nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

tiny_tracer

tinytracer A Pin Tool for tracing: API calls, including input and output of selected functions defined local functions, and functions from statically linked libraries selected instructions: RDTSC, CPUID, INT inline system calls, including parameters of selected syscalls transition between section...

kekeo

kekeo kekeo is a little toolbox I have started to manipulate Microsoft Kerberos in C and for fun ASN.1 library In kekeo, I use an external commercial library to deal with Kerberos ASN.1 structures: OSS ASN.1/C http://www.oss.com/asn1/products/asn1-c/asn1-c.html It was the only code...

CVE-2020-27955

Git-lfs 원격 코드 실행 RCE 익스플로잇 CVE-2020-27955 .bat / powershell 버전 취약한 대상: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken 등. Dawid Golunski 발견 https://legalhackers.com https://exploitbox.io Windows에서 테스트됨: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code...

idacode

IDACode IDACode makes it easy to execute and debug Python scripts in your IDA environment without leaving Visual Studio Code. The VS Code extension can be found on the marketplace. IDACode is still in a very early state and bugs are to be expected. Please open a new issue if you encounter any...

blutter

Blutter Flutter Mobile Application Reverse Engineering Tool by Compiling Dart AOT Runtime Currently the application supports only Android libapp.so arm64 only. Also the application is currently work only against recent Dart versions. For high priority missing features, see TODO Environment Setup...

PSBits

PSBits 通常よりも少し深く掘り下げることを可能にする、（比較的）シンプルなソリューション群。 各フォルダには詳細を説明する独自の readme.md を置くべきです。ない場合は、コードの冒頭とインラインに詳細なコメントがあります。 ニュースレター：https://gtworek.ck.page/ 自分でコンパイルしたい場合は、無料版 Visual Studio のダウンロード、インストール、設定に関する詳細な手順をこちらで確認できます：...

systeminformer

System Informer A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc...

CVE-2018-8172

CVE-2018-8172 Microsoft Visual Studio CVE-2018-8172 원격 코드 실행 취약점 http://darkcert.com/2018/08/microsoft-visual-studio-remote-code-execution-cve-2018-8172/ https://twitter.com/SyFi2k...

CVE-2020-27955

Git-lfs 원격 코드 실행 RCE 익스플로잇 CVE-2020-27955 .bat / powershell 버전 취약한 대상: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken 등 발견자 Dawid Golunski https://legalhackers.com https://exploitbox.io Windows에서 테스트 완료: git, GitHub CLI gh, GitHub Desktop, Visual Studio...

reko

reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...

CVE-2020-27955-LFS

Git-lfs 원격 코드 실행 RCE 익스플로잇 CVE-2020-27955 .bat / powershell 버전 취약 대상: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken 등 Dawid Golunski 가 발견함 https://legalhackers.com https://exploitbox.io Windows에서 테스트 완료: git, GitHub CLI gh, GitHub Desktop, Visual Studio...

maldev-for-dummies

Malware Development for Dummies In the age of EDR, red team operators cannot get away with using pre-compiled payloads anymore. As such, malware development is becoming a vital skill for any operator. Getting started with maldev may seem daunting, but is actually very easy. This workshop will sho...

CVE-2024-35250-BOF

CVE-2024-35250-BOF CVE-2024-35250용 Beacon Object File BOF 구현, Cobalt Strike용. Visual Studio로 컴파일되었습니다. 감사의 말 모든 취약점 코드의 공로는 원작자 varwara에게 있습니다. 면책 조항 저는 여러분이 이 끔찍한 코드를 사용하여 저지를 수 있는 어떠한 반인륜 범죄나 핵전쟁에 대해서도 책임을 지지 않습니다...

xori

Xori - Custom disassembly framework Xori is an automation-ready disassembly and static analysis library that consumes shellcode or PE binaries and provides triage analysis data. Acknowledgements: Xori wouldn't exist without inspiration and ideas from the open source community. We are indebted to...

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

Spartacus

!CAUTION 이 저장소는 유지보수되지 않습니다. 최신 버전은 https://github.com/sadreck/Spartacus 에서 확인하세요. Spartacus DLL/COM 하이재킹 툴킷 왜 "Spartacus"인가? 1960년 영화 스파르타쿠스를 보셨다면, 로마인들이 스파르타쿠스에게 자수하라고 요구하는 장면을 기억하실 것입니다. 진짜 스파르타쿠스가 일어났을 때, 다른 많은 사람들도 일어나 "나는 스파르타쿠스다"라는 대사를 사용하며 자신이 그라고 주장했습니다. DLL 하이재킹에 취약한 프로세스가 DLL 로드를 요청할 때...

PMD

실전 악성코드 개발 실습 1 - 환경 설정 1. 하이퍼바이저 내에 Windows 가상 머신을 설정합니다. a. 기본 설치의 스냅샷을 반드시 생성하세요. 2. Visual Studio 2022를 다운로드하여 설치합니다 - https://visualstudio.microsoft.com/vs/ a. 설치 시 Desktop development with C++ 워크로드를 선택합니다. 3. 다음 항목을 다운로드하여 설치합니다: DebugView++ - https://github.com/CobaltFusion/DebugViewPP PE...

CVE-2024-35250-BOF

CVE-2024-35250-BOF CVE-2024-35250를 위한 Beacon Object File BOF 구현입니다. 빌드 프로젝트 템플릿은 bof-vs에서 가져왔습니다. Visual Studio 2019/2022의 Release 구성으로 컴파일합니다. 감사의 말 https://github.com/varwara/CVE-2024-35250...

Detection-CheatEngine

Detection-CheatEngine 原理 ReadDirectoryChangesW の理解 拡張 CEInfo.h に検出ベクトルを簡単に追加できます。 pragma once define CEDETECTION1 L"ADDRESSES.FIRST" define CEDETECTION2 L"MEMORY.FIRST" コンパイル Visual Studio 2022 llvm-msvc リンク UnknownCheats でのいくつかの議論...