hal

欢迎使用 HAL！ HAL /hel/ 是一个全面的网表逆向工程与操作框架。 导航 1. 简介 2. 构建说明 3. 快速入门指南 4. 学术背景 简介 HAL 到底是什么？ 几乎所有现有的网表分析研究都基于所检查网表的图形化表示。 其核心在于，HAL 正好提供了这一点：一个将任意来源（例如 FPGA 或 ASIC）的网表解析为基于图形的网表表示，并提供必要的内置工具用于遍历和分析所包含的门和连线的框架。 我们的愿景是让 HAL 成为硬件逆向工程领域与 IDA 或 Ghidra 等工具地位相当的工具。 我们希望 HAL...

maat

关于 Maat 是一个开源的动态符号执行与二进制分析框架。它提供了多种功能，如符号执行、污点分析、约束求解、二进制加载、环境模拟，并利用 Ghidra 的 sleigh 库进行汇编提升：https://maat.re 主要特性： 快速且可移植 ：专为扩展到实际应用程序而设计。完全使用 C++ 编写，具有良好的运行时性能。几乎没有运行时依赖，且大多数依赖是可选安装的。 用户友好 ：Maat 拥有灵活的调试器类 API，其功能可配置以适应多种不同的用例。作为一款现代框架，它自带 Python 绑定 。 多架构 ：基于 Ghidra 强大的 sleigh 库进行提升和模拟，Maat...

CrucibleC2

HardHat C2 一个跨平台、协作式的命令与控制框架，使用 C 编写，专为红队评估和易用性设计 HardHat 是一个多用户 C .NET 基础的命令与控制（C2）框架，旨在辅助红队评估和渗透测试。它通过提供一个健壮且易用的 C2 框架，致力于改善评估期间的工作质量。 HardHat 包含三个主要组件： 1. 一个 ASP.NET 团队服务器（Teamserver） 2. 一个 Blazor .NET 客户端 3. 内置的 C 基础植入物（Implant） 1. 支持其他语言的第三方植入物 完整文档见：https://docs.hardhat-c2.net/。 注意 ：HardHat...

qs_old

QuickSand.io Para QuickSand Versión 2 escrita en Python con soporte de análisis PDF, consulte quicksand.io. QuickSand Versión 1 Lite ya no está en desarrollo activo. QuickSand es un marco compacto en C para analizar documentos sospechosos de malware para 1 identificar exploits en flujos de...

[SECURITY] Fedora 43 Update: objfw-1.5.5-1.fc43

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

[SECURITY] Fedora 44 Update: mingw-objfw-1.5.5-1.fc44

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

[SECURITY] Fedora 43 Update: objfw-1.5.4-1.fc43

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

[SECURITY] Fedora 44 Update: objfw-1.5.4-1.fc44

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

[SECURITY] Fedora 44 Update: mingw-objfw-1.5.4-1.fc44

ObjFW is a portable, lightweight framework for the Objective-C language. It enables you to write an application in Objective-C that will run on any platform supported by ObjFW without having to worry about differences between operating systems or various frameworks you would otherwise need if you...

New Threat Actor 'Void Arachne' Targets Chinese Users with Malicious VPN Installers

Chinese-speaking users are the target of a never-before-seen threat activity cluster codenamed Void Arachne that employs malicious Windows Installer MSI files for virtual private networks VPNs to deliver a command-and-control C&C framework called Winos 4.0. "The campaign also promotes compromised...

CVE-2023-31038

SQL injection in Log4cxx when using the ODBC appender to send log messages to a database. No fields sent to the database were properly escaped for SQL injection. This has been the case since at least version 0.9.0released 2003-08-06 Note that Log4cxx is a C++ framework, so only C++ applications...

CVE-2023-31038

SQL injection in Log4cxx when using the ODBC appender to send log messages to a database. No fields sent to the database were properly escaped for SQL injection. This has been the case since at least version 0.9.0released 2003-08-06 Note that Log4cxx is a C++ framework, so only C++ applications...

CVE-2023-31038 Apache Log4cxx: SQL injection when using ODBC appender

SQL injection in Log4cxx when using the ODBC appender to send log messages to a database. No fields sent to the database were properly escaped for SQL injection. This has been the case since at least version 0.9.0released 2003-08-06 Note that Log4cxx is a C++ framework, so only C++ applications...

CVE-2023-31038

SQL injection in Log4cxx when using the ODBC appender to send log messages to a database. No fields sent to the database were properly escaped for SQL injection. This has been the case since at least version 0.9.0released 2003-08-06 Note that Log4cxx is a C++ framework, so only C++ applications...

CVE-2023-31038 Apache Log4cxx: SQL injection when using ODBC appender

SQL injection in Log4cxx when using the ODBC appender to send log messages to a database. No fields sent to the database were properly escaped for SQL injection. This has been the case since at least version 0.9.0released 2003-08-06 Note that Log4cxx is a C++ framework, so only C++ applications...

CVE-2023-31038: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in Log4cxx when using the ODBC appender to send log messages to a database. No fields sent to the database were properly escaped for SQL injection. This has been the case since at least version 0.9.0released 2003-08-06 Note that Log4cxx is a C++ framework, so only C++ applications...

Baphomet - Basic Concept Of How A Ransomware Works

This is a proof of concept of how a ransomware works, and some techniques that we usually use to hijack our files. This project is written in C using the net-core application framework 3.1.The main idea of the code is to make it as readable as possible so that people have an idea of how this type...

Packet Manipulation Framework: PcapPlusPlus

PcapPlusPlus is a multiplatform C++ network sniffing and packet parsing and manipulation framework. PcapPlusPlus is meant to be lightweight, efficient and easy to use. What makes PcapPlusPlus different from similar C++ wrappers for libpcap/WinPcap? Designed to be lightweight and efficient Support...

Watcher v1.5.8 - Web Security Testing Tool and Passive Vulnerability Scanner

Watcher is a runtime passive-analysis tool for HTTP-based Web applications. Being passive means it won't damage production systems, it's completely safe to use in Cloud computing, shared hosting, and dedicated hosting environments. Watcher detects Web-application security issues as well as...