polypyus

Polypyus Firmware Historian Polypyus learns to locate functions in raw binaries by extracting known functions from similar binaries. Thus, it is a firmware historian. Polypyus works without disassembling these binaries, which is an advantage for binaries that are complex to disassemble and where...

xurlfind3r

xurlfind3r xurlfind3r is a command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly...

unblob

unblob バイナリブロブのための正確で高速かつ使いやすい抽出スイート。 unblob は未知のバイナリブロブを解析し、78以上のアーカイブ、圧縮、ファイルシステムフォーマット を認識して再帰的に抽出し、未知のチャンクをカービングします。ファームウェアイメージの抽出、解析、リバースエンジニアリングに最適なツールです。 デモ 特徴 78以上のフォーマット対応 — SquashFS、JFFS2、UBI/UBIFS、ext、CPIO、ZIP、7-Zip、gzip、XZ、LZMA、LZ4 など、アーカイブ、圧縮ストリーム、ファイルシステムに対応。詳細は完全なリストをご覧ください。 再帰的抽出 ...

msidump

msidump MSI Dump - 悪意のあるMSIインストールパッケージを解析し、ファイル、ストリーム、バイナリデータを抽出し、YARAスキャナを組み込んだツールです。 マクロ対応のOffice文書では、oletools mraptorを使って文書が悪意があるかどうかを迅速に判断できます。さらに詳しく解析したい場合は、oletools olevbaやoledumpを使用できます。 悪意のあるMSIファイルを解析するには、これまで信頼できる唯一のツールとしてlessmsiがありました。 しかし、lessmsiには私が求めていた機能が実装されていませんでした： 迅速なトリアージ...

Arlo

Arlo 从 Arlo 转储与更新中提取可执行二进制文件 参见博客文章：https://www.synacktiv.com/publications/arlo-im-watching-you 解析器 arlo.py 用于解析闪存转储、下载并解析更新或列出已知型号。它需要 cryptography、asn1crypto 和 requests pip 包，并且可选使用 fastcrc 包。 已知型号 root@kitploit: $ arlo.py list - Cameras - VMC3030 : Arlo Wire-Free - VMC4030 : Arlo Pro - VMC4030...

bin2shell

bin2shell bin2shell 是一个非常小的工具，用于从二进制文件中提取 shell 代码 root@kitploit: bash bin2shell.sh additionNum \x45\x6e\x74\x65\x72\x20\x4e\x75\x6d\x62\x65\x72\x20\x31\x20\x3a\x20\x45\x6e\x74\x65\x72\x20\x4e\x75\x6d 谢谢 TOUHID SHAIKH...

CVE-2026-50226

CVE-2026-50226 affects the AcerConnect OTA application. The issue arises from fixed AES-128-CBC keys inside the app, allowing attackers to forge authorization credentials for arbitrary IMEI numbers. This enables unauthorized actors to list catalog items and extract protected binaries from pre-sig...

CVE-2026-50226

Fixed AES-128-CBC keys inside the AcerConnect OTA application let attackers forge authorization credentials for arbitrary IMEI numbers. This allows unauthorized actors to list catalog items and extract protected binaries from pre-signed cloud links...

EUVD-2026-34231

Fixed AES-128-CBC keys inside the AcerConnect OTA application let attackers forge authorization credentials for arbitrary IMEI numbers. This allows unauthorized actors to list catalog items and extract protected binaries from pre-signed cloud links...

Malicious code in lyrox (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a758a1be229d0656a639cd9e76cb14b3224260a08da87b6de28ff2bc4c1d48ba Heavy obfuscate code for extracting further obfuscate binaries and executing them using file less techniques. Some versions contain the executable embedded,...

EUVD-2021-24913

Malware in sbrugna...

EUVD-2017-11887

Malware in sbrugna...

EUVD-2017-17188

Malware in sbrugna...

Exploit for CVE-2025-26244

CVE-2025-26244-POC The code to exploit this vulnerability can...

Elink Smart eSmartCam Security Vulnerability

Elink Smart eSmartCam is a smart camera from Elink Smart. A security vulnerability exists in Elink Smart eSmartCam version 2.1.5, which stems from a vulnerability that allows an attacker to extract hard-coded AES encryption keys from a binary file...

CVE-2021-38461

The affected product uses a hard-coded blowfish key for encryption/decryption processes. The key can be easily extracted from binaries...

Hardcoded credentials

The affected product uses a hard-coded blowfish key for encryption/decryption processes. The key can be easily extracted from binaries...

Design/Logic Flaw

An attacker with physical access to the device can extract the binary that checks for the hardware key and reverse engineer it, which could be used to create a physical duplicate of a valid hardware key. The hardware key allows access to special settings when inserted...

CVE-2021-38394 Missing Protection against Hardware Reverse Engineering Using Integrated Circuit Imaging Techniques for Boston Scientific Zoom Latitude

An attacker with physical access to the device can extract the binary that checks for the hardware key and reverse engineer it, which could be used to create a physical duplicate of a valid hardware key. The hardware key allows access to special settings when inserted...

CVE-2021-38394

CVE-2021-38394 pertains to Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor Model 3120. The EUVD/CNNVD and ICS-CISA sources in the connected set describe a vulnerability: missing protection against hardware reverse engineering using IC imaging techniques, enabling an attacker with phys...