rea

English · 简体中文 · 日本語 · 한국어 · العربية REA: Reverse Engineer Anything Reverse engineer anything with agents, from app behavior down to native binaries. See a feature you like. Understand how it works, down to the binary level. Quick start · Current status · Investigation model · Tool catalog ·...

Joern 4.0.649

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

LazZzy_Dump

laZzzy Dump A static analysis tool for extracting encrypted shellcode from laZzzy-wrapped PE binaries without requiring dynamic execution, debugging, or emulation. Overview laZzzy Dump is a malware analysis tool which aids analysis through static extraction of shellcode from binaries compiled wit...

Joern 4.0.647

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

Joern 4.0.648

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

CVE-2025-7775

CVE-2025-7775 Detección de versiones PowerShell También hay un método genial basado en hash de archivo: https://github.com/fox-it/citrix-netscaler-triage/blob/main/scan-citrix-netscaler-version.py También puedes potencialmente usar los binarios del cliente para enumerar la versión no estoy seguro...

gimphash

gimphash gimphash es un método propuesto para calcular un equivalente de imphash para binarios de Go. Su nombre proviene de G o-imp ort-hash. Los binarios de Golang contienen sus dependencias como parte del ejecutable. Estas dependencias incluyen tanto paquetes de la biblioteca estándar como...

CVE-2024-3094

Buenas tardes, Me gustaría informarle sobre un problema de seguridad crítico que ha sido identificado y afecta directamente a la comunidad Linux, incluidos servidores y dispositivos Android. Se descubrió que uno de los colaboradores, conocido por el nombre de Jesse, ha estado distribuyendo binari...

CVE-2025-4802-Proof-of-Concept

CVE-2025-4802 — Proof of Concept ⚠️ Disclaimer: This repository is for educational and authorized security research purposes only. Do not use this exploit against systems you do not own or have explicit permission to test. Misuse may violate laws and regulations. CVE Summary Field| Details ---|---...

CVE-2024-21111

Estos binarios fueron compilados desde el código fuente de mansk1es. https://github.com/mansk1es/CVE-2024-21111 Binarios precompilados para escalada de privilegios en Oracle VM Virtual box anterior a la versión 7.0.16...

EFISwissKnife

. //| | | | | | | \ | \ | | / / / || / / . . . / / || | |/ | | |/ \ / / / |/ /// | || | /|| | / / / / / / EFI Swiss Knife Un plugin de IDA para mejorar la ingeniería inversa de UEFI Copyright C 2016, 2017 Pedro Vilaça fG! - [email protected] - https://reverse.put.as Este es un plugin de IDA...

Fix-WinVerifyTrustSignatureValidationVuln

Fix-WinVerifyTrustSignatureValidationVuln WinVerifyTrust 서명 확인 취약점 수정, CVE-2013-39001, QID-3783322 이 수정은 64비트 Windows 컴퓨터를 대상으로 합니다 이 PowerShell 코드는 취약점을 수정하는 한 가지 방법입니다. .reg 파일을 만들고 reg import 를 사용하여 새 레지스트리 키를 가져오는 방법 외에도 사용할 수 있습니다. 전체 패키지 스크립트:...

yara-ttd

yara-ttd - La némesis definitiva de los empaquetadores Usa reglas YARA en trazas de Time Travel Debugging 1. Demo 2. Motivaciones 3. Instalación 4. Uso 5. Próximas funciones Demo Un binario empaquetado con UPX Un binario simple que lanza calc.exe, empaquetado con UPX. yara-ttd encuentra la cadena...

SharpCollection

SharpCollection Compilaciones nocturnas de herramientas ofensivas comunes en C, recién salidas de sus respectivas ramas master, compiladas y publicadas de forma CDI mediante canalizaciones de lanzamiento de Azure DevOps. ¿Falta tu herramienta favorita? No dudes en abrir un issue o enviarme un...

resym

Artefacto ReSym Este repositorio proporciona los artefactos del artículo "ReSym: Harnessing LLMs to Recover Variable and Data Structure Symbols from Stripped Binaries" CCS 2024. 🏆 Ganador del Premio ACM SIGSAC Distinguished Paper Nota : Estamos manteniendo/actualizando activamente nuestros...

xfg_analyzer

Recuperando prototipos de funciones mediante fuerza bruta de hashes XFG Este repositorio contiene scripts para generar y buscar hashes de eXtended Flow Guard. Un análisis extendido de cómo funciona esto está disponible en el número 22 de International Journal Of Proof Of Concept || GTFO. Mi traba...

Rocky Linux 9 [CIQ] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc Multiple Vulnerabilities (crlsa-2023_3923)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20233923 advisory. golang: cmd/go: go command may generate unexpected code at build time when using cgo CVE-2023-29402 golang: cmd/go: go command may execute arbitrary code a...

CLEANSTART-2026-NT42167 Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default

CVE-2025-15558 affects multiple packages. Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. See references for individual vulnerability details...

Joern 4.0.641

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

Joern 4.0.640

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...