ShinoBOT

ShinoBOT Suite This repository is designated just for the binary, not for the source code. For the detail go to http://shinobot.com http://shinosec.com/shinobotsuite/ To download a file... Latest Version The latest ShinoBOT is generated by the web server dynamically. Go to...

param-miner

param-miner This extension identifies hidden, unlinked parameters. It's particularly useful for finding web cache poisoning vulnerabilities. It combines advanced diffing logic from Backslash Powered Scanner with a binary search technique to guess up to 65,000 param names per request. Param names...

SAFE

SAFE : Self Attentive Function Embedding Paper This software is the outcome of our accademic research. See our arXiv paper: arxiv If you use this code, please cite our accademic paper as: @inproceedingsmassarelli2018safe, title=SAFE: Self-Attentive Function Embeddings for Binary Similarity,...

rematch

|Read The Docs| |Gitter Chat| |Build Status| |Codacy Badge| |idaplugin PyPI| |server PyPI| rematch REmatch, yet another binary comparison tool. Rematch is still a work in progress and is not as feature-rich as we'd like it to be. Basic functionality is available at this point and more advanced...

galer

galer /' '/'' | | /'' ' | || | | | '\ ','\ | /' @dwisiswant0 A fast tool to fetch URLs from HTML attributes by crawl-in. Inspired by the @omespino Tweet, which is possible to extract src, href, url and action values by evaluating JavaScript through Chrome DevTools Protocol. Resources...

IDA2Obj

IDA2Obj IDA2Obj is a tool to implement SBI Static Binary Instrumentation. The working flow is simple: Dump object files COFF directly from one executable binary. Link the object files into a new binary, almost the same as the old one. During the dumping process, you can insert any data/code at an...

bore

bore A modern, simple TCP tunnel in Rust that exposes local ports to a remote server, bypassing standard NAT connection firewalls. That's all it does: no more, and no less. Installation requires Rust, see alternatives below cargo install bore-cli On your local machine bore local 8000 --to bore.pu...

xed

Intel® X86 Encoder Decoder Intel® XED Doxygen API manual and source build manual: https://intelxed.github.io Bugs: https://github.com/intelxed/xed/issues/new Abbreviated GITHUB building instructions: git clone https://github.com/intelxed/xed.git xed git clone https://github.com/intelxed/mbuild.gi...

remill

Remill Remill is a static binary translator that translates machine code instructions into LLVM bitcode. It translates AArch64 64-bit ARMv8, SPARC32 SPARCv8, SPARC64 SPARCv9, x86 and amd64 machine code including AVX and AVX512 into LLVM bitcode. AArch32 32-bit ARMv8 / ARMv7 support is underway...

binbloom

About The purpose of this project is to analyse a raw binary firmware and determine automatically some of its features. This tool is compatible with all architectures as basically, it just does simple statistics on it. Main features: Loading address : binbloom can parse a raw binary firmware and...

Triton

Triton is a dynamic binary analysis library. It provides internal components that allow you to build your program analysis tools, automate reverse engineering, perform software verification or just emulate code. Dynamic symbolic execution Dynamic taint analysis AST representation of the x86 ,...

Kam1n0-Community

What Is Kam1n0 v2? Kam1n0 v2.x is a scalable assembly management and analysis platform. It allows a user to first index a large collection of binaries into different repositories and provide different analytic services such as clone search and classification. It supports multi-tenancy access and...

x86-cpp-reversing-skill

x86-cpp-reversing A Claude Code skill for reverse-engineering 32-bit little-endian x86 IA-32 binaries and disassembly compiled from C++. Recovers class layouts, vtables, virtual dispatch, and RTTI/inheritance hierarchies from ELF or PE binaries, and covers the workflows that come up once you have...

CVE-2025-24204

CVE-2025-24204 About CVE-2025-24204 is a vulnerability that allows reading any process memory on SIP-enabled macOS systems. The root cause of this vulnerability stems from adding an excessively powerful entitlement com.apple.system-task-ports.read to the gcore binary. Exploiting this vulnerabilit...

CVE-2024-32019-POC

Privilege Escalation via ndsudo Netdata Local Exploit This POC is used to exploit a vulnerable ndsudo utility bundled with Netdata to escalate local privileges to root. The exploit works by injecting a malicious binary into the user’s PATH that impersonates a trusted command nvme and is executed...

dnsdiag

DNS Measurement, Troubleshooting and Security Auditing Toolset Have you ever wondered if your ISP is intercepting your DNS traffic? Have you noticed any unusual behavior in your DNS responses, or been redirected to the wrong address and suspected something might be off with your DNS? We offer a...

CVE-2026-110522

A flaw was found in oc-mirror's legacy v1 catalog cache rebuild. When the --build-catalog-cache flag is used, oc-mirror extracts an opm binary from the remote operator catalog image and executes it on the host without verifying its signature, digest, or integrity. An attacker who publishes a...

RunC-CVE-2019-5736

RunC-CVE-2019-5736 Two PoCs for CVE-2019-5736. See Twistlock Labs for an explanation of CVE-2019-5736 and the PoCs. The malicious image PoC is heavily based on q3k’s PoC, so all credit goes to him. Running the PoCs Note that running the PoCs will overwrite the runc binary on the host. It is...

HardeningMeter

Hardening Meter Copyright c OfriOuzan B4MB1 Want to read more about the security mechanisms? Binary files security mechanisms System security mechanisms Description HardeningMeter is an open-source Python tool carefully designed to comprehensively assess the security hardening of binaries and...

CVE-2021-41091

CVE-2021-41091 This exploit offers an in-depth look at the CVE-2021-41091 security vulnerability and provides a step-by-step guide on how to utilize the exploit script to achieve privilege escalation on a host. Vulnerability Summary CVE-2021-41091 is a flaw in Moby Docker Engine that allows...