ABD

고급 바이너리 디오브퓨케이션 이 저장소는 글로벌 사이버보안 캠프GCC 도쿄와 2020년 Security Camp 국가 워크숍에서 진행된 고급 바이너리 디오브퓨케이션Advanced Binary Deobfuscation 과정의 자료를 포함합니다. 과정 개요 리버스 엔지니어링은 특히 바이너리 코드가 난독화obfuscation된 경우 쉽지 않습니다. 난독화가 수행되면 순수한 기법만으로는 바이너리를 정확하게 분석할 수 없습니다. 이 과정에서는 난독화 원리특히 악성코드에 사용되는, 난독화된 코드 분석의 이론과 실제, 그리고 디오브퓨케이션...

Triton

Triton 은 동적 바이너리 분석 라이브러리입니다. 이 라이브러리는 프로그램 분석 도구를 구축하고, 리버스 엔지니어링을 자동화하며, 소프트웨어 검증을 수행하거나 코드를 에뮬레이션할 수 있는 내부 구성 요소를 제공합니다. 동적 심볼릭 실행 동적 테인트 분석 x86 , x86-64 , ARM32 , AArch64 및 RISC-V 32/64 ISA 의미론의 AST 표현 표현식 합성 SMT 단순화 패스 LLVM 및 Z3 로의 리프팅 및 역방향 Z3 및 Bitwuzla 에 대한 SMT 솔버 인터페이스 C++ 및 Python API...

zeno

Zeno 프레임워크 설치 root@kitploit: cd git clone https://github.com/Traxes/zeno --recursive sudo pip3 install termcolor tqdm git clone https://github.com/Z3Prover/z3 --recursive cd z3 python3 scripts/mkmake.py --python cd build make sudo make install cd /zeno 사용법 root@kitploit: /zeno$...

Fault-Injection-Finder

フォールトインジェクションファインダー root@kitploit: ▄▖ ▜ ▗ ▄▖ ▘ ▗ ▘ ▄▖▘ ▌ ▙▖▀▌▌▌▐ ▜▘ ▐ ▛▌ ▌█▌▛▘▜▘▌▛▌▛▌ ▙▖▌▛▌▛▌█▌▛▘ ▌ █▌▙▌▐▖▐▖ ▟▖▌▌ ▌▙▖▙▖▐▖▌▙▌▌▌ ▌ ▌▌▌▙▌▙▖▌ ▙▌ Geeoon Chung と Nate Snyder このリポジトリは、私たちのフォールトインジェクション攻撃プロジェクトのソフトウェア側です。ハードウェア側は、このリポジトリ を確認してください。 プロジェクト全体...

toy-wasm-symbexp

toy-wasm-symbexp これはおもちゃのWASMシンボリックインタプリタです。以下の記事の内容を例示しています: パート1 - 導入 パート2 - 具象インタプリタの作成 - この段階のコードを閲覧 パート3 - シンボリックインタプリタの作成 - この段階のコードを閲覧 パート4 - シンボリックインタプリタの作成とチャレンジ解決！ - この段階のコードを閲覧 使い方 便利な Makefile が、プログラムが正しく動作するかをテストするのに役立ちます: root@kitploit: $ make test $ make part1-custom $ make...

LoongBleed

LoongBleed 中文 LoongBleed はハードウェア脆弱性であり、概念的には ZenBleed CVE-2023-20593 に類似しています — LSX 128ビット SIMD と LASX 256ビット SIMD の両方を実装した Loongson LA464/LA664 プロセッサに影響を与えます。 LoongArch では、LSX の $vr レジスタ 128ビット は LASX の $xr レジスタ 256ビット の下半分とエイリアスしています。LSX 命令と基本的な浮動小数点演算は、下位 128 ビット またはその一部 のみを操作するように定義されており、対応する...

vendor-android-cves

vendor-android-cves ベンダー製Android CVE用のPOC/ファジングスクリプト/ハーネスのコレクション。BlackHat ASIA 2022で発表されたものも含みます: https://www.blackhat.com/asia-22/briefings/schedule/the-hidden-rce-surfaces-that-control-the-droids-26083 更新:...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: sched/smt: Fixed the imbalance in schedsmtpresent. I received the following warning during the stress test: jump label: negative count! WARNING: CPU: 3, PID: 38, at kernel/jumplabel.c:263, statickeyslowtrydec+0x9d/0xb0 Call Trace...

