17 matches found
Cmulator
Cmulator - Skriptfähiger x86 RE Sandbox-Emulator v0.3 Beta Cmulator ist ein x86 - x64 skriptfähiger Reverse-Engineering-Sandbox-Emulator für Shellcode und PE-Binärdateien, basierend auf Unicorn & Capstone Engine & Javascript. 💬 Dies ist die letzte unterstützte Pascal-Version und die neue Codebasi...
C2-Hunter
C2-Hunter C2-Hunter è un programma progettato per analisti malware per estrarre il traffico di Command and Control C2 da malware in tempo reale. Il programma utilizza un approccio unico agganciandosi alle API di connessioni win32. Con C2-Hunter, gli analisti malware possono ora intercettare e...
PyHook
PyHook PyHook è l'implementazione Python del mio progetto SharpHook. Utilizza vari hook API per ottenere le credenziali desiderate. PyHook usa Frida per iniettare le sue dipendenze nel processo target. Processi Supportati...
ghost
Ghost Ghost ist ein Tool zur Erkennung von Prozessinjektionen, geschrieben in Rust. Es überwacht laufende Prozesse und versucht verdächtige Aktivitäten wie Code-Injektion, Speichermanipulation und andere Tricks zu erkennen, die Malware zur Tarnung verwendet. Was es tut Die Grundidee ist einfach:...
SharpHook
SharpHook SharpHook ist inspiriert vom SharpRDPThief-Projekt. Es verwendet verschiedene API-Hooks, um die gewünschten Anmeldeinformationen zu erhalten. Im Hintergrund nutzt es das EasyHook-Projekt. Sobald der gewünschte Prozess läuft, injiziert SharpHook automatisch seine Abhängigkeiten in den...
Inspeckage
Inspeckage - Ispettore di Pacchetti Android Inspeckage è uno strumento sviluppato per offrire analisi dinamica delle applicazioni Android. Applicando hook alle funzioni dell'API Android, Inspeckage ti aiuterà a capire cosa fa un'applicazione Android in fase di esecuzione...
cuckoo-modified
Questa è una versione pesantemente modificata di Cuckoo Sandbox fornita sotto licenza GPL. Offre una serie di vantaggi rispetto al Cuckoo originale: Nomi di file e registro completamente normalizzati Analisi a 64 bit Gestione del reindirizzamento del filesystem WoW64 Molti hook API aggiuntivi...
thematrix
TheMatrix Questo progetto è stato creato per facilitare il processo di analisi dei malware. L'obiettivo è creare un binario attivatore il cui scopo è caricare un binario definito dall'utente e monitorare l'esecuzione utilizzando hook delle API Win32. I dati rilevanti vengono quindi salvati su...
CVE-2019-17271
vBulletin 5.5.4 allows SQL Injection via the ajax/api/hook/getHookList or ajax/api/widget/getWidgetList where parameter...
Site-wide CSRF (Bypass Strict Cookie) leave to Website Takeover
I reported this vulnerability once a long time ago, but you still haven't fixed it. I report back to remind you need to fix it. Description At the api/hooks.unfurl, when sending a post request containing a param challenge, the server will return the value of that param, which inadvertently leave ...
Malicious code in @instant-api-hooks/assethub-campaigns (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3cd0ffbe2349da7aea9f042d99b1fc38ec727b62ded2bee52f82d613acfc9f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SharpHook - Tool Tath Uses Various API Hooks In Order To Give Us The Desired Credentials
SharpHook is inspired by the SharpRDPThief project, It uses various API hooks in order to give us the desired credentials. In the background it uses the EasyHook project, Once the desired process is up and running SharpHook will automatically inject its dependencies into the target process and...
Using Speakeasy Emulation Framework Programmatically to Unpack Malware
Andrew Davis recently announced the public release of his new Windows emulation framework named Speakeasy. While the introductory blog post focused on using Speakeasy as an automated malware sandbox of sorts, this entry will highlight another powerful use of the framework: automated malware...
Inspeckage - (Android Package Inspector) Dynamic Analysis With Api Hooks, Start Unexported Activities And More
Inspeckage is a tool developed to offer dynamic analysis of Android applications. By applying hooks to functions of the Android API, Inspeckage will help you understand what an Android application is doing at runtime. http://ac-pm.github.io/Inspeckage https://twitter.com/inspeckage...
Android Package Inspector: Inspeckage
Inspeckage is a tool developed to offer dynamic analysis of Android applications. By applying hooks to functions of the Android API, Inspeckage will help you understand what an Android application is doing at runtime. Inspeckage will let you interact with some elements of the app, such as...
Using EMET to Disable EMET
UPDATE July 7: This post has been updated in advance of a Black Hat 2016 presentation. Microsoft’s Enhanced Mitigation Experience Toolkit EMET is a project that adds security mitigations to user mode programs beyond those built in to the operating system. It runs inside “protected” programs as a...
