patching

Patching - Interactive Binary Patching for IDA Pro Overview Patching assembly code to change the behavior of an existing program is not uncommon in malware analysis, software reverse engineering, and broader domains of security research. This project extends the popular IDA Pro disassembler to...

patching

Patching - Parcheo Binario Interactivo para IDA Pro Resumen No es poco común en el análisis de malware, la ingeniería inversa de software y campos más amplios de investigación en seguridad, parchear código ensamblador para cambiar el comportamiento de un programa existente. Este proyecto extiende...

shellen

Shellen General Shellen is an interactive shellcoding environment. If you want a handy tool to write shellcodes, then shellen may be your friend. Shellen can also be used as an assembly or disassembly tool. keystone and capstone engines are used for all of shellen's operations. Shellen only works...

sickle-pdk

Sickle - Kit de Desarrollo de Payloads Sickle es una herramienta que desarrollé originalmente para ayudarme a ser más eficaz, tanto en el desarrollo como en la comprensión de shellcode. Sin embargo, a lo largo de su desarrollo y uso, ha evolucionado hasta convertirse en un kit de desarrollo de...

fhex

Fhex - A Full-Featured HexEditor This project is born with the aim to develop a lightweight, but useful tool. The reason is that the existing hex editors have some different limitations e.g. too many dependencies, missing hex coloring features, etc.. This project is based on qhexedit2 , capstone...

QuickAsm

Quick Assembler Ensamblador y emulador x86/x86 sencillo experimental. Quick Assembler está construido con wxWidgets. Es mi primer intento de usar wxWidgets para algo real. He creado una compilación privada de wxWidgets que soporta el enlazado estático de wxWidgets con el enlazado estático de CRT...

iblessing

☠️ ██╗██████╗ ██╗ ███████╗███████╗███████╗██╗███╗ ██╗ ██████╗ ██║██╔══██╗██║ ██╔════╝██╔════╝██╔════╝██║████╗ ██║██╔════╝ ██║██████╔╝██║ █████╗ ███████╗███████╗██║██╔██╗ ██║██║ ███╗ ██║██╔══██╗██║ ██╔══╝ ╚════██║╚════██║██║██║╚██╗██║██║ ██║ ██║██████╔╝███████╗███████╗███████║███████║██║██║...

ShellcodeCompiler

Shellcode Compiler Shellcode Compiler is a program that compiles C/C++ style code into a small, position-independent and NULL-free shellcode for Windows x86 and x64 and Linux x86 and x64. It is possible to call any Windows API function or Linux syscall in a user-friendly way. Shellcode Compiler...

keystone

Keystone 引擎 Keystone 是一个轻量级、跨平台、多架构的汇编框架。 它提供了一些无与伦比的功能： 多架构，支持 Arm、Arm64 AArch64/Armv8、以太坊虚拟机、Hexagon、Mips、PowerPC、RISC-V、Sparc、SystemZ 和 X86（包括 16/32/64 位）。 干净/简单/轻量/直观的架构中立 API。 使用 C/C++ 语言实现，并提供 Java、Masm、C、PowerShell、Perl、Python、NodeJS、Ruby、Go、Rust、Haskell、VB6 和 OCaml 的绑定。 原生支持 Windows 和...

scare

scare - REPL y emulador de ensamblador simple y configurable scare es un REPL y emulador de ensamblador multiarquitectura para tu línea de comandos. No hay muchos REPLs de ensamblador modernos disponibles. Los que existen son o aplicaciones web opacas, o están ligados a una arquitectura/plataform...

EUVD-2020-23933

Malware in sbrugna...

EUVD-2020-23932

Malware in sbrugna...

CVE-2020-36404

Keystone Engine 0.9.2 has an invalid free in llvmks::SmallVectorImpl::SmallVectorImpl...

CVE-2020-36405

Keystone Engine 0.9.2 has a use-after-free in llvmks::X86Operand::getToken...

Keystone Engine Resource Management Error Vulnerability

Keystone Engine is an assembler framework. version 0.9.2 of Keystone Engine has a security vulnerability for which no details of the vulnerability are currently available...

Keystone Engine Buffer Overflow Vulnerability

Keystone Engine is an assembler framework, and a security vulnerability exists in Keystone Engine version 0.9.2, which stems from a stack-based buffer overflow in "processClientServerHello". No details of the vulnerability are currently available...

CVE-2020-36404

Keystone Engine 0.9.2 has an invalid free in llvmks::SmallVectorImpl::SmallVectorImpl...

CVE-2020-36405

Keystone Engine 0.9.2 has a use-after-free in llvmks::X86Operand::getToken...

CVE-2020-36404

Keystone Engine 0.9.2 has an invalid free in llvmks::SmallVectorImpl::SmallVectorImpl...

CVE-2020-36405

Keystone Engine 0.9.2 has a use-after-free in llvmks::X86Operand::getToken...