CVE-2026-89517

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix rq-corepick corruption under core scheduling Core scheduling's picknexttask picks what to run on every SMT sibling of the core in a single pass under the shared core-wide rq lock. The selection state is consistent...

CVE-2026-89517: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix rq-corepick corruption under core scheduling Core scheduling's picknexttask picks what to run on every SMT sibling of the core in a single pass under the shared core-wide rq lock. The selection state is consistent...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053293)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053293 advisory. In the Linux kernel, the following vulnerability has been resolved: sched/smt: Fix unbalance schedsmtpresent dec/inc I got the following warn report while doing stre...

SUSE CVE-2026-72016

In the Linux kernel, the following vulnerability has been resolved: cpu/hotplug: Fix NULL kobject warning in cpuhpsmtenable On arm64, when booting with maxcpus greater than the number of present CPUs e.g., QEMU -smp cpus=4,maxcpus=8, some CPUs are marked as 'present' but have not yet been...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: arch/arm64: Fixed the topology initialization for core scheduling Arm64 systems rely on storecputopology to call updatesiblingsmasks, in order to transfer the topology information to the various CPU masks. This must be done befor...

EUVD-2026-59115

In the Linux kernel, the following vulnerability has been resolved: cpu/hotplug: Fix NULL kobject warning in cpuhpsmtenable On arm64, when booting with maxcpus greater than the number of present CPUs e.g., QEMU -smp cpus=4,maxcpus=8, some CPUs are marked as 'present' but have not yet been...

CVE-2026-72016 cpu/hotplug: Fix NULL kobject warning in cpuhp_smt_enable()

In the Linux kernel, the following vulnerability has been resolved: cpu/hotplug: Fix NULL kobject warning in cpuhpsmtenable On arm64, when booting with maxcpus greater than the number of present CPUs e.g., QEMU -smp cpus=4,maxcpus=8, some CPUs are marked as 'present' but have not yet been...

CVE-2026-72016 cpu/hotplug: Fix NULL kobject warning in cpuhp_smt_enable()

In the Linux kernel, the following vulnerability has been resolved: cpu/hotplug: Fix NULL kobject warning in cpuhpsmtenable On arm64, when booting with maxcpus greater than the number of present CPUs e.g., QEMU -smp cpus=4,maxcpus=8, some CPUs are marked as 'present' but have not yet been...

PT-2026-72205

In the Linux kernel, the following vulnerability has been resolved: cpu/hotplug: Fix NULL kobject warning in cpuhp smt enable On arm64, when booting with maxcpus greater than the number of present CPUs e.g., QEMU -smp cpus=4,maxcpus=8, some CPUs are marked as 'present' but have not yet been...

NeuroLog: Reasoning You Can Audit -- Neuro-Symbolic Vulnerability Discovery Via LLM Facts, Datalog, and SMT

Vulnerability discovery on C/C++ source asks the analyst to choose between heavyweight static analysers, which need a working build before a single query runs, and free-form LLMs, which read source readily but invent details and lose track of cross-function dataflow on real codebases. We present...

SUSE CVE-2026-23332

In the Linux kernel, the following vulnerability has been resolved: cpufreq: intelpstate: Fix crash during turbo disable When the system is booted with kernel command line argument "nosmt" or "maxcpus" to limit the number of CPUs, disabling turbo via: echo 1...

Malicious Package

Overview @smt-front/tracker is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...