Virtuailor

Virtuailor - IDAPython tool for C++ vtables reconstruction Virtuailor is an IDAPython tool that reconstructs vtables for C++ code written for intel architecture, both 32bit and 64bit code and AArch64 New!. The tool constructed from 2 parts, static and dynamic. The first is the static part, contai...

sylvia

iOS AArch64 Syscall Analyzer An IDA Pro script that scans an AArch64 binary for SVC instructions, resolves the BSD syscall number from the X16 register, and presents every result in a rich dockable UI, with per-syscall occurrence navigation and live man-page documentation fetching. Built for iOS ...

Glass

Glass as in transparent and smooth A fast, native, mobile-app first interactive disassembler. Spiritual successor to IDA Pro for the Android / iOS reverse engineering workflow, built around: smali for APK / DEX / smali handling armv8-encode for AArch64 and ARMv7 A32 / Thumb — native .so, iOS Mach...

falco

Falco Falcoは、Linuxオペレーティングシステム向けのクラウドネイティブなランタイムセキュリティツールです。異常な動作や潜在的なセキュリティ脅威をリアルタイムで検出し、警告するように設計されています。 Falcoはその中核として、カスタムルールに基づいてシステムコールなどのイベントを監視するカーネル監視・検出エージェントです。Falcoは、コンテナランタイムとKubernetesからのメタデータを統合することで、これらのイベントを強化できます。収集されたイベントは、ホスト外のSIEMやデータレイクシステムで分析できます。...

IonStack-S22-cve-2026-43499

IonStack-S22-cve-2026-43499 元のリポジトリと統合済み: こちらにあります https://github.com/CamsShaft/IonStack-S22 私のSM-S901W S22 5.10.168-android12-9-27760517-abS901WVLS4DWL3で、selinux permissiveのカーネルドメインにおける完全なroot権限を取得。 注記:...

workshop_firmware_reverse_engineering

워크숍: 펌웨어 리버스 엔지니어링 이 저장소는 ScapyCon Automotive 2025에서 발표된 Emproof의 펌웨어 리버스 엔지니어링 워크숍을 위한 슬라이드와 실습 자료를 포함합니다. 이 워크숍은 보안 경험이 거의 없는 기술적 청중을 대상으로 하며, 실용적이고 독립적인 과제를 통해 기초를 가르칩니다. 다루는 주제는 다음과 같습니다: 기본 파일/ELF 분석; 소프트웨어 크래킹 및 키젠keygen 작성; 문자열 복호화 및 악성코드 분류; 임베디드 리눅스 펌웨어 언패킹; 베어메탈 분석; 크립토 탐지; 난독화/안티 분석 기법...

hyperpom

HYPERPOM Apple Silicon ハイパーバイザーに基づく AArch64 ファジングライブラリ 目次 免責事項 はじめに 前提条件 自己署名バイナリとハイパーバイザー権限 コンパイル手順 ドキュメント 例 テストの実行 著者 Hyperpom は、Apple Silicon Hypervisor 上に構築されたカバレッジガイド型ミューテーションベースのファジングフレームワークです。AArch64 ユーザーランドバイナリを簡単にインストルメントし、ファジングできるように設計されています。 ⚠️ 免責事項 このプロジェクトの背後にあるアイデアは、Apple Silicon...

silica

SILICA An exhaustive comparison of A64 instruction-allocation decisions. Silica checks every one of the 4,294,967,296 possible A64 instruction words. It compares whether Capstone, LLVM, Unicorn, and a table compiled from Arm's XML encoding diagrams accept each word. A decoder and an encoding...

android_demystification_toolbox

Android 탈신비화 툴박스 목적 ADT는 Miasm 기반의 기호 실행 도구 모음으로, 애플리케이션 동작 모델링, 보안 취약점 연구 및 테스트, 악성 코드 리버싱을 돕기 위해 설계되었습니다. 기능 모든 스레드 및 프로세스 컨텍스트를 저장/복원하는 기능 Android 환경을 모방하는 중앙 집중식json 인코딩 구성 파일 뮤텍스, 멀티스레딩 및 멀티프로세싱을 처리하는 스케줄러 fork pthreadcreate pthreadmutexlock/unlock 블로킹 파일 읽기/쓰기 다음을 처리하는 Java JNIjava native...

cve-2015-4843-type-confusion-phrack

Description Deatils for the vulnerability is disucssed on confluence. This repo has been picked up after a few years on being dead, not looked at the DisabledSecurityManager code. TypeConfusionDemo OverflowDemo This is a demo that shows we can overflow into before the dst array. This demo works o...

