Lucene search
+L

8502 matches found

Kitploit
Kitploit
•added 2026/09/30 2:09 a.m.•166 views

pytm

pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...

6.2AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/30 1:35 a.m.•16 views

Sighthound

Sighthound Tree-sitter based static vulnerability scanner with pattern matching and taint-flow analysis. What It Does Scans source code for security issues using AST-aware rules. Supports pattern mode and taint mode source to sink tracking. Handles multi-file projects and parallel execution...

6.2AI score
SaveExploits0References8
Kitploit
Kitploit
•added 2026/09/30 12:25 a.m.•17 views

windbg-decompile-ext

Windbg Decompile Extension via LLM This project is a Windows x64 WinDbg extension skeleton that resolves a function by name or address, reconstructs a deterministic control-flow view, and asks an LLM directly from the extension to produce pseudocode. Layout src/extension: WinDbg extension DLL and...

6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/30 12:17 a.m.•70 views

obfuscation_detection

Obfuscation Detection v2.4 Author: Tim Blazytko Automatically detect obfuscated code and other interesting code constructs Description: Obfuscation Detection is a Binary Ninja plugin to detect obfuscated code and interesting code constructs e.g., state machines in binaries. Given a binary, the...

6.2AI score
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/29 11:21 p.m.•22 views

datadome-vm

DataDome VM Analysis Summary This repository documents the first public version of DataDome's in-browser JavaScript virtual machine VM used in their CAPTCHA/interstitial flow. This analysis covers: Bytecode loading and decoding mechanisms VM memory layout and architecture A proof-of-concept...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/29 11:15 p.m.•214 views

threatspec

threatspec - continuous threat modeling, through code Threatspec is an open source project that aims to close the gap between development and security by bringing the threat modelling process further into the development process. This is achieved by having developers and security engineers write...

6.2AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/29 10:23 p.m.•12 views

Reverse-Engineering

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures. FREE EMBEDDED HACKING COURSE PROMO HERE Join DC540 Discord HERE Today's Tutorial September 29, 2026 Lesson 310: Embedded Hacking Course Chapter 28: Hacking Operators...

5.8AI score
SaveExploits0References54
Kitploit
Kitploit
•added 2026/09/29 10:22 p.m.•302 views

retdec

Warning The RetDec project is currently in a limited maintenance mode due to a lack of resources: Pull Requests are welcomed. They are reviewed with priority, if possible without delays. Issues are reacted on with delays up to one quarter. Issues are not actively solved unless they relate to a...

5.9AI score
SaveExploits0References8
Kitploit
Kitploit
•added 2026/09/29 9:13 p.m.•163 views

Dna

Dna Dna is a static binary analysis framework built on top of LLVM. Notably it's written almost entirely in C, including managed bindings for LLVM, Remill, and Souper. Functionality Dna implements an iterative control flow graph reconstruction inspired heavily by the SATURN paper. It iteratively...

6.1AI score
SaveExploits0References5
Kitploit
Kitploit
•added 2026/09/29 8:02 p.m.•38 views

caracal

Caracal Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analysis framework Easy to run in Scarb projects Installation Precompiled binaries...

6.2AI score
SaveExploits0References4
NVD
NVD
•added 2026/09/29 6:17 p.m.•5 views

CVE-2026-102730

Mounting an attacker-controlled NAND flash image lxnandflashopen triggers an unbounded out-of-bounds heap write in LevelX's NAND flash-translation-layer metadata parser that overwrites a driver function pointer in the control block, giving a demonstrated control-flow hijack — RIP set to a full...

8.6CVSS0.00117EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/29 6:17 p.m.•4 views

CVE-2026-102711

Two issues in the ThreadX loadable-module loader, reached when a device loads an attacker-controlled module object via txmmodulemanagermemoryload / txmmodulemanagerinplaceload — APIs that take ONLY a base pointer, no image length, so every size/offset field in TXMMODULEPREAMBLE is fully...

5.6CVSS0.00075EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/29 6:15 p.m.•13 views

CVE-2024-0195-SpiderFlow

CVE-2024-0195 Control Inadecuado de la Generación de Código 'Inyección de Código' Resumen CVE-2024-0195 es una vulnerabilidad crítica de inyección de código en la aplicación web spider-flow 0.4.3, específicamente en la función FunctionService.saveFunction del archivo FunctionController.java. Un...

9.8CVSS7.3AI score0.19403EPSS
SaveExploits4
CVE
CVE
•added 2026/09/29 5:59 p.m.•7 views

CVE-2026-102730

LevelX's NAND flash-translation-layer metadata parser contains an unbounded out-of-bounds heap write triggered by mounting an attacker-controlled NAND flash image via lx_nand_flash_open(). The root cause is an unchecked on-flash count in a parser partially generated by an AI. This vulnerability a...

8.6CVSS5.8AI score0.00117EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/29 5:59 p.m.•25 views

CVE-2026-102730

Mounting an attacker-controlled NAND flash image lxnandflashopen triggers an unbounded out-of-bounds heap write in LevelX's NAND flash-translation-layer metadata parser that overwrites a driver function pointer in the control block, giving a demonstrated control-flow hijack — RIP set to a full...

8.6CVSS0.00117EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/29 5:59 p.m.•4 views

EUVD-2026-89201

Mounting an attacker-controlled NAND flash image lxnandflashopen triggers an unbounded out-of-bounds heap write in LevelX's NAND flash-translation-layer metadata parser that overwrites a driver function pointer in the control block, giving a demonstrated control-flow hijack — RIP set to a full...

8.6CVSS5.8AI score0.00117EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/29 5:52 p.m.•33 views

process_overwriting

Process Overwriting Process Overwriting is a PE injection technique, closely related to Process Hollowing and Module Overloading. With its help, you can replace the main executable not a DLL of the target process. It works only for a newly created process - injection to existing processes is not...

6.3AI score
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/29 5:42 p.m.•18 views

ScratchABit

ScratchABit ScratchABit is an interactive incremental disassembler with data/control flow analysis capabilities. ScratchABit is dedicated to the efforts of the OpenSource reverse engineering community reverse engineering to produce OpenSource drivers/firmware for hardware not properly supported b...

6.3AI score
SaveExploits0References7
EUVD
EUVD
•added 2026/09/29 5:38 p.m.•6 views

EUVD-2026-89174

Two issues in the ThreadX loadable-module loader, reached when a device loads an attacker-controlled module object via txmmodulemanagermemoryload / txmmodulemanagerinplaceload — APIs that take ONLY a base pointer, no image length, so every size/offset field in TXMMODULEPREAMBLE is fully...

5.6CVSS5.8AI score0.00075EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/29 5:38 p.m.•9 views

CVE-2026-102711

The ThreadX loadable-module loader contains two issues triggered when a device loads an attacker-controlled module via the _txm_module_manager_memory_load or _txm_module_manager_in_place_load APIs. Because these APIs accept only a base pointer without an image length, fields in TXM_MODULE_PREAMBL...

5.6CVSS5.8AI score0.00075EPSS
SaveExploits0References1
Rows per page
Query Builder