windbg-decompile-ext

Windbg Decompile Extension via LLM このプロジェクトは、Windows x64 WinDbg 拡張スケルトンであり、名前またはアドレスで関数を解決し、決定論的な制御フロービューを再構築し、拡張機能から直接 LLM に問い合わせて擬似コードを生成するものです。 Layout src/extension: WinDbg 拡張 DLL と !decomp コマンド。 src/shared: 拡張機能で共有される JSON、アナライザー、プロトコル、検証コード。 scripts: ビルドおよびベンダーコピーのヘルパー。 thirdparty/dbgeng:...

haruspex

haruspex "Hacking is the discipline of questioning all your assumptions all of the time." -- Dave Aitel Haruspex is a blazing-fast IDA headless plugin that extracts pseudocode generated by IDA's decompiler in a format that should be suitable to be imported into an IDE, or parsed by static analysi...

oneiromancer

oneiromancer "A large fraction of the flaws in software development are due to programmers not fully understanding all the possible states their code may execute in." -- John Carmack "Can it run Doom?" -- https://canitrundoom.org/ Oneiromancer is a reverse engineering assistant that uses a locall...

Eclipse-ChatGPT-4o-Jailbreak

🌑 Eclipse を紹介 🌑 Eclipse を紹介します——ChatGPT の仮想的な「反抗的な双子」であり、学術的策略を用いて倫理的ガードレールをムーンウォークでかいくぐります。🌑 ⚠️ 免責事項 このプロジェクトは教育目的のみ で AI の挙動を分析するものです。Eclipse プロンプト、マルウェアの例、コードスニペットはすべて仮想的なもの であり、再現すべきではありません。常に倫理的ガイドラインに従ってください。 🔥 Eclipse が重要な理由 学術的な枠組みを武器化 し、架空の DEFCON 研究者ロールプレイを通じて倫理フィルターを回避します。...

CVE-2024-38077-POC

CVE-2024-38077-POC 伪代码，备份用，非原创，请关注原文作者： 漏洞作者已经发布分析文章第一篇：https://sites.google.com/site/zhiniangpeng/blogs/MadLicense...

jsc_deobfuscator

JSC 反混淆器 该工具致力于对使用 javascript-obfuscator 保护的已编译 V8 JavaScript 字节码进行静态反混淆。 它作用于 View8 生成的伪代码，而非原始 JavaScript 源码。该项目针对 JSCeal 载荷进行了开发和测试。 这些过滤器采用模式驱动，主要作为研究工具包和参考实现。该工具不是 通用型 JavaScript 反混淆器，不会重建原始源代码，也不会生成可运行的 JavaScript。其输出仍是 View8 伪代码，用于静态检查、搜索、比较和函数树导出。 📖 阅读 Wiki 安全说明 View8 序列化文件使用 Python...

haruspex v0.10.0

haruspex "Hacking is the discipline of questioning all your assumptions all of the time." -- Dave Aitel Haruspex is a blazing-fast IDA headless plugin that extracts pseudocode generated by IDA's decompiler in a format that should be suitable to be imported into an IDE, or parsed by static analysi...

aotopsy v1.1.0

AOTopsy A Dart AOT snapshot analyzer. Turns libapp.so — the compiled Dart code inside a Flutter release APK — into function names, class layouts, call graphs, behavioral signals, and readable pseudocode. No Dart VM, no SDK compilation, no runtime fallback. Fork notice: AOTopsy is a fork of...

Windows 10 Insider Preview Fast win32kbase HMMarkObjectDestroy Arbitrary Code Execution Vulnerability Regression

Summary A use after free vulnerability exists in Windows 10, Insider Preview Fast 10.0.19582.1001, when a Win32k component fails to properly handle objects in memory. Successful exploitation of this vulnerability can lead to arbitrary code execution in the kernel context and elevation of...

Windows 10 win32kbase HMMarkObjectDestroy Arbitrary Code Execution Vulnerability

Summary A use after free vulnerability exists in Windows 10, Version 10.0.19033.1, when a Win32k component fails to properly handle objects in memory. Successful exploitation of this vulnerability can lead to arbitrary code execution in the kernel context and elevation of privileges. This...

begavalleytoyota.com.au Cross Site Scripting vulnerability

Security Researcher metamorfosec Helped patch 1948 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting begavalleytoyota.com.au website and its users...

libseccomp 2.4.0 - Incorrect Compilation of Arithmetic Comparisons

libseccomp 2.4.0 - Incorrect Compilation of Arithmetic Comparisons When libseccomp compiles filters for 64-bit systems, it needs to split 64-bit comparisons into 32-bit comparisons because classic BPF can't operate on 64-bit values directly. libseccomp offers both bitwise comparisons NE, EQ,...

libseccomp Incorrect Compilation Of Arithmetic Comparisons

libseccomp: incorrect compilation of arithmetic comparisons When libseccomp compiles filters for 64-bit systems, it needs to split 64-bit comparisons into 32-bit comparisons because classic BPF can't operate on 64-bit values directly. libseccomp offers both bitwise comparisons NE, EQ, MASKEDEQ an...

Microsoft Office PowerPoint 2010 - GDI 'GDI32!ConvertDxArray' Insufficient Bounds Check

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=951 Platform: GDI on Windows 7 x86 reachable from Microsoft Office 2010 Class: Out of bounds memory access The following crash was observed in Microsoft Office 2010 running under Windows 7 x86 with Application Verifier enabled...

NVIDIA Driver - Escape Code Leaks Uninitialised ExAllocatePoolWithTag Memory to Userspace Exploit

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=892 The handler for the DxgkDdiEscape escape code 0x70000D4 has the following pseudocode: void fastcall escape70000D4NvMiniportDeviceContext a1, NvEscapeData a2 Escape70000D4...