bytesrevealer

https://bytesrevealer.online/ VULNEX https://www.vulnex.com/ Bytes Revealer Version: 0.4 Bytes Revealer is a powerful reverse engineering and binary analysis tool designed for security researchers, forensic analysts, and developers. With features like hex view, visual representation, string...

fhex

Fhex — Полнофункциональный Hex-редактор Этот проект создан с целью разработки легкого, но полезного инструмента. Причина в том, что существующие hex-редакторы имеют различные ограничения например, слишком много зависимостей, отсутствие цветовой разметки hex и т.д.. Этот проект основан на движках...

fhex

Fhex - A Full-Featured HexEditor This project is born with the aim to develop a lightweight, but useful tool. The reason is that the existing hex editors have some different limitations e.g. too many dependencies, missing hex coloring features, etc.. This project is based on qhexedit2 , capstone...

CVE-2023-4590

CVE-2023-4590 PoC для Frhed Бесплатный шестнадцатеричный редактор v1.6.0 - Переполнение буфера SEH, написан dgndrn Использование Выполните exploit.py, скопируйте всю строку из созданного payload.txt, затем используйте её в качестве параметра для открытия Frhed.exe root@kitploit: Frhed.exe payload...

SharpEventPersist

SharpEventPersist Persistance par écriture/lecture de shellcode depuis le Journal des événements. Utilisation L'outil SharpEventPersist prend 4 paramètres sensibles à la casse : -file "C:\path\to\shellcode.bin" -instanceid 1337 -source Persistence -eventlog "Key Management Service". Le shellcode...

CryptoTester

CryptoTester Un utilitaire pour jouer avec la cryptographie, conçu pour l'analyse des ransomwares. Vues Hexadécimales Toutes les vues hexadécimales utilisées dans CryptoTester offrent quelques capacités améliorées. Les octets nuls sont colorés en gris clair Les octets représentant des caractères...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

vmpdump

VMPDump A dynamic VMP dumper and import fixer, powered by VTIL. Works for VMProtect 3.X x64. Before vs After Usage VMPDump.exe "" -ep= -disable-reloc Arguments: : The ID of the target process, in decimal or hex form. : The name of the module which should be dumped and fixed. This can be an empty...

bin2shell

bin2shell bin2shell は、バイナリファイルからシェルコードを抽出するための非常に小さなユーティリティです。 root@kitploit: bash bin2shell.sh additionNum \x45\x6e\x74\x65\x72\x20\x4e\x75\x6d\x62\x65\x72\x20\x31\x20\x3a\x20\x45\x6e\x74\x65\x72\x20\x4e\x75\x6d ありがとう TOUHID SHAIKH...

CVE-2026-82648

WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the isSSRFSafeURL function that fails to normalize NAT64 addresses written in hexadecimal form. Attackers can bypass SSRF protections by supplying hex-encoded NAT64 addresses like 64:ff9b::a9fe:a9fe to reach cloud...

CVE-2026-82648

WWBN AVideo is vulnerable to a server-side request forgery (SSRF) filter bypass in the isSSRFSafeURL function. The root cause is a failure to normalize NAT64 addresses written in hexadecimal form . Attackers can bypass the SSRF protection by supplying hex-encoded NAT64 addresses such as 64:ff9b::...

CVE-2026-82648 WWBN AVideo SSRF Filter Bypass via NAT64 Hex Address

WWBN AVideo contains a server-side request forgery filter bypass vulnerability in the isSSRFSafeURL function that fails to normalize NAT64 addresses written in hexadecimal form. Attackers can bypass SSRF protections by supplying hex-encoded NAT64 addresses like 64:ff9b::a9fe:a9fe to reach cloud...

CVE-2023-20198

CVE-2023-20198 Controllore per CVE-2023-20198, non è un POC completo. Controlla solo l'implementazione e rileva se l'hex è presente nella risposta o meno...

linux-malware-detect

Linux Malware Detect LMD Malware scanner for Linux — multi-stage threat detection MD5, SHA-256, HEX, YARA, statistical analysis, ClamAV integration, real-time inotify monitoring, quarantine/clean/restore operations, and multi-channel alerting email, Slack, Telegram, Discord. C 2002-2026, R-fx...

bst

Binary String Toolkit Sommario Il Binary String Toolkit o BST in breve è un'utilità piuttosto semplice per convertire stringhe binarie in vari formati adatti all'inclusione in codici sorgente, come quelli utilizzati per sviluppare exploit e Proof of Concept nel campo della sicurezza...

IDArling

Warnung Dieses Projekt wird nicht mehr aktiv weiterentwickelt und der funktionsreichere und aktuellere Fork ist wahrscheinlich interessanter für Neulinge. Außerdem hat IDA eine offizielle Unterstützung für kollaborative Reverse-Engineering-Sitzungen angekündigt, und man könnte auch darauf warten...

doona

Doona - Network fuzzing tool .:: About ::. Doona is a fork of the Bruteforce Exploit Detector Tool BED. BED is a program which is designed to check daemons for potential buffer overflows, format string bugs etc. Doona is Australian for duvet. It adds a significant enough number of features/change...

Improper Handling of URL Encoding (Hex Encoding)

Overview fast-uri is a Dependency-free RFC 3986 URI toolbox Affected versions of this package are vulnerable to Improper Handling of URL Encoding Hex Encoding through the parseWithStatus, normalizeStringWithStatus, normalizeComparableURI, and resolve paths in index.js. An attacker can steer a URL...

Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: The PMK parameter is now passed as binary data, rather than hexadecimal data. It appears that the hexadecimal passphrase mechanism does not work on newer chips/firmwares e.g., BCM4387. There was actually...

Astra Linux – Vulnerability in TIF format

LibTIFF 4.3.0 has a out-of-bounds read issue in TIFFmemcpy in tifunix.c, especially in situations where a custom tag is used, and 0x0200 is the second value in the DE field...