23 matches found
hollows_hunter
hollowshunter Hollows Hunter is a command-line application based on PE-sieve passive memory scanner. Recognizes and dumps a variety of potentially malicious implants replaced/implanted PEs, shellcodes, hooks, in-memory patches. While in case of PE-sieve you can select the process only by its PID,...
PELoader
PELoader PELoader implementa varias técnicas de inyección de shellcode y utiliza la librería libpeconv para cargar archivos PE cifrados en lugar de inyectar shellcode en un hilo remoto. Se implementaron las siguientes técnicas: Module Stomping LoadLibrary Module Stomping NtMapViewOfSection PoC...
libpeconv
libPeConv Una biblioteca para cargar y manipular archivos PE. Objetivos El objetivo de libPEConv era crear una "navaja suiza" para la carga personalizada de archivos PE. Reúne varias funciones auxiliares que puedes integrar rápidamente en tu propio loader. Por ejemplo: reasignar secciones, aplica...
EUVD-2023-27561
Malicious code in bioql PyPI...
EUVD-2023-27562
Malicious code in bioql PyPI...
CVE-2023-23462
Libpeconv – integer overflow, before commit 75b1565 30/11/2022...
CVE-2023-23461
Libpeconv – access violation, before commit b076013 30/11/2022...
CVE-2023-23461
Libpeconv – access violation, before commit b076013 30/11/2022...
CVE-2023-23462
Libpeconv – integer overflow, before commit 75b1565 30/11/2022...
Code injection
Libpeconv – access violation, before commit b076013 30/11/2022...
Integer overflow
Libpeconv – integer overflow, before commit 75b1565 30/11/2022...
Libpeconv 安全漏洞
libPeConv is a library for loading and manipulating PE files by hasherezade individual developers. A security vulnerability exists in versions prior to libpeconv b076013 30/11/2022, which stems from an access conflict issue...
Libpeconv 输入验证错误漏洞
libPeConv is a library for loading and manipulating PE files by hasherezade individual developers. A security vulnerability exists in versions prior to Libpeconv 75b1565 30/11/2022 that stems from the presence of an integer overflow...
CVE-2023-23461 Libpeconv – access violation
Libpeconv – access violation, before commit b076013 30/11/2022...
CVE-2023-23462 Libpeconv – integer overflow
Libpeconv – integer overflow, before commit 75b1565 30/11/2022...
CVE-2023-23462 Libpeconv – integer overflow
Libpeconv – integer overflow, before commit 75b1565 30/11/2022...
CVE-2023-23461 Libpeconv – access violation
Libpeconv – access violation, before commit b076013 30/11/2022...
PT-2023-18971
Name of the Vulnerable Software and Affected Versions Libpeconv versions before commit 75b1565 Description The issue is related to an integer overflow in Libpeconv. Recommendations For versions before commit 75b1565, update to a version that includes commit 75b1565 or later to resolve the issue...
PT-2023-18970
Name of the Vulnerable Software and Affected Versions Libpeconv versions before commit b076013 Description The issue is related to an access violation in Libpeconv. The estimated number of potentially affected devices and details about real-world incidents are not provided. Recommendations For...
