zabbix-threat-control

Zabbix Threat Control ztc Turn the Zabbix you already run into a vulnerability-management console. ztc reads each host's software inventory through the stock zabbix-agent2 no extra agent to deploy, audits it against Vulners, and pushes scored, per-host findings — problems, dashboards and CVSS...

qiling

Qiling's use case, blog and related work Qiling is an advanced binary emulation framework, with the following features: Emulate multi-platforms: Windows, macOS, Linux, Android, BSD, UEFI, DOS, MBR. Emulate multi-architectures: 8086, X86, X8664, ARM, ARM64, MIPS, RISC-V, PowerPC. Support multiple...

angr

angr angr is a platform-agnostic binary analysis framework. It is brought to you by the Computer Security Lab at UC Santa Barbara, SEFCOM at Arizona State University, their associated CTF team, Shellphish, the open source community, and @rhelmot. Project Links Homepage: https://angr.io Project...

metame

metame metame is a simple metamorphic code engine for arbitrary executables. From Wikipedia: Metamorphic code is code that when run outputs a logically equivalent version of its own code under some interpretation. This is used by computer viruses to avoid the pattern recognition of anti-virus...

dnsx

A fast and multi-purpose DNS toolkit designed for running DNS queries Features • Installation • Usage • Running dnsx • Wildcard • Notes • Join Discord dnsx is a fast and multi-purpose DNS toolkit designed for running various probes through the retryabledns library. It supports multiple DNS querie...

Triton

Triton is a dynamic binary analysis library. It provides internal components that allow you to build your program analysis tools, automate reverse engineering, perform software verification or just emulate code. Dynamic symbolic execution Dynamic taint analysis AST representation of the x86 ,...

OGhidra

OGhidra 3 - AI-Powered Reverse Engineering with Ghidra For the version using a Claude-inspired Orchestrator, see https://github.com/llnl/OGhidra/tree/orchestrator OGhidra bridges Large Language Models with Ghidra's reverse engineering platform, enabling AI-driven binary analysis through natural...

ElfDoor-gcc

ElfDoor-gcc ElfDoor-gcc is an LDPRELOAD that hijacks gcc to inject malicious code into binaries during linking, without touching the source code. Detailed Article: https://matheuzsecurity.github.io/hacking/gcc/ Install git clone https://github.com/MatheuZSecurity/ElfDoor-gcc cd ElfDoor-gcc chmod ...

toolkit

English | Español Indetectables Toolkit Designed as a Swiss Army knife, this curated toolkit is invaluable for malware analysts, crackers, and cybersecurity experts. It is meticulously crafted to support both novice and experienced users. This toolkit complements the manuals and the numbered...

JURIG

Jurig .-. ██ ██ ██ ██████ ██ ██████ o o ██ ██ ██ ██ ██ ██ ██ | u | ██ ██ ██ ██████ ██ ██ ███ | | ██ ██ ██ ██ ██ ██ ██ ██ ██ '-' █████ ██████ ██ ██ ██ ██████ autonomous reverse-engineering agent · android · binary · frida Jurig Sundanese: ghost — an autonomous AI agent that haunts your binaries. I...

scorecard

OpenSSF Scorecard Overview What Is Scorecard? Prominent Scorecard Users View a Project's Score Scorecard's Public Data Using Scorecard Scorecard GitHub Action Scorecard REST API Scorecard Badges Scorecard Command Line Interface Prerequisites Installation Authentication Basic Usage Checks Default...

binsync

BinSync BinSync is a decompiler collaboration tool built on the Git versioning system to enable fined-grained reverse engineering collaboration regardless of decompiler. BinSync is built by mahaloz, the angr team, and the SEFCOM research lab. It's also due in large part to its use by the Shellphi...

CVE-2025-49144

Notepad++ Binary Planting PoC CVE-2025-49144 ⚠️ EDUCATIONAL PURPOSE ONLY This code is designed for educational and research purposes to understand binary planting vulnerabilities. Use only in controlled environments with proper authorization. 📋 Overview This Proof of Concept demonstrates the binar...

uafuzz

UAFuzz: Binary-level Directed Fuzzing for Use-After-Free Vulnerabilities Directed Greybox Fuzzing DGF like AFLGo aims to perform stress testing on pre-selected potentially vulnerable target locations, with applications to different security contexts: 1 bug reproduction, 2 patch testing or 3 stati...

CVE-2026-31431

CVE-2026-31431 — "Copy Fail" Local Privilege Escalation in the Linux Kernel crypto algifaead subsystem. Overview CVE-2026-31431, dubbed "Copy Fail", is a logic bug in the Linux kernel's authencesn cryptographic template algifaead. It allows an unprivileged local user to perform a controlled 4-byt...

CVE-2026-49009

▄█████ ██ ██ ██████ ████▄ ▄██▄ ████▄ ▄██▀▀▀ ██ ██ ▄█▀▀█▄ ▄██▄ ▄██▄ ▄█▀▀█▄ ██ ██▄▄██ ██▄▄ ▄▄▄ ▄██▀ ██ ██ ▄██▀ ██▄▄▄ ▄▄▄ ▀█████ ▀▀▀██ ██ ██ ██ ██ ▀▀▀██ ▀█████ ▀██▀ ██▄▄▄▄ ███▄▄ ▀██▀ ███▄▄ ▀█▄▄█▀ ██ ▄▄██▀ ▀██▀ ▀██▀ ▄▄██▀ ░█▄█░█▀▀░█▀█░█▀▄░█▀▀░█▀▄░░░█▀▀░█▀▀░█▀▄░█░█░█▀▀░█▀▄░░░█▀▄░█▀▀░█▀▀░...

CVE-2020-9047

Usage/Help Menu usage: CVE-2020-9047.py -h -p RPORT -s LPORT --command -d WEBDIR -U USERNAME -P PASSWORD WINDOWS,LINUX,CHECK RHOST LHOST PAYLOAD Exploit for exacqVision Web Service as outlined in CVE-2020-9047. This program targets Windows and Linux x86 installations of exacqVision Web Service...

Learning-Linux-Binary-Analysis

Learning Linux Binary Analysis Learning Linux Binary Analysis This is the code repository for Learning Linux Binary Analysis, published by Packt. Learning Linux Binary Analysis What is this book about? Learning Linux Binary Analysis is packed with knowledge and code that will teach you the inner...

CVE-2026-31431-Copy-Fail-Detection-Toolkit

CVE-2026-31431 Copy Fail Detection Toolkit Detection and analysis toolkit for CVE-2026-31431 "Copy Fail" - a critical Linux Local Privilege Escalation vulnerability affecting distributions from 2017 onwards. Vulnerability Overview CVE-2026-31431 exploits a logic flaw in the Linux kernel's algifae...

maya

maya Linux ELF Anti-tamper, anti-exploitation. Prototype from 2014. No longer maintained. Target binaries: ETEXEC ELF binaries only. Maya uses a relocatable runtime engine 'tracer.o' which is ultimately injected and linked into the protected binary. This is the heart of the runtime processing for...