Triton

Triton is a dynamic binary analysis library. It provides internal components that allow you to build your program analysis tools, automate reverse engineering, perform software verification or just emulate code. Dynamic symbolic execution Dynamic taint analysis AST representation of the x86 ,...

FileInsight-plugins

FileInsight-plugins: decoding toolbox of McAfee FileInsight hex editor for malware analysis FileInsight-plugins is a large set of plugins for McAfee FileInsight hex editor. It adds many capabilities such as decryption, decompression