mose

MOSE Master Of SErvers Copyright 2020 National Technology & Engineering Solutions of Sandia, LLC NTESS. Under the terms of Contract DE-NA0003525 with NTESS, the U.S. Government retains certain rights in this software MOSE is a post-exploitation tool that helps security professionals leverage...

CVE-2023-0297_Pre-auth_RCE_in_pyLoad

CVE-2023-0297: pyLoadにおける事前認証RCE pyLoadにおける事前認証RCE発見のストーリー TL;DR pyLoad 0.5.0b3.dev31より前のバージョンにおけるコードインジェクションの脆弱性により、js2pyの機能を悪用して事前認証RCEが可能になります。 レポートはこちら、エクスプロイトコードはこちらで見つけられます。 詳細 pyLoadはPythonで書かれたOSSのダウンロードマネージャで、Webインターフェースを介して管理できます。そのGitHubリポジトリは2023年1月9日時点で約2.8kのスターを獲得しています。...

deep-pwning

Deep-pwning is a lightweight framework for experimenting with machine learning models with the goal of evaluating their robustness against a motivated adversary. Note that deep-pwning in its current state is no where close to maturity or completion. It is meant to be experimented with, expanded...

Koi

koi 🎏 &color=rgb\255%2C%20116%2C%200\ This project is my shot at making a fast, easy to use yet feature rich shell handler with a pretty interface. Disclaimer: please note that this is still under development, and I am still working on some of the key features, talked about in this section. 📑 Tab...

scallion

2020 Project Update Scallion was a hobby project to learn OpenCL and RSA. We are not currently maintaining scallion. It has bitrotted in two important ways: 1. Tor has moved on to v3 Onion addresses, which scallion does not support. Old v2 addresses will stop working in October of 2021. The new...

msdat

Quentin HARDY --- [email protected] [email protected] MSDAT MSDAT M icros oft SQL D atabase A ttacking T ool is an open source penetration testing tool that tests the security of Microsoft SQL Databases remotely. Usage examples of MSDAT: You have a Microsoft database listening remotely...

pip3line

Pip3line Codacy Badge Linux / MacOS Builds Windows Builds Raw bytes manipulation utility, able to apply well known and less well known transformations, quick binary search, network proxy interception and more. Install on Windows: Download the release zip here Remember to install/repair the VS...

obfuscation_detection

난독화 탐지 v2.4 저자: Tim Blazytko 자동으로 난독화된 코드 및 기타 흥미로운 코드 구조를 탐지합니다 설명: 난독화 탐지Obfuscation Detection는 바이너리에서 난독화된 코드와 흥미로운 코드 구조예: 상태 머신를 탐지하는 Binary Ninja 플러그인입니다. 바이너리가 주어지면 이 플러그인은 리버스 엔지니어링 중에 더 자세히 살펴볼 가치가 있는 코드 위치를 식별하여 분석을 용이하게 합니다. 다양한 휴리스틱을 기반으로 이 플러그인은 복잡하거나 일반적이지 않은 코드 구조를 포함하는 함수를 식별합니다...

obfuscation_detection

Obfuscation Detection v2.4 Author: Tim Blazytko Automatically detect obfuscated code and other interesting code constructs Description: Obfuscation Detection is a Binary Ninja plugin to detect obfuscated code and interesting code constructs e.g., state machines in binaries. Given a binary, the...

remill

Remill Remill은 정적 바이너리 변환기로, 기계어 명령어를 LLVM 비트코드로 변환합니다. AArch64 64-bit ARMv8, SPARC32 SPARCv8, SPARC64 SPARCv9, x86 및 amd64 기계어 AVX 및 AVX512 포함를 LLVM 비트코드로 변환합니다. AArch32 32-bit ARMv8 / ARMv7 지원은 진행 중입니다. Remill은 명령어를 정확하게 리프팅하는 데 중점을 둡니다. 이는 다른 도구예: McSema를 위한 라이브러리로 사용됩니다. 빌드 상태 문서 Remill의 작동 방...

mosh

Mosh: the mobile shell Mosh is a remote terminal application that supports intermittent connectivity, allows roaming, and provides speculative local echo and line editing of user keystrokes. It aims to support the typical interactive uses of SSH, plus: Mosh keeps the session alive if the client...

Exploit for CVE-2026-13043

🕷️ CVE-2026-13043 - Panda / WatchGuard Kernel Memory Access...

Binary Exploits

Exploit Database のバイナリエクスプロイト バイナリエクスプロイトは /bin-sploits/ ディレクトリにあります。 これは The Exploit Database の公式リポジトリであり、Offensive Security がスポンサーを務める プロジェクト です。 私たちのリポジトリは以下のとおりです: エクスプロイト & シェルコード: https://gitlab.com/exploit-database/exploitdb バイナリエクスプロイト:...

Binary Exploits

Exploit Database's Binary Exploits Binary exploits are located in the /bin-sploits/ directory. This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: https://gitlab.com/exploit-database/exploitdb Binary...

safe-npm

safe-npm 보안에 중점을 둔 npm 설치 도구로, 새로 손상된 패키지로부터 프로젝트를 보호합니다. 왜 존재하는가? npm 패키지에 대한 공급망 공격은 증가하는 위협입니다. 공격자는 때때로 합법적인 패키지를 손상시킵니다: 관리자 자격 증명 도용 인기 패키지에 악성 업데이트 게시 버려진 패키지 인수 이러한 공격은 종종 갑작스럽게 발생합니다. 어제는 안전했던 패키지가 오늘 손상될 수 있습니다. safe-npm 은 최소 기간기본 90일 동안 공개적으로 사용 가능했던 패키지 버전만 설치하여 사용자를 보호합니다. 이는 보안 커뮤니티...

starboard

Starboard가 Trivy에 합류합니다. Starboard를 중단하고 Trivy에 병합할 계획을 발표했습니다. Starboard CLI는 trivy kubernetes 명령으로 재도입되었으며, trivy 기능에 초점을 맞춘 starboard-operator는 Trivy-Operator로 사용할 수 있습니다. 새로운 기능/풀 리퀘스트/이슈를 받지 않습니다. Trivy-Operator 및 Trivy CLI에 기여하고 Trivy Kubernetes의 미래에 영향을 미치시기를 권장합니다. 자세한 정보와 토론을 확인하세요. 최신 내...

rainbowcrackalack

Rainbow Crackalack Author: Joe Testa @therealjoetesta About This project produces open-source code to generate rainbow tables as well as use them to look up password hashes. While the current release only supports NTLM, future releases may support MD5, SHA-1, SHA-256, and possibly more. Both Linu...

patching

Patching - Interactive Binary Patching for IDA Pro Overview Patching assembly code to change the behavior of an existing program is not uncommon in malware analysis, software reverse engineering, and broader domains of security research. This project extends the popular IDA Pro disassembler to...

reko

reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...

Glass

Glass 透明で滑らか、という意味です 高速でネイティブな、モバイルアプリ最優先 のインタラクティブディスアセンブラ。Android / iOS リバースエンジニアリングのワークフローにおける IDA Pro の精神的な後継であり、以下を中心に構築されています: smali — APK / DEX / smali 処理用 armv8-encode — AArch64 および ARMv7 A32 / Thumb 用 — ネイティブ .so、iOS Mach-O gpui Zed — GPU アクセラレーションによるネイティブ UI 用 redb — コンテンツアドレス型永続化用 内蔵 M...