0xGUARD

📄 Funktionen Modul-Remapping Thread-Filterung Modul-Ausblendung Speicherprüfung Integritätsprüfung Anti-DLL-Injection Anti-Debugging Prozessrichtlinie Literal-String-Verschleierung Kompatibilität mit Themida/VMProtect ✔️ Abhängigkeiten Windows 711 Visual Studio 2019 🔧 Verwendung 1. Legen Sie die...

themida-devirt

Esempio di Devirtualizzatore Themida/CodeVirtualizer Questo progetto dimostra l'effetto della devirtualizzazione di codice protetto da Themida o CodeVirtualizer. Di seguito, puoi vedere un semplice esempio che mostra il codice prima della virtualizzazione e il codice dopo la devirtualizzazione...

themida-unmutate

themida-unmutate Uno strumento Python 3 per deoffuscare staticamente funzioni protette da Themida, WinLicense e Code Virtualizer 3.x tramite offuscamento basato su mutazione. Lo strumento è stato testato su Themida fino alla versione 3.1.9. Ci si aspetta che funzioni anche su WinLicense e Code...

unlicense

Unlicense Ein Python-3-Tool zum dynamischen Entpacken von ausführbaren Dateien, die mit Themida/WinLicense 2.x und 3.x geschützt sind. Warnung: Dieses Tool führt die ausführbare Zieldatei aus. Stelle sicher, dass du dieses Tool in einer VM verwendest, wenn du dir nicht sicher bist, was die...

CVE-2012-4865

Buffer overflow in Oreans Themida 2.1.8.0 allows remote attackers to execute arbitrary code via a crafted .TMD file...

SupremeBot and Mario cross the finish line together

Researchers have reported how popular game installers like Super Mario Games are being used to deliver malware. The malicious components include cryptominers, the SupremeBot mining client, and the open-source Umbral stealer. The game installers route offers some very distinct advantages to the...

A Decade-Long Chinese Espionage Campaign Targets Southeast Asia and Australia

A previously undocumented Chinese-speaking advanced persistent threat APT actor dubbed Aoqin Dragon has been linked to a string of espionage-oriented attacks aimed at government, education, and telecom entities chiefly in Southeast Asia and Australia dating as far back as 2013. "Aoqin Dragon seek...

Raccoon Stealer Crawls Into Telegram

A credential stealer that first rose to popularity a couple of years ago is now abusing Telegram for command-and-control C2. A range of cybercriminals continue to widen its attack surface through creative distribution means like this, researchers have reported. Raccoon Stealer, which first appear...

Cellebrite UFED 7.29 Hardcoded ADB Authentication Keys Vulnerability

Cellebrite UFED versions 5.0 through 7.29 use four hardcoded RSA private keys to authenticate to the ADB daemon on target devices. Extracted keys can be used to place evidence onto target devices when performing a forensic extraction. Title: Cellebrite Hardcoded ADB Authentication Keys Publicatio...

Cellebrite UFED 7.29 Hardcoded ADB Authentication Keys

KL-001-2020-001 : Cellebrite Hardcoded ADB Authentication Keys Title: Cellebrite Hardcoded ADB Authentication Keys Advisory ID: KL-001-2020-001 Publication Date: 2020.04.13 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2020-001.txt 1. Vulnerability Details Affected Vendor...

Cellebrite Hardcoded ADB Authentication Keys

Vulnerability Details Affected Vendor: Cellebrite Affected Product: UFED Affected Version: 5.0 - 7.29 Platform: Embedded Windows CWE Classification: CWE-321: Use of hardcoded cryptographic keys CVE ID: CVE-2020-11723 2. Vulnerability Description Cellebrite UFED uses four hardcoded RSA private...

Analysis antivirus BitDefender of an integer overflow vulnerability, the first part-the vulnerability warning-the black bar safety net

In software vulnerabilities“Pantheon”, the security software vulnerability is considered other than software vulnerabilities in more serious. We rely on security software to defend against attackers, so our defensive system in the vulnerability only allows an attacker to cause harm, but also will...

Bitdefender Internet Security Themida Emulator Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Oreans Themida 2.1.8.0 - TMD File Handling Buffer Overflow Vulnerability

No description provided by source. / Oreans Themida v2.1.8.0 TMD File Handling Buffer Overflow Vulnerability Vendor: Oreans Technologies Product web page: http://www.oreans.com Affected version: 2.1.8.0 32/64bit Summary: Advanced Windows software protection system, developed for software develope...

CVE-2012-4865

Buffer overflow in Oreans Themida 2.1.8.0 allows remote attackers to execute arbitrary code via a crafted .TMD file...

Buffer overflow

Buffer overflow in Oreans Themida 2.1.8.0 allows remote attackers to execute arbitrary code via a crafted .TMD file...

CVE-2012-4865

CVE-2012-4865 arises from a boundary error in Oreans Themida 2.1.8.0 when processing .TMD files, causing a buffer overflow that can allow remote code execution. The vulnerability is documented across multiple sources (e.g., Red Hat, NVD, CVE lists, and Zero Science Lab), with details indicating t...

CVE-2012-4865

Buffer overflow in Oreans Themida 2.1.8.0 allows remote attackers to execute arbitrary code via a crafted .TMD file...

Oreans Themida 2.1.8.0 - '.TMD' File Handling Buffer Overflow

/ Oreans Themida v2.1.8.0 TMD File Handling Buffer Overflow Vulnerability Vendor: Oreans Technologies Product web page: http://www.oreans.com Affected version: 2.1.8.0 32/64bit Summary: Advanced Windows software protection system, developed for software developers who wish to protect their...

Oreans Themida v2.1.8.0 TMD File Handling Buffer Overflow Vulnerability

Summary Advanced Windows software protection system, developed for software developers who wish to protect their applications against advanced reverse engineering and software cracking. Description The vulnerability is caused due to a boundary error in the processing of a project file, which can ...