patching

Patching - Interactive Binary Patching for IDA Pro Overview Patching assembly code to change the behavior of an existing program is not uncommon in malware analysis, software reverse engineering, and broader domains of security research. This project extends the popular IDA Pro disassembler to...

patching

Patching - Parcheo Binario Interactivo para IDA Pro Resumen No es poco común en el análisis de malware, la ingeniería inversa de software y campos más amplios de investigación en seguridad, parchear código ensamblador para cambiar el comportamiento de un programa existente. Este proyecto extiende...

ofrak

OFRAK OFRAK Open Firmware Reverse Analysis Konsole is a binary analysis and modification platform. OFRAK combines the ability to: Identify and Unpack many binary formats Analyze unpacked binaries with field-tested reverse engineering tools Modify and Repack binaries with powerful patching...

rop-tool

rop-tool v2.4.2 Una herramienta para ayudarte a escribir exploits binarios OPCIONES rop-tool v2.4.2 Help you make binary exploits. Usage: rop-tool OPTIONS Commands : gadget Search gadgets patch Patch the binary info Print info about binary heap Display heap structure disassemble Disassemble the...

the-backdoor-factory

The new version of BACKDOOR FACTORY is available! Get access here: https://github.com/sponsors/secretsquirrel WARNING: Pull Requests WILL BE IGNORED AND CLOSED. The Backdoor Factory BDF セキュリティ専門家と研究者のみを対象としています。 BDFの目的は、実行可能バイナリにユーザーが望むシェルコードをパッチとして埋め込み、パッチ適用前の状態の通常の実行を継続させることです。 Black Hat USA...

IDA2Obj

IDA2Obj IDA2Obj es una herramienta para implementar SBI Instrumentación Binaria Estática. El flujo de trabajo es simple: Volcar archivos objeto COFF directamente desde un binario ejecutable. Enlazar los archivos objeto en un nuevo binario, casi idéntico al anterior. Durante el proceso de volcado,...

BDFProxy

New version of BDFProxy is out! Only to sponsors! Get access here: https://github.com/sponsors/secretsquirrel BLOG: http://secureallthethings.blogspot.com/2017/08/closing-door-end-of-backdoor-factory.html The Backdoor Factory Proxy BDFProxy v0.3.8 For security professionals and researchers only...

patchkit

patchkit Parchea un binario ELF usando uno o más scripts simples de Python. Uso: patch patchdir|file... patchdir Contiene uno o más archivos de parche Python, que se ejecutarán en orden alfabético contra un binario. Ejemplos de Parche Nopeando una dirección, inyectando una función en ensamblador,...

sploit

sploit Sploit is a Go package that aids in binary analysis and exploitation. The motivating factor behind the development of sploit is to be able to have a well designed API with functionality that rivals some of the more common Python exploit development frameworks while taking advantage of the ...

DirtyClone

DirtyClone DirtyClone es una herramienta de escalada de privilegios local de diagnóstico y prueba de concepto escrita en C. Apunta a una ruta de explotación relacionada con kernel/XFRM descrita en la fuente como CVE-2026-43503 y está destinada únicamente a investigación de seguridad autorizada en...

CVE-2021-33191

From Apache NiFi MiNiFi C++ version 0.5.0 the c2 protocol implements an "agent-update" command which was designed to patch the application binary. This "patching" command defaults to calling a trusted binary, but might be modified to an arbitrary value through a "c2-update" command. Said command ...

EUVD-2021-19906

Malware in sbrugna...

Oracle Linux 8 : gdk-pixbuf2 (ELSA-2024-3341)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-3341 advisory. - Backport fixes for CVE-2022-48622 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

gdk-pixbuf2 security update

2.36.12-6 - Backport fixes for CVE-2022-48622 - Apply patches with git to enable binary patching - Resolves: RHEL-30478...

CVE-2021-33191: Improper Neutralization of Special Elements used in an OS Command

From Apache NiFi MiNiFi C++ version 0.5.0 the c2 protocol implements an "agent-update" command which was designed to patch the application binary. This "patching" command defaults to calling a trusted binary, but might be modified to an arbitrary value through a "c2-update" command. Said command ...

Rop-Tool - A Tool To Help You Write Binary Exploits

A tool to help you writing binary exploits OPTIONS rop-tool v2.4.1 Help you to make binary exploits. Usage: rop-tool OPTIONS Commands : gadget Search gadgets patch Patch the binary info Print info about binary heap Display heap structure disassemble Disassemble the binary search Search on binary...

Mobile Application Hacking Diary Ep.2

Mobile Application Hacking Diary Ep.2 |=--------------------------------------------------------------------=| |=------------= Mobile Application Hacking Diary Ep.2=--------------=| |=------------------------= 18 February 2018 =----------------------=| |=----------------------= By CWH Underground...