IDA2Obj

IDA2Obj IDA2Obj ist ein Werkzeug zur Implementierung von SBI Static Binary Instrumentation. Der Arbeitsablauf ist einfach: Extrahiere Objektdateien COFF direkt aus einer ausführbaren Binärdatei. Verlinke die Objektdateien zu einer neuen Binärdatei, die fast identisch zur alten ist. Während des...

COFFLoader

COFF Loader Questo è un loader COFF veloce e sporco noto anche come Beacon Object Files. Attualmente può eseguire BOF non modificati, quindi può essere usato per test senza che un agente CS lo esegua. L'unica eccezione è che le funzioni di compatibilità beacon relative all'iniezione sono...

pybof

PyBOF Execute Beacon Object files por meio do python carregamento e execução em memória de BOFs O PyBOF permite que o Python3 carregue Beacon Object Files via bytes e execute uma função BOF alvo em um interpretador Python Uso Básico Executar um BOF simples sem argumentos obrigatórios root@kitploi...

CoffeeLdr

CoffeeLdr CoffeeLdr è un loader per i cosiddetti Beacon Object Files. Questo progetto può essere utilizzato per testare i Beacon Object file senza usare il framework Cobalt Strike oppure può essere usato per dare agli implant personalizzati un modo per eseguire BOF progettati per Cobalt Strike...

PrivKit

PrivKit Una raccolta di file oggetto beacon BOF per controlli di escalation dei privilegi locali su Windows. Descrizione PrivKit è uno strumento open-source che permette a red teamer e penetration tester di identificare rapidamente i comuni vettori di escalation dei privilegi locali su Windows...

BRC4-BOF-Artillery

Generic Questo repository include una raccolta di BOF generici che ho scritto nel corso del tempo. Questo repository si concentra esclusivamente sul porting e sull'esecuzione, senza modificare il codice sorgente originale per la stabilità. Sebbene in futuro possa condurre ulteriori test, non è...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the ld process when handling specially crafted 32-bit XCOFF object files. An attacker can cause information disclosure or application crash by supplying a malicious file that manipulates unvalidated fields used as...

EulerOS 2.0 SP15 : binutils (EulerOS-SA-2026-2476)

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The...

Binutils: binutils: arbitrary code execution via malformed xcoff object file processing

...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the read process of the OBJ file parser when handling crafted OBJ files. An attacker can cause a denial of service or obtain sensitive information by persuading a victim to open a specially crafted OBJ file that...

EUVD-2026-26600

A heap-based out-of-bounds read vulnerability in RWObjReader::read in the OBJ file parser in Open CASCADE Technology OCCT V800rc5 allows user-assisted attackers to cause a denial of service or obtain sensitive information by persuading a victim to open a crafted OBJ file. The issue occurs because...

Red Hat Enterprise Linux 安全漏洞

Red Hat Enterprise Linux is a Linux operating system for enterprise users developed by Red Hat, Inc. Red Hat Enterprise Linux 10 contains a security vulnerability. This vulnerability stems from improper handling of special XCOFF object files during linking. A local attacker can trick users into...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the processing of XCOFF object files. An attacker can execute unauthorized code or commands by convincing a user to process a specially crafted file. Remediation A fix was pushed into the master branch but...

AZL-80877 CVE-2026-4647 affecting package binutils for versions less than 2.41-11

A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially crafted XCOFF object files, where a relocation type value is not properly validated before being used. This can caus...

AZL-80904 CVE-2026-4647 affecting package gdb for versions less than 13.2-7

A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially crafted XCOFF object files, where a relocation type value is not properly validated before being used. This can caus...

CVE-2026-4647

A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially crafted XCOFF object files, where a relocation type value is not properly validated before being used. This can caus...

CVE-2026-4647 Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library

A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially crafted XCOFF object files, where a relocation type value is not properly validated before being used. This can caus...

Linux Distros Unpatched Vulnerability : CVE-2026-4647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the processing of XCOFF object files due to improper validation of relocation type values. An attacker can cause application crashes or access unintended memory contents by supplying a specially crafted XCOFF file ...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the initializesections function of the Object File Handler. An attacker can execute arbitrary code or cause a denial of service by providing specially crafted object files to the application during local...