ofrak

OFRAK OFRAK Open Firmware Reverse Analysis Konsole is a binary analysis and modification platform. OFRAK combines the ability to: Identify and Unpack many binary formats Analyze unpacked binaries with field-tested reverse engineering tools Modify and Repack binaries with powerful patching...

CVE-2021-22204

CVE-2021-22204 Summary of the CVE Improper sanitization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image. Affected Versions Version 7.44 - 12.23 Anomalies Dependencies: djvulibre-bin exiftool Calls these three...

interactive-binary-structures

Interactive Binary Structures An interactive web-based toolkit designed to bridge the gap between theoretical documentation and practical analysis of binary formats and system memory layouts. Portable Executable PE Format Documentation This tool serves as an interactive visual map of a Windows PE...

igvm

igvm This project is the home of the Independent Guest Virtual Machine IGVM file format. The format specification can be found in the igvmdefs crate, with a Rust implementation of the binary format in the igvm crate. The IGVM file format is designed to encapsulate all information required to laun...

mtk_bp

Herramientas de firmware BP de MediaTek Este repositorio contiene definiciones de formatos de archivo basadas en Kaitai relacionadas con el firmware de módem de MediaTek, así como algunas herramientas básicas de línea de comandos para interactuar con estos tipos de archivo. El IDE de Kaitai tambi...

unblob

unblob Suite de extracción precisa, rápida y fácil de usar para blobs binarios. unblob analiza blobs binarios desconocidos para más de 78 formatos de archivo, compresión y sistema de archivos , extrae su contenido de forma recursiva y extrae fragmentos desconocidos. Es el compañero perfecto para...

hashcat

hashcat hashcat is the world's fastest and most advanced password recovery utility, supporting five unique modes of attack for over 300 highly-optimized hashing algorithms. hashcat currently supports CPUs, GPUs, and other hardware accelerators on Linux, Windows, and macOS, and has facilities to...

tachyon

Tachyon Tachyon is a fast web application security reconnaissance tool. It is specifically meant to crawl a web application and look for left over or non-indexed files with the addition of reporting pages or scripts leaking internal data. User Requirements Linux Python 3.6+ User Installation...

choronzon

Choronzon - An evolutionary knowledge-based fuzzer Introduction This document aims to explain in brief the theory behind Choronzon. Moreover, it provides details about its internals and how one can extend Choronzon to meet new requirements. An overview of the architecture of Choronzon was initial...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

pyxamstore

Xamarin AssemblyStore Explorer pyxamstore This is an alpha release of an assemblies.blob AssemblyStore parser written in Python. The tool is capable of unpack and repackaging assemblies.blob and assemblies.manifest Xamarin files from an APK. Installing Run the installer script: root@kitploit:...

CVE-2021-22204

CVE-2021-22204 Description Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image Script Script Link Script usage: System cmd: root@kitploit: bash CVE-2021-2204.sh "system'id'" happy.jpg Revers...

PackMyPayload

PackMyPayload - Emerging Threat of Containerized Malware Jump to supported formats This tool takes a file or directory on input and embeds them into an output file acting as an archive/container. It can serve purpose for a Proof-of-Concept presenting emerging risk of container file formats with...

rizin

Rizin Rizin 是一个逆向工程框架，源自 radare2 的分支，注重可用性、功能和整洁性。 Rizin 具有可移植性，可用于分析二进制文件、反汇编代码、调试程序，作为取证工具，作为能够打开磁盘文件的可脚本化命令行十六进制编辑器，以及更多用途！ 如果你想了解更多关于 Rizin 的信息，可以阅读官方 Rizin 书籍。 如何安装 请在我们的网页上查看安装说明。 如何构建 使用 meson 来编译和安装 Rizin。请确保获得更新版的 meson（例如，如果你的系统没有至少 0.55.0 版本，可以用 pip install meson 获取）。 克隆此仓库：...

CVE-2018-8174-msf

CVE-2018-8174-msf This is a metasploit module which creates a malicious word document to exploit CVE-2018-8174 - VBScript memory corruption vulnerability. This module is a very quick port and uses the exploit sample that was found in the wild. The exploit works only for Microsoft Office 32-bit...

winrar-cve-2023-38831-poc-gen

Generador de Exploits CVE-2023-38831 Esta herramienta es un script de Python que explota una vulnerabilidad en el formato de archivo RAR CVE-2023-38831 para ejecutar un comando malicioso cuando un usuario abre un archivo señuelo. El exploit funciona en versiones de WinRAR anteriores a la 6.23. Po...

packer-tutorial

Tabla de contenido 1. ¿Qué es un packer? : Una introducción al propósito de los packers y una guía sobre cuáles son las necesidades de desarrollo de un packer. 2. Requisitos previos : Herramientas necesarias para trabajar con este tutorial. 3. Un anticipo : Una demostración de lo que construirás...

010-Editor-Template

010-Editor-Template https://www.sweetscape.com/010editor/repository/files/010.bt https://www.sweetscape.com/010editor/repository/files/010Theme.bt https://www.sweetscape.com/010editor/repository/files/7ZIP.bt https://www.sweetscape.com/010editor/repository/files/ADF.bt...

cart

CaRT Compressed and RC4 Transport El formato de archivo CaRT se utiliza para almacenar/transferir malware y sus metadatos asociados. Neutraliza el malware para que no pueda ejecutarse y lo cifra para que el software antivirus no pueda marcar el archivo CaRT como malware. Ventajas RÁPIDO: CaRT es...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: wireshark (UTSA-2026-104790)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104790 advisory. Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service Tenable has extracted the preceding description block directly from...