GPAC Project Advanced Content 缓冲区错误漏洞

GPAC is an open source multimedia framework. A buffer error vulnerability exists in GPAC Project Advanced Content, which stems from the product's MPEG-4 failure to check the correctness of additive operations. An attacker could exploit the vulnerability to cause memory corruption...

DEBIAN-CVE-2020-28591

An out-of-bounds read vulnerability exists in the AMF File AMFParserContext::endElement functionality of Slic3r libslic3r 1.3.0 and Master Commit 92abbc42. A specially crafted AMF file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability...

SGN - Encoder Ported Into Go With Several Improvements

SGN is a polymorphic binary encoder for offensive security purposes such as generating statically undetecable binary payloads. It uses a additive feedback loop to encode given binary instructions similar to LSFR. This project is the reimplementation of the original Shikata ga nai in golang with...

Shikata Ga Nai Encoder Still Going Strong

One of the most popular exploit frameworks in the world is Metasploit. Its vast library of pocket exploits, pluggable payload environment, and simplicity of execution makes it the de facto base platform. Metasploit is used by pentesters, security enthusiasts, script kiddies, and even malicious...

[SECURITY] Fedora 14 Update: bristol-0.40.7-7.fc14

Bristol is an emulation package for a number of different 'classic' synthesizers including additive and subtractive and a few organs. The application consists of the engine, which is called bristol, and its own GUI library called brighton that represents all the emulations...

stat(2)-based Context Keyed Payload Encoder

This is a Context-Keyed Payload Encoder based on stat2 and Shikata Ga Nai. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/poly' class MetasploitModule 'stat2-based Context Keyed Payload Encoder',...

Jump/Call XOR Additive Feedback Encoder

Jump/Call XOR Additive Feedback This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Jump/Call XOR Additive Feedback Encoder', 'Description' = 'Jump/Call XOR Additive Feedback', 'Author' = 'skape',...