attifyos

AttifyOS v3.0 AttifyOS is a distro intended to help you perform security assessment and penetration testing of Internet of Things IoT devices. It saves you a lot of time by providing a pre-configured environment with all the necessary tools loaded. The new version is based on Ubuntu 18.04 64-Bit ...

inhale

Inhale - Malware Inhaler Inhale is a malware analysis and classification tool that is capable of automating and scaling many static analysis operations. This is the beta release version, for testing purposes, feedback, and community development. Background Inhale started as a series of small...

mtk-su-reverse-cve-2020-0069

mtk-su 私のメモの一部 文字列テーブル binwalk -Xe stringtabledump を使って展開された文字列テーブルを取得する idb 内のアドレスからダンプする 0x1F098 圧縮サイズ: 1260 idb が必要な場合は、メールアドレスを添えて issue を開いてください。送ります。 エクスプロイトを書き直したい場合の良い出発点です。...

binwalk

Binwalk v3 これは、Binwalk ファームウェア解析ツールの更新版で、速度と精度のために Rust で書き直されました。 何ができるのか？ Binwalk は、他のファイル内部に埋め込まれたファイルやデータを識別し、オプションで抽出することができます。 主な用途はファームウェア解析ですが、多種多様なファイル形式やデータ型に対応しています。 エントロピー分析を通じて、未知の圧縮や暗号化を特定するのにも役立ちます！ Binwalk はカスタマイズ可能で、独自の Rust プロジェクトに統合することができます。 どうやって入手するの？ Binwalk...

CVE-2022-4510-WalkingPath

CVE-2022-4510-Binwalk 此脚本允许您生成针对CVE-2022-4510 Binwalk漏洞的利用程序。这些利用程序可用于测试和演示。支持的选项包括SSH、命令执行和反弹Shell。 前提条件 Python 3.x 使用方法 1. 克隆仓库或下载脚本文件。 2. 使用所需选项运行脚本。可用选项如下： ssh：生成SSH利用程序。 参数： file：输入.png文件的路径。 pub：公钥文件的路径。 command：生成执行命令的利用程序。 参数： --command：要执行的命令。 file：输入.png文件的路径。 reverse：生成反弹Shell利用程序。 参数：...

BadPfs-CVE-2022-4510

BadPfs CVE-2022-4510 を悪用する pfs ペイロードを生成する Python スクリプト このスクリプトを使用して pfs ペイロードを簡単に作成できます。binwalk で -e を付けてペイロードを実行すると、binwalk の権限でファイルを上書きできます。 次の例では、binwalk で -e を付けて開いたときに、./data の内容で /etc/sudoers が上書きされます。これは権限昇格に便利な方法です。 root@kitploit: python3 BadPfs.py --out=payload.pfs --data=./data...

binwalk

Binwalk Binwalk 是一款快速、易用的工具，用于分析、逆向工程和提取固件镜像。 EOL 通知 此分支的创建是为了修复 binwalk v2 的一些悬而未决的问题，并使其保持良好的状态。它已实现了帮助用户和发行版打包者的目的。然而，由于原作者最近用 Rust 重写了 binwalk 并再次积极开发，因此不再需要维护 binwalk v2。用户和贡献者应迁移到 binwalk v3。这个新版本还提供了 Rust 库，请参阅 https://github.com/ReFirmLabs/binwalk/wiki/Using-the-Rust-Library。 因此，此仓库将在 202...

AperiSolve v3.7.10

Aperi'Solve Try it now: https://www.aperisolve.com Support Aperi'Solve: Aperi'Solve is an open-source steganalysis web platform that performs automated analysis on images to detect and extract hidden data using common steganography tools and techniques. Key features Visualize each bit layer LSB a...

PYSEC-2026-787 Path traversal in binwalk

A path traversal vulnerability was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.3 inclusive. By crafting a malicious PFS filesystem file, an attacker can get binwalk's PFS extractor to extract files at arbitrary locations when binwalk is run in extraction mode -e option. Remo...

PYSEC-2026-788 binwalk vulnerable to UNIX Symbolic Link (Symlink) Following

A vulnerability, which was classified as problematic, was found in ReFirm Labs binwalk up to 2.3.2. Affected is an unknown function of the file src/binwalk/modules/extractor.py of the component Archive Extraction Handler. The manipulation leads to symlink following. It is possible to launch the...

Linux Distros Unpatched Vulnerability : CVE-2026-7179

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in OSPG binwalk up to 2.4.3. This vulnerability affects the function readnullterminatedstring of the file...

SUSE CVE-2026-7179

A security vulnerability has been detected in OSPG binwalk up to 2.4.3. This vulnerability affects the function readnullterminatedstring of the file src/binwalk/plugins/winceextract.py of the component WinCE Extraction Plugin. Such manipulation of the argument self.filename leads to path traversa...

CVE-2026-7179

A flaw was found in the WinCE Extraction Plugin of OSPG binwalk. A local attacker can exploit this vulnerability by manipulating the 'self.filename' argument in the 'readnullterminatedstring' function. This manipulation leads to a path traversal vulnerability, potentially allowing the attacker to...

DEBIAN-CVE-2026-7179

A security vulnerability has been detected in OSPG binwalk up to 2.4.3. This vulnerability affects the function readnullterminatedstring of the file src/binwalk/plugins/winceextract.py of the component WinCE Extraction Plugin. Such manipulation of the argument self.filename leads to path traversa...

CVE-2026-7179

A security vulnerability has been detected in OSPG binwalk up to 2.4.3. This vulnerability affects the function readnullterminatedstring of the file src/binwalk/plugins/winceextract.py of the component WinCE Extraction Plugin. Such manipulation of the argument self.filename leads to path traversa...

UBUNTU-CVE-2026-7179

A security vulnerability has been detected in OSPG binwalk up to 2.4.3. This vulnerability affects the function readnullterminatedstring of the file src/binwalk/plugins/winceextract.py of the component WinCE Extraction Plugin. Such manipulation of the argument self.filename leads to path traversa...

CVE-2026-7179

A security vulnerability has been detected in OSPG binwalk up to 2.4.3. This vulnerability affects the function readnullterminatedstring of the file src/binwalk/plugins/winceextract.py of the component WinCE Extraction Plugin. Such manipulation of the argument self.filename leads to path traversa...

CVE-2026-7179

CVE-2026-7179 affects OSPG binwalk up to 2.4.3, specifically the WinCE Extraction Plugin’s read_null_terminated_string in src/binwalk/plugins/winceextract.py. The issue allows local path traversal via manipulation of self.file_name. Exploitation is local; the vulnerability is tied to products no ...

EUVD-2026-25932

A security vulnerability has been detected in OSPG binwalk up to 2.4.3. This vulnerability affects the function readnullterminatedstring of the file src/binwalk/plugins/winceextract.py of the component WinCE Extraction Plugin. Such manipulation of the argument self.filename leads to path traversa...

CVE-2026-7179 OSPG binwalk WinCE Extraction Plugin winceextract.py read_null_terminated_string path traversal

A security vulnerability has been detected in OSPG binwalk up to 2.4.3. This vulnerability affects the function readnullterminatedstring of the file src/binwalk/plugins/winceextract.py of the component WinCE Extraction Plugin. Such manipulation of the argument self.filename leads to path traversa...