280 matches found
peanalyzer
peanalyzer Advanced Portable Executable File Analyzer Python 3.5.2 : Tested Working Usage python peanalyzer.py --file file.exe --show all|file-path|general|dos-header|file-header|optional-header|data-directory|section-headers|imports python peanalyzer.py --file file.exe --disassemble all...
PEpper
PEpper An open source tool to perform malware static analysis on P ortable E xecutable Installation root@kitploit: eva@paradise:$ git clone https://github.com/blackeko/PEpper/ eva@paradise:$ cd PEpper eva@paradise:$ pip3 install -r requirements.txt eva@paradise:$ python3 pepper.py ./malwaredir...
PortEx
PortEx Welcome to PortEx PortEx is a Java library for static malware analysis of Portable Executable files. Its focus is on PE malformation robustness, and anomaly detection. PortEx is written in Java and Scala, and targeted at Java applications. Features Reading header information from: MSDOS...
pefile
pefile pefile 是一个跨平台的 Python 模块，用于解析和处理可移植可执行 PE 文件。PE 文件头中包含的大部分信息均可访问，所有节的详细信息和数据也是如此。 Windows 头文件中定义的结构将作为 PE 实例中的属性访问。字段/属性的命名将尽量遵循这些头文件中的命名约定。仅为了方便而添加的快捷方式才会偏离该约定。 pefile 需要对 PE 文件的布局有一些基本了解——有了它，就可以探索 PE 文件格式的几乎所有功能。 安装 通过 pip 安装 pefile： pip3 install pefile 功能特性 pefile 可以实现的一些任务包括： 检查头部 分析节...
peframe
======= peframe peframe is a open source tool to perform static analysis on Portable Executable malware and generic suspicious file. It can help malware researchers to detect packer, xor, digital signature, mutex, anti debug, anti virtual machine, suspicious sections and functions, macro and much...
enumy
Enumy Enumy 是一个 超快便携可执行文件 ，你可以在渗透测试或 CTF 的后利用阶段将其放入目标 Linux 机器上。运行 enumy 将枚举目标主机，查找 常见安全漏洞 。 安装 你可以从 x86 或 x64 的发布标签页下载最终的二进制文件。 静态链接到 musl 将最终的 enumy 二进制文件传输到目标机器。 最新发布 root@kitploit: ./enumy 谁应该使用 Enumy 渗透测试人员可以在目标机器上运行，以便为报告提出可追溯的问题。 CTF 玩家可以用它来识别他们可能遗漏的东西。 好奇的人可以查看 enumy 在自己的本地机器上发现了多少问题？ 选项...
collisions
Hash collisions and exploitations By Ange Albertini and Marc Stevens. FAQ TL;DR Q: Is it possible to make a file get an arbitrary MD2/MD4/MD5/MD6/SHA1/SHA2/SHA3, or the same hash as another file? A: No. Q: Can one create 2 different files with the same hash? A: With MD5, in a few seconds on a...
pdbdownload
一个用于下载与可移植可执行文件（PE）关联的 PDB 文件的实用工具。 功能 从 msdl.microsoft.com 下载 PDB 符号。 处理单个或批量 PE 文件。 演示 https://github.com/user-attachments/assets/095fb528-65a6-488e-bfa0-46101738a451 用法 root@kitploit: $./pdbdownload-linux-amd64 -h pdbdownload v1.0 - by Remi GASCOU Podalirius Usage: pdbdownload --debug...
Astra Linux – Vulnerability in binutils
A issue was discovered in the Binary File Descriptor BFD library also known as libbfd, as distributed in GNU Binutils 2.31. A heap-based buffer overflow in the bfdgetl32 function in libbfd.c allows an attacker to cause a denial of service through a crafted PE file. This vulnerability can be...
SUSE-SU-2026:22574-1 Security update for clamav
This update for clamav fixes the following issues: Update to version 1.5.3. Security issues fixed: - CVE-2026-20213: out-of-bounds write due to improper boundary checks for content in PE files during scanning bsc1270107. - CVE-2026-20214: out-of-bounds write due to improper boundary checks for...
SUSE CVE-2026-20213
A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PE file...
The vulnerability of the PE-file processing mechanism of the ClamAV antivirus program allows a hacker to induce a service failure.
The vulnerability of the PE-file processing mechanism in the ClamAV antivirus program lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted file...
UBUNTU-CVE-2026-20213
A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PE file...
UBUNTU-CVE-2026-20214
A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in FSG...
CVE-2026-20213
A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PE file...
CVE-2026-20213
A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PE file...
DEBIAN-CVE-2026-20213
A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PE file...
CVE-2026-20213
A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PE file...
CVE-2026-20213
A vulnerability in the PE file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PE file...
CVE-2026-20214 ClamAV FSG File Format Processing Out-of-Bounds Memory Corruption Vulnerability
A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in FSG...