IPA

交互式 PDF 分析 交互式 PDF 分析 （也称为 IPA）允许任何研究人员探索任何 PDF 文件的内部细节。PDF 文件可能被用来携带利用漏洞的恶意载荷，以及 PDF 阅读器的问题，或者可能被用于钓鱼攻击中作为社会工程学手段。 该软件的目标是让任何分析师都能自行深入研究 PDF 文件。通过 IPA，你可以从 PDF 文件中提取重要的载荷，理解对象之间的关系，并推断出可能有助于对恶意或不受信任载荷进行分类的元素。 主要的灵感来源于 Zynamics 背后那些了不起的人，以及他们出色的产品，名为 PDF dissector。 简化 PDF 文件分析...

ptxNinja

ptxNinja 作者 ：Nicolò Altamura 通过 Binary Ninja 探索 PTX 代码 描述 ptxNinja 是一个面向 Binary Ninja 的架构插件，针对 PTX——基于 CUDA 的 GPU 虚拟架构语言。它允许你： 探索 PTX 二进制文件，并集成已有的分析工具 在 GPU 内核和函数之间导航 借助 Binary Ninja 将 PTX 集成到你现有的自动化工具中 安装 该插件可以通过 Binary Ninja 的插件管理器安装。 如需手动安装，请在 Binary Ninja 的插件目录中执行以下步骤： git clone...

obfuscation_analysis

混淆分析 v1.3 作者：Tim Blazytko & Nicolò Altamura 分析和简化混淆代码 描述： 混淆分析 是一个 Binary Ninja 插件，可让您轻松应对高度保护的二进制文件。 它捆绑了一些专注的辅助工具，让您可以 一键简化混合布尔算术 MBA 表达式（基于 msynth） 定位并清除反汇编损坏的函数 一些示例用例可以在 examples 中找到。此外，REcon 演讲“Breaking Mixed Boolean-Arithmetic Obfuscation in Real-World Applications”展示了一些用例。幻灯片可以在这里找到。该插件补充...

[SECURITY] Fedora 45 Update: ocaml-yamlx-0.5.0-2.fc45

A pure-OCaml YAML 1.2 and 1.1 library with a lossless, comment-preserving AST. Features: - Full YAML 1.2 compliance =E2=80=94 passes all 371 tests from the yaml-test- suite. - Pure OCaml =E2=80=94 no C bindings, no external runtime dependencies. - Lossless AST =E2=80=94 the parsed node tree...

[SECURITY] Fedora 45 Update: ocaml-ppx-bin-prot-0.17.1-2.fc45

This package supports generating binary serialization and deserialization functions from type definitions. For more information, see: - https://github.com/janestreet/binprot/blob/master/README.md for the bin-prot format - https://github.com/janestreet/binprot/blob/master/shape/README.md for...

[SECURITY] Fedora 45 Update: ocaml-mccs-1.1.19-10.fc45

mccs which stands for Multi Criteria CUDF Solver is a CUDF problem solver developed at UNS during the European MANCOOSI project. This project contains a stripped-down version of the mccs solver, taken from snapshot 1.1, with a binding as an OCaml library, and building with dune. The binding enabl...

[SECURITY] Fedora 45 Update: ocaml-csexp-1.5.2-22.fc45

This project provides minimal support for parsing and printing S-expressions in canonical form, which is a very simple and canonical binary encoding of S-expressions...

[SECURITY] Fedora 45 Update: ocaml-base64-3.5.2-7.fc45

Base64 is a group of similar binary-to-text encoding schemes that represent binary data in an ASCII string format by translating it into a radix-64 representation. It is specified in RFC 4648...

[SECURITY] Fedora 45 Update: ocaml-biniou-1.2.2-21.fc45

Biniou pronounced "be new" is a binary data format designed for speed, safety, ease of use and backward compatibility as protocols evolve. Biniou is vastly equivalent to JSON in terms of functionality but allows implementations several times faster 4 times faster than yojson, with 25-35% space...

[SECURITY] Fedora 45 Update: ocaml-b0-0.0.6-3.fc45

WARNING: this package is unstable and a work in progress. Do not depend on i t. B0 describes software construction and deployments using modular and customizable definitions written in OCaml. B0 describes: - Build environments. - Software configuration, build and testing. - Source and binary...

[SECURITY] Fedora 45 Update: ocaml-bin-prot-0.17.0-14.fc45

This library contains functionality for reading and writing OCaml values in a type-safe binary protocol. These functions are extremely efficient and provide users with a convenient and safe way of performing I/O on any extensionally defined data type. This means that functions, objects, and value...

[SECURITY] Fedora 45 Update: hivex-1.3.24-23.fc45

Hive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' in perl-hivex lets you export and merge to...

[SECURITY] Fedora 45 Update: 0install-2.18-16.fc45

Zero Install is a decentralized cross-distribution software installation system. Other features include full support for shared libraries with a SAT solver for dependency resolution, sharing between users, and integration with native platform package managers. It supports both binary and source...

fsop-finder

Glibc FSOP 代码路径查找器 查找 GLIBC Libio 中能够劫持控制流和栈指针的 FSOP 代码路径。 描述： 1. 安装此插件 2. 在 Binary ninja 中打开 libc.so.6，然后点击 Tools - Plugins - Find FSOP code path 3. 你应该能在 Log 窗口中看到结果 有用的发现： // GLIBC 2.34-0ubuntu3.2 3. IOwfileunderflowmmap@0x86030 - IOwdoallocbuf@0x83be0 0x8614d: call0x83be0 RIP/RDI DATAFLOW: rb...

ColonelClustered

Colonel Clustered - 响应相似度聚类 v1.0.1 一个用于对 HTTP 响应进行聚类以发现异常值的 Burp Suite 扩展。 简介 这是我多年来一直想构建的一个插件，原因很简单：我对我们在 Burp intruder 中分析模糊测试攻击结果的方式感到有些恼火。在模糊测试攻击中，我们通常寻找服务器响应的变化。而我们通过查看状态码、响应时间和响应大小来寻找这些差异。所有这些都是对响应内容的间接度量。当然，作为渗透测试人员，我们没有时间去阅读数千个服务器的内容来寻找响应内容的差异。但我们当然可以让算法替我们完成这件事。...

WebSocketTurboIntruder

WebSocket Turbo Intruder 一个用于使用自定义 Python 代码对 WebSocket 消息进行模糊测试的扩展。 使用方法 Intruder 工具 1. 右键点击一条 WebSocket 消息，然后导航到 Extensions WebSocket Turbo Intruder Send to WebSocket Turbo Intruder。 如果在发送前高亮了消息的一部分，高亮的内容将被替换为 %s。 2. 从下拉列表中选择一个模板。 3. 修改 Python 代码以适配你的使用场景。 4. 开始攻击。 注意：这将建立一个新的 WebSocket 连接来发送消息...

SUSE SLES16 Security Update : sccache (SUSE-SU-2026:23983-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23983-1 advisory. - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded bsc1243868. - CVE-2026-25541:...

CVE-2026-59783

The Zabbix Server/Proxy has a vulnerability where binary items can cra...

PT-2026-106710

Name of the Vulnerable Software and Affected Versions GNU Aspell versions prior to 0.60.8.3 Description An out-of-bounds read exists in the ReadOnlyDict::load function within readonly ws.cpp. The issue occurs when loading a binary .rws dictionary file, as the software uses offset fields from the...

Linux Distros Unpatched Vulnerability : CVE-2026-59783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input leading to potential loss of availability...