例如执行了哪些基本块，或者程序采用了哪些路径。...

CVE-2023-43694

An issue was discovered in Malwarebytes 4.6.14.326 and before and 5.1.5.116 and before and Nebula 2020-10-21 and later. An Out of bounds read in several disassembling utilities causes stability issues and denial of service...

CVE-2023-43694

An issue was discovered in Malwarebytes 4.6.14.326 and before and 5.1.5.116 and before and Nebula 2020-10-21 and later. An Out of bounds read in several disassembling utilities causes stability issues and denial of service...

CVE-2023-43694

CVE-2023-43694 affects Malwarebytes software and Nebula components. Affected: Malwarebytes 4.6.14.326 and earlier, and 5.1.5.116 and earlier; Nebula 2020-10-21 and later. Root cause: out-of-bounds reads in several disassembling utilities. Impact: stability issues and denial of service. Exploitati...

4 Steps to Creating a Powerful Research Lab for Reverse Engineering

However, manual lab setup and configuration can prove to be a laborious and time-consuming process. In this article, we'll look at 4 ways to create a reverse engineering lab, discuss how to save time, and, potentially, improve the detection rate using a sandbox-as-a-service, and a recommended lis...

The leap of a Cycldek-related threat actor

Introduction In the nebula of Chinese-speaking threat actors, it is quite common to see tools and methodologies being shared. One such example of this is the infamous "DLL side-loading triad": a legitimate executable, a malicious DLL to be sideloaded by it, and an encoded payload, generally dropp...

The Windows Malware Analysis Distribution: flare-vm

FLARE VM is a freely available and open sourced Windows-based security distribution designed for reverse engineers, malware analysts, incident responders, forensicators, and penetration testers. Inspired by open-source Linux-based security distributions like Kali Linux, REMnux and others, FLARE V...

[WinAppDbg 1.5] Python Debugger

The WinAppDbg python module allows developers to quickly code instrumentation scripts in Python under a Windows environment. It uses ctypes to wrap many Win32 API calls related to debugging, and provides an object-oriented abstraction layer to manipulate threads, libraries and processes, attach...