filterforge

filterforge Python 工具包，用于逆向工程 Berkeley Packet Filter BPF 字节码。给定原始的 BPF 指令——这些指令可能来自恶意软件样本、数据包捕获过滤器或网络设备——filterforge 将其反汇编为人类可读的形式，使用 Z3 求解满足接受路径的数据包约束，然后利用 Scapy 构建一个具体的网络数据包，使其能够通过该过滤器。 简而言之：向其提供一个 BPF 程序，它将返回一个完整的数据包（Ethernet、IPv4/IPv6、TCP/UDP/SCTP 等），该数据包可被过滤器接受——随时可以检查、保存为 PCAP 或在网络上发送。 建议安装...

UBUNTU-CVE-2020-19725

There is a use-after-free vulnerability in file pddsimplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempt to simplify the constraints and causes unexpected memory access. It can cause segmentation faults or arbitrary code execution...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free when processing files in pddsimplifier.cpp. An attacker can cause segmentation faults or execute arbitrary code by triggering unexpected memory access. This occurs as the solver is trying to simplify the constraints, whic...