IonStack-S22U

CVE-2026-43499 - Samsung 5.10 Kernel Devices IonStack https://github.com/user-attachments/assets/f3d0858d-f8f5-444f-8ae5-541c2bc744c3 | ---|--- | While this repository originated as a device-specific port for the Galaxy S22 Ultra, the project has since shifted and expanded to support all Samsung...

zyxel-wax650s-research-notebook-public

Zyxel WAX650S リサーチノートブック Zyxel WAX650S ファームウェア V7.10ABRM.4C0 向けの公開安全なリサーチノートブックです。 このリポジトリは、研究者や将来のLLM支援によるフォローアップ作業のためのストーリー形式のWikiとして書かれています。ラボがどのように構築されたか、どの発見が確認されたか、どのチェーンが失敗したか、そしてエビデンスの境界がどこにあるかを記録しています。 対象 デバイス: Zyxel WAX650S ファームウェア: V7.10ABRM.4C0 ファームウェア SHA-256:...

c-copy-fail

CopyFail LinuxカーネルCrypto APIにおけるCVE-2026-31431 リソース: メイン ウェブサイト aarch64 システムコール シェルコード 生成用のpwntools sendmsg における補助データの仕組み...

copy-fail-cve-2026-31431-aarch64

copy-fail-cve-2026-31431-aarch64 参照: https://github.com/theori-io/copy-fail-CVE-2026-31431 https://github.com/bigwario/copy-fail-CVE-2026-31431-C ubuntu 25.10 aarch64 で検証済み python3 cve202631431exp.py...

AlmaLinux 9.2 [TuxCare] Security Update: binutils / binutils-devel / binutils-gold / cross-binutils-aarch64 / etc (ALMALINUX9.2:CLSA-2025:1742391294)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1742391294 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 8 [CIQ] Security Update: edk2-aarch64 / edk2-ovmf Multiple Vulnerabilities (crlsa-2024_5297)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20245297 advisory. edk2: Predictable TCP Initial Sequence Numbers CVE-2023-45236 edk2: Use of a Weak PseudoRandom Number Generator CVE-2023-45237 edk2: Temporary DoS...

Rocky Linux 8 [CIQ] Security Update: edk2-aarch64 / edk2-ovmf (crlsa-2024_11185)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202411185 advisory. edk2: Integer overflows in PeCoffLoaderRelocateImage CVE-2024-38796 Tenable has extracted the preceding description block directly from the CIQ security advisory...

Rocky Linux 8.6 [CIQ] Security Update: edk2-aarch64 / edk2-ovmf / edk2-tools / edk2-tools-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0037)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260037 advisory. This advisory aggregates security fixes for the edk2 SRPM in CIQ LTS 8.6. It addresses 14 CVEs: CVE-2019-14560, CVE-2022-36763, CVE-2022-36764,...

Rocky Linux 8.8 [CIQ] Security Update: edk2-aarch64 / edk2-ovmf / edk2-tools / edk2-tools-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0330)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260330 advisory. This advisory aggregates security fixes for the edk2 SRPM in CIQ LTS 8.8. It addresses 8 CVEs: CVE-2022-36763, CVE-2022-36764, CVE-2022-36765,...

AlmaLinux 9.2 [TuxCare] Security Update: binutils / binutils-devel / binutils-gold / cross-binutils-aarch64 / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1777949670)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1777949670 advisory. - A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tgtagtype of the file prdbg.c. Performing a...