enjarify

Nota: Este repositorio puede estar desactualizado. El desarrollo futuro se llevará a cabo en https://github.com/Storyyeller/enjarify. Introducción Enjarify es una herramienta para traducir bytecode Dalvik a bytecode Java equivalente. Esto permite que las herramientas de análisis de Java analicen...

libtalloc

libtalloc libtalloc è uno script python per l'uso con GDB che può essere utilizzato per analizzare l'"allocatore banale" talloc. Un'introduzione su talloc si può trovare qui: https://talloc.samba.org/talloc/doc/html/index.html libtalloc è stato ispirato da altri script python per GDB per l'analis...

droid-hunter

.---. .----------- / \ / ------ / / \ / ----- ╔╦╗╦═╗╔═╗╦╔╦╗ ╦ ╦╦ ╦╔╗╔╔╦╗╔═╗╦═╗ ////// ' / --- ║║╠╦╝║ ║║ ║║───╠═╣║ ║║║║ ║ ║╣ ╠╦╝ //// / // : : --- ═╩╝╩╚═╚═╝╩═╩╝ ╩ ╩╚═╝╝╚╝ ╩ ╚═╝╩╚═ // / / / '-- Por HaHwul // //..\ www.hahwul.com ====UU====UU==== https://github.com/hahwul/droid-hunter '//||\ ''...

cuckoo

.. image:: https://cuckoosandbox.org/assets/images/cuckoo-black.png :alt: Cuckoo Sandbox :target: https://cuckoosandbox.org/ NOTA BENE: Cuckoo Sandbox 2.x non è attualmente mantenuto. Qualsiasi issue aperta o pull request molto probabilmente non verrà elaborata, poiché è in corso una completa...

Important: Red Hat Security Advisory: satellite/iop-vulnerability-engine-rhel9 container image available as a Technology Preview

A new satellite/iop-vulnerability-engine-rhel9 container image is now available as a Technology Preview in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages...

log4j_checker_beta

log4jcheckerbeta - Scripts para Linux, macOS y Windows Si deseas usar los cradles de descarga de Windows/Linux a continuación, revisa los scripts de antemano. Cargar código de internet y ejecutarlo es lo que nos trajo aquí con Log4Shell, ¿verdad? ;- Servidores o clientes Linux y macOS El script...

network-forensics

Network Forensics Investigations Blue-team network-forensics...

joern

Base de datos de consultas de Joern "Joern-Scan" Esta es la base de datos central de consultas para la plataforma de análisis de código abierto Joern. Tiene dos propósitos: Proporciona las baterías necesarias para convertir Joern en una herramienta de escaneo de código lista para usar. Sus...

regipy

regipy ⚠️ Breaking Changes in v6.0.0 Version 6.0.0 enthält bedeutende Modernisierungsänderungen: Python 3.9+ erforderlich - Unterstützung für Python 3.6, 3.7 und 3.8 wurde eingestellt attrs-Bibliothek entfernt - Datenklassen verwenden jetzt das in Python integrierte dataclasses-Modul Wenn Ihr...

windows-malware-behavioral-analysis

Analisi Comportamentale del Malware con REMnux & FLARE-VM Un'indagine pratica di malware per Blue Team che dimostra come eseguibili Windows sospetti possano essere analizzati in sicurezza all'interno di un laboratorio isolato utilizzando tecniche di analisi comportamentale. Piuttosto che invertir...

trufflehog v3.98.0

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

fickling

Fickling Fickling ist ein Dekompilierer, statischer Analysator und Bytecode-Umschreiber für Python-Pickle-Objektserialisierungen. Sie können Fickling verwenden, um bösartige Pickle- oder Pickle-basierte Dateien, einschließlich PyTorch-Dateien, zu erkennen, zu analysieren, reverse zu engineering...

[SECURITY] Fedora 45 Update: frama-c-33.0-3.fc45

Frama-C is a suite of tools dedicated to the analysis of the source code of software written in C. Frama-C gathers several static analysis techniques in a single collaborative framework. The collaborative approach of Frama-C allows static analyzers to build upon the results already computed by...

Where Does a Rust Speedup Come From? Language and Algorithm Effects in Sliding Window Threat Scorer

Rewriting a hot path from Python into Rust is a common way to speed up security analytics, and large speedups are routinely reported. A rewrite usually changes the language and the algorithm at once, so a single factor can credit the language with a gain that comes from a better algorithm. We stu...

Karma Pro 0.14

Karma Pro is an open source code review tool written in Swift that can assist code reviewers with a multitude of useful tools. Karma Pro is a macOS source-code security scanner AST base and Heuristics that statically analyses projects in multiple languages. It's backed by an ML classifier trained...

Learning from Failures: A Failure-Driven Prompt Refinement for LLM-Based Vulnerability Analysis

Large Language Models have emerged as promising tools for software vulnerability analysis, but their effectiveness depends heavily on prompt design. Existing research primarily compares prompting strategies using aggregate performance metrics, providing limited insight into why models fail or how...

Systematically Optimized CNN-Transformer with Focal Loss for Imbalanced Intrusion Detection on NSL-KDD

Intrusion Detection Systems IDS struggle with imbalanced datasets like NSL-KDD, especially in detecting rare R2L and U2R attacks. This work describes a systematically optimized and explainable framework using a CNN-Transformer architecture to improve performance on highly imbalanced data. We...

Joern 4.0.649

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

spookyssl-pcaps

PCAP SpookySSL e Copertura di Rete PCAP o non è successo A seguito della vulnerabilità recentemente divulgata in OpenSSL v3.0 fino alla v3.0.6 CVE-2022-3602, abbiamo esaminato come appare un tentativo di sfruttamento 'sulla rete'. Questo repository contiene PCAP di vari scenari di sfruttamento,...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: A problem with uninitialized size values was fixed in radeonvcecsparse. In the unlikely event that the command stream passed from user space via the ioctl call to radeonvcecsParse is maliciously crafted, and the first...