lst2x64dbg

lst2x64dbg 此命令提取给定 LST 文件中的所有标签（该文件作为单一参数提供）。根据提取的标签，在当前目录中创建一个 x64dbg 数据库。 LST 文件可以在 IDA 中通过 文件 菜单生成：生成文件 - 创建 LST 文件... 示例 root@kitploit: $ lst2x64dbg sample.lst ghidra2x64dbg 此命令提取给定 CSV 文件中的所有标签（该文件作为单一参数提供）。根据提取的标签，在当前目录中创建一个 x64dbg 数据库。必须提供镜像基址值。 CSV 文件可以在 Ghidra 中通过 窗口 菜单选择 符号表 生成。...

CVE-2025-2907

CVE-2025-2907 Exploit Details Published : 2025-04-04 Updated : 2025-03-28 Severity : Critical CVSS Score: 9.8 CWE : CWE-862: CWE-862 Missing Authorization Affected Versions : All versions from n/a through 12.3.1 Researcher :...

ida-pro-mcp

IDA Pro MCP Simple MCP Server to allow vibe reversing in IDA Pro. https://github.com/user-attachments/assets/6ebeaa92-a9db-43fa-b756-eececce2aca0 The binaries and prompt for the video are available in the mcp-reversing-dataset repository. Prerequisites Python 3.11 or higher Use idapyswitch to...

CVE-2026-8732-POC

CVE-2026-8732 - WordPress WP Google Map Pro Mass Scanner & Auto Admin Creator 📌 Description This tool exploits CVE-2026-8732 , a vulnerability in the WP Google Map Pro plugin for WordPress. The vulnerability allows an unauthenticated attacker to obtain a valid wpmptoken via an AJAX endpoint...

allthingsida

操作系统 MS Windows PEB/LDRDATATABLEENTRY 枚举脚本 PEB/TEB 结构 x64 PEB/TEB 结构 x86...

CVE-2023-23488-pmpro-2.8

Dockerizing a Vulnerability: CVE-2023-23488 This project aims to dockerize a specific vulnerability using Docker. The goal is to create an isolated environment in which the vulnerability can be exploited and tested securely. Vulnerable Application Paid Memberships Pro v2.9.8 WordPress Plugin -...

oregami

Oregami """ ¿Para qué se usa este registro? Mmm.. Mejor lo renombro a nombremuyúnico, hago una búsqueda textual y encuentro todas las referencias. Ok.. Esperando a que termine la búsqueda.. ya casi.. ¡Hecho! Ahora solo necesito entender cuál de los resultados de búsqueda es relevante para el marc...

obfDetect

Obfuscation Detection Authored by: mcdulltii Automatically detect obfuscated code and other state machines Description: Scripts to automatically detect obfuscated code and state machines in binaries. Implementation is based on IDA 7.4+ Python3. Check out the following blog posts for more...

burp-automation

BurpOMation Performing automated scan using Burp Suite Pro & Vmware Burp Rest API with Robot Framework using Python3. Blog Visit blog for detailed explanation of each step. Explanation & Installation Blog What it does One click run using bash installs all the dependencies with verbose...

CVE-2026-43499-armv7

CVE-2026-43499 GhostLock — ARM32 Huawei Watch 4 Pro Linux kernel privilege escalation exploit attempt based on CVE-2026-43499 GhostLock — Huawei Watch 4 Pro MDS-AL00, armv7l Project Overview This project is a GhostLock kernel vulnerability exploit attempt targeting the Huawei Watch 4 Pro MDS-AL00...

findyara-ida

FindYara Use this IDA python plugin to scan your binary with yara rules. All the yara rule matches will be listed with their offset so you can quickly jump to them! 🍻 All credit for this plugin and the code goes to David Berard @p0ly 🍻 This plugin is copied from David's excellent findcrypt-yara...

CVE-2024-5420-XSS

Description A vulnerability was found in utnserver Pro, utnserver ProMAX, and INU-100 version 20.1.22 and earlier, affecting the device description parameter in the web interface. This flaw allows stored cross-site scripting XSS, enabling attackers to inject JavaScript code. The attack can be...

ipyida

= IPyIDA IPyIDA 是一个纯 Python 解决方案，用于为 IDA Pro 添加 IPython 控制台。使用 可打开一个嵌入了 Qt 控制台 的窗口。随后你便可以享受 IPython 的自动补全、在线帮助、等宽字体输入框、图表等功能。 你也可以在 IDA 之外使用 ipython console --existing 连接到该内核。 image::ipyida-screenshot.pngIPyIDA screenshot,width=100% == 安装 IPyIDA 应当兼容 Windows、OS X 和 Linux 上的 IDA 6.6 及更高版本。它已在最高至 I...

Taipan

Taipan is now a sponsored project. The Community sponsor will receive access to the laset version of Taipan Community Edition. The free version is release after three months from the release date. To know more visit: https://github.com/enkomio-sponsor/info or https://taipansec.com. Latest Communi...

ida_haru

+OPTIONS: ^: idaharu Scripts/plugins for IDA Pro Note: Old scripts don't work for IDA 8.x, but I leave them just for reference. esetcrackme IDA Pro loader/processor modules for ESET CrackMe driver VM stackstringstatic IDAPython script statically-recovering strings constructed in stack fnfuzzy...

CVE-2025-3054-Exploit

CVE-2025-3054 Exploit: Download here Details CVE ID : CVE-2025-3054 Published : June 5, 2025 CVSS : 8.8 Patch Available: No official patch yet Impact The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadfiles functi...

idasql

IDASQL 让任何 AI 智能体都能理解编译后的二进制文件。 IDASQL 是 IDA Pro 数据库的 SQL 接口，由 Elias Bachaalany 创建。它提供 30+ 个虚拟表，涵盖函数、交叉引用、字符串、类型、导入、反汇编和反编译。使用你的编码智能体中的 /idasql 技能即可完全无头工作——智能体在后台为你运行 IDA——或者打开 IDA 的界面，与你的编码智能体协作共同进行逆向工程。无需 IDAPython。无需脚本。只需 SQL。 为什么选择 SQL？ SQL 是每个 AI 智能体都已经掌握的通用查询语言。IDASQL...

how2heap

Educational Heap Exploitation This repo is for learning various heap exploitation techniques. We use Ubuntu's Libc releases as the gold-standard. Each technique is verified to work on corresponding Ubuntu releases. You can run apt source libc6 to download the source code of the Libc you are using...

wmiexec-Pro

wmiexec-Pro 新一代的 wmiexec.py。 目录 1. 简介 2. 特别感谢 3. 功能特性 4. 快速开始 安装 5. 使用方法 6. 截图 7. 工作原理 8. 免责声明 9. 参考资料 简介 新一代的 wmiexec.py，拥有更多新功能，所有操作仅需使用 135 端口（无需 SMB 连接），用于横向移动中的 AV 规避（Windows Defender、HuoRong、360） 回到顶部 特别感谢 @422926799 回到顶部 功能特性 主要功能：AV 规避 主要功能：无需 win32process 主要功能：仅需 135 端口。 新模块：AMSI 绕过...

Drag-and-Drop-Multiple-File-Uploader-PRO-Path-Traversal

CVE-2023-1112 - Drag and Drop Multiple File Uploader PRO - Contact Form 7 v5.0.6.1 Path Traversal Info Path Traversal in Drag and Drop Multiple File Uploader PRO - Contact Form 7 version 5.0.6.1 allows unauthenticated remote attacker to upload files anywhere writable on the remote server...