8681 matches found
pefile
pefile pefile is a multi-platform Python module to parse and work with Portable Executable PE files. Most of the information contained in the PE file headers is accessible, as well as all the sections' details and data. The structures defined in the Windows header files will be accessible as...
unicorn
Unicorn Engine LOOKING FOR CONTRIBUTORS! See this. Unicorn is a lightweight, multi-platform, multi-architecture CPU emulator framework, based on QEMU. Unicorn offers some unparalleled features: Multi-architecture: ARM, ARM64 ARMv8, M68K, MIPS, PowerPC, RISCV, SPARC, S390X, TriCore and X86 16, 32,...
sony-vp-extract
Sony WH-1000XM4 语音包提取器 从索尼 WH-1000XM4 加密固件文件中解密并提取语音指导 MP3 提示。 AES-128-CBC 密钥是通过使用 RACE 协议 通过蓝牙低能耗 BLE 转储耳机 Airoha MT2811 固件，然后反汇编 ARM Cortex-M4 FOTA 解密例程而提取的。完整技术文章：docs/WRITEUP.md 快速开始 root@kitploi...
BootStomp
BootStomp BootStomp 是一个引导加载程序漏洞查找工具。它针对两类不同的漏洞进行检测：内存损坏和状态存储漏洞。更多信息请参考 BootStomp 论文：https://seclab.cs.ucsb.edu/academic/publishing/bootstomp-security-bootloaders-mobile-devices-2017 要运行 BootStomp 的分析，请阅读以下说明。请注意，BootStomp 适用于为 ARM 架构（32 位和 64 位）编译的引导加载程序，并且结果可能因 angr 和 Z3 的版本而略有不同。这是因为 angr...
Pwn ARM NFC
挑战 通过NFC标签进行ARM缓冲区溢出 该项目是一个开源（且制作有趣）的低级挑战。 欢迎改进它或在您自己的项目中使用它。 每个文件均按“原样”分发，希望它有用，但没有任何明示或暗示的担保。 文件树 root@kitploit: nfclistener ├── cli ├── nfclistener.py ├── packages │ ├── init.py │ ├── log.py │ └── time.py ├── README.md ├── requirements.txt ├── ressources │ ├── config.json │ ├── dump.sh...
plasma
PLASMA 旧项目名称为 Reverse 。 PLASMA 是一个交互式反汇编器。它可以生成更易读的汇编代码（伪代码）并带有彩色语法。你可以使用可用的 Python API 编写脚本（见下方示例）。该项目仍在大力开发中。 wiki : TODO 列表和一些文档。 它支持： 架构：x8664、ARM、MIPS64（ARM 和 MIPS 部分支持） 格式：ELF、PE、RAW 警告 ：在结构和类型定义实现之前，数据库兼容性可能被破坏。 依赖项 python = 3.4 capstone，测试版本 4.0-alpha5 python-pyelftools pefile +...
CVE-2022-20186_CTXZ
CVE-2022-20186 漏洞利用 详细分析可在此处找到：here。这是 Arm Mali 内核驱动程序中的一个漏洞，我于 2022 年 1 月提交报告。该漏洞可用于从未受信任的应用域获得任意内核代码执行权限，进而禁用 SELinux 并获取 root 权限。 该漏洞利用已在 Google Pixel 6 上测试，支持从 2021 年 11 月到 2022 年 2 月的补丁级别。通过更改几个镜像偏移量，可以轻松添加对其他固件的支持。作为参考，我使用以下命令在 ndk-21 中通过 clang 编译： root@kitploit:...
CVE-2022-46395
CVE-2022-46395 的利用 详细分析文章可在此处找到。这是一个我在2022年11月报告的Arm Mali内核驱动漏洞。该漏洞可用于从未受信任的应用域获取任意内核代码执行权限，进而用于禁用SELinux并获得root权限。 该利用已在搭载2022年11月和2023年1月补丁的Google Pixel 6上进行测试。作为参考，我使用以下命令在ndk-21中通过clang编译： root@kitploit:...
meshdeck
meshdeck Puerto de MeshDeck para Arch Linux ARM - Wilson Esto fue originalmente portado al repositorio Wilson de Arch Linux ARM. El repositorio Wilson se está fusionando con el Proyecto ArchAssault http://www.archassault.org debido a que hay superposición y objetivos similares. Todo el trabajo...
nexmon
What is nexmon? Nexmon is our C-based firmware patching framework for Broadcom/Cypress WiFi chips that enables you to write your own firmware patches, for example, to enable monitor mode with radiotap headers and frame injection. Below, you find an overview what is possible with nexmon. This...
kali-arm
Scripts de compilación de Kali-ARM Scripts de compilación ARM de Kali Linux. Estos son los mismos scripts de compilación que usamos para generar las imágenes ARM oficiales pregeneradas de Kali Linux, disponibles aquí: https://www.kali.org/get-kali/ Hay scripts adicionales incluidos en este...
kali-rpi-luks-crypt
Cifrado de disco completo para Kali en Raspberry u otra arquitectura similar usando LUKS Esta guía está dedicada a ejecutar Kali en Raspberry u otra arquitectura similar, p. ej. ODROID-C2 usando cifrado de disco completo con LUKS. Basada en el documento un poco desactualizado aquí. Motivación...
Inferno
ChefKiss Inferno ChefKiss Inferno 是 QEMU 项目的一个衍生版本，提供对 Apple ARM 设备的客户机支持。 !CAUTION 请考虑捐赠/打赏以帮助项目的持续开发，使其保持免费和开源。 PayPal 或信用卡/借记卡：https://ko-fi.com/chefkiss BTC：bc1qgu56kptepex2csuzl5nhzc4vxuj8c6ggjzhcem SOL：4PJU3iB5rimN9BNcpzduvmTnptJyedZiAd23so33SAdi ETH：0x038A25849c23Bc5A736484351a8B6Ad71bC466...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ARM: 9317/1: kexec: Make smp stop calls asynchronous If a panic is triggered by a hrtimer interrupt, all online CPUs will be notified and set to offline. However, as highlighted in the commit 19dbdcb8039c “smp: Warn on function...
Astra Linux – Vulnerability in mbedtls
A issue was discovered in Arm Mbed TLS before version 2.23.0. A side channel allows the recovery of an ECC private key, which is related to functions such as mbedtlsecpcheckpubpriv, mbedtlspkparsekey, mbedtlspkparsekeyfile, mbedtlsecpmul, and mbedtlsecpmulrestartable...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: secretmem: Disable memfdsecret if arch cannot set the direct map. The memfdsecret syscall returns -ENOSYS if !cansetdirectmap is true. This occurs, for example, in some arm64 configurations, where marking 4k PTEs in the direct ma...
Astra Linux – Vulnerability in mbedtls
The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS from 2.19.1 onwards does not reduce the blinded scalar before computing the inverse. This allows a local attacker to recover the private key through side-channel attacks...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ARM: Rockchip – Fix for kernel hangs during SMP initialization To address this issue, the trampoline code that writes data from the secondary CPUs to SRAM is executed when the secondary CPUs are powered on at least this is true f...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: ARM: OMAP2+: Fixed a memory leak in realtimecounterinit. The "sysclk" resource is allocated using clkget, and it is not released when the function returns...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy. For some reason, the driver that added support for the Exynos5420 MIPI phy back in 2016 was not applied to the Exynos5420 device, resulting in a kernel panic...