rikune

Rikune Rikune은 Windows 실행 파일 및 관련 바이너리 형식을 리버스 엔지니어링하기 위한 MCP 서버입니다. 샘플 수집, 정적 트리어지, Ghidra 기반 함수 복구, 플러그인 기반 전문 도구, 아티팩트 관리, 선택적 격리 Windows 런타임 실행을 Model Context Protocol 인터페이스 뒤에 결합합니다. 현재 AI 지향 서버 워크플로는 최소한의 게이트웨이 표면으로 구성됩니다: 1. workflow.search를 사용하여 파일 유형과 사용자 목표에 일치하는 프로필, 워크플로, 전문 기능을 순위화합니...

Secure Parsing and Serializing with Separation Logic Applied to CBOR, CDDL, and COSE

Incorrect handling of security-critical data formats, particularly in low-level languages, are the root cause of many security vulnerabilities. Provably correct parsing and serialization tools that target languages like C can help. Towards this end, we present PulseParse, a library of verified...

[SECURITY] Fedora 39 Update: diffoscope-257-1.fc39

diffoscope will try to get to the bottom of what makes files or directories different. It will recursively unpack archives of many kinds and transform various binary formats into more human readable form to compare them. It can compare two tarballs, ISO images, or PDF just as easily. The...

The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c.

...

UUDeview: Insecure temporary file creation

Background UUdeview is encoder and decoder supporting various binary formats. NZBGet is a command-line based binary newsgrabber supporting .nzb files. Description UUdeview makes insecure usage of the tempnam function when creating temporary files. NZBGet includes a copy of the vulnerable code...