covirt

covirt Un virtualizzatore di codice x86-64 per offuscamento basato su VM. Caratteristiche Architettura di macchina virtuale basata su stack Offuscamento MBA Mixed Boolean Arithmetic e codice auto-modificante Supporto per binari PE ed ELF Marcatori di codice per definire le regioni protette Il...

extrude

extrude Analyse binaries for missing security features, information disclosure and more. 🚧 Extrude is in the early stages of development, and currently only supports ELF and MachO binaries. PE Windows binaries will be supported soon. Usage root@kitploit: Usage: extrude flags file Flags: -a, --all...

extrude

extrude Analizza i binari per individuare funzionalità di sicurezza mancanti, divulgazione di informazioni e molto altro. 🚧 Extrude è nelle prime fasi di sviluppo e attualmente supporta solo binari ELF e MachO. Il supporto per i binari PE Windows sarà presto disponibile. Utilizzo root@kitploit:...

drow

drow Description TL;DR drow is a command-line utility that is used to inject code and hook the entrypoint of ELF executables post-build. It takes unmodified ELF executables as input and exports a modified ELF contianing an embedded user-supplied payload that executes at runtime. Slightly more...

Malicious code in hydration-cls-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c60e3a0dd707077bad78ec7f0e5f79032dc9b86814d65bfd0083275a6059de The package advertises itself as a dependency-free streak/date-math library but ships an x8664 Linux ELF at dist/internal/calc.dat and auto-launches...

elfloader

Summary elfloader is a super simple loader for ELF files that generates a flat in-memory representation of the ELF. Pair this with Rust and now you can write your shellcode in a proper, safe, high-level language. Any target that LLVM can target can be used, including custom target specifications...

elfloader

Riepilogo elfloader è un caricatore estremamente semplice per file ELF che genera una rappresentazione piatta in memoria dell'ELF. Abbinalo a Rust e ora puoi scrivere il tuo shellcode in un linguaggio di alto livello, sicuro e appropriato. Qualsiasi destinazione supportata da LLVM può essere...

Rainfall

Rainfall Rainfall é um desafio ISO ligeiramente mais complexo que o Snow Crash. Você terá que mergulhar fundo em engenharia reversa, aprender a reconstruir um código e entendê-lo para detectar falhas. Você conseguirá chegar ao último nível? Descrição Rainfall é um projeto do ramo de ciberseguranç...

ELFLoader

ELFLoader Dies ist ein ELF-Objekt-Loader/Runner im Speicher. Das Ziel ist es, einen einzigen ELF-Loader zu erstellen, der verwendet werden kann, um Folgefunktionen auf allen x8664- und x86-Nix-Betriebssystemen auszuführen. Wie es funktioniert Dieser Loader funktioniert so, dass er den gesamten Co...

upx-recovery-tool

upx-recovery-tool upx-recovery-tool é um script que visa reparar as modificações mais comuns feitas por criadores de malware em arquivos ELF compactados com UPX, feitas para impedir sua descompactação automática com a ferramenta UPX padrão. Correções / Recursos UPX implementados Esta ferramenta...

retdec

Warning The RetDec project is currently in a limited maintenance mode due to a lack of resources: Pull Requests are welcomed. They are reviewed with priority, if possible without delays. Issues are reacted on with delays up to one quarter. Issues are not actively solved unless they relate to a...

manticore

⚠️ Project is archived ⚠️ This project is no longer internally developed and maintained. Manticore...

peda

peda PEDA - Python Exploit Development Assistance for GDB Key Features: Enhance the display of gdb: colorize and display disassembly codes, registers, memory information during debugging. Add commands to support debugging and exploit development for a full list of commands use peda help: aslr --...

woody-woodpacker

Woody-Woodpacker Un progetto della scuola 42 che implementa un packer per eseguibili ELF a 64 bit. Il packer cripta le sezioni di codice dell'eseguibile e inietta una routine di decriptazione che viene eseguita a runtime. 🎯 Informazioni Woody-Woodpacker è un programma che prende un binario ELF a ...

the-backdoor-factory

The new version of BACKDOOR FACTORY is available! Get access here: https://github.com/sponsors/secretsquirrel WARNING: Pull Requests WILL BE IGNORED AND CLOSED. The Backdoor Factory BDF For security professionals and researchers only. The goal of BDF is to patch executable binaries with user...

NullSection

NullSection NullSection è uno strumento Anti-Reversing che applica una tecnica che sovrascrive l'intestazione della sezione con byte nulli. Install root@kitploit: git clone https://github.com/MatheuZSecurity/NullSection cd NullSection gcc nullsection.c -o nullsection ./nullsection Vantaggio Quand...

sandfly-entropyscan

What is sandfly-entropyscan? sandfly-entropyscan is a utility to quickly scan files or running processes and report on their entropy measure of randomness and if they are a Linux/Unix ELF type executable. Some malware for Linux is packed or encrypted and shows very high entropy. This tool can...

sandfly-entropyscan

Cos'è sandfly-entropyscan? sandfly-entropyscan è un'utilità per scansionare rapidamente file o processi in esecuzione e riportare la loro entropia misura di casualità e se sono eseguibili di tipo ELF Linux/Unix. Alcuni malware per Linux sono impacchettati o crittografati e mostrano un'entropia...

MAL-2026-14429 Malicious code in dim-hydration-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fefcd7c94e6eed5b5a69ce9ad5f4489c6532472ec604e6d15e5a96f63c59e51 The package is presented in its README as a set of day-math primitives, but dist/index.mjs runs a top-level async IIFE on import that chmod 0755's...

Malicious code in hydration-ui-dim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64f9565680b71c54ed88e29ed3950f1561764f4b86a260a3ebb5eadb528edfa3 On import 'hydration-ui-dim', dist/index.mjs runs a top-level async IIFE that chmods dist/internal/calc-math.dat to 0755 and spawns it detached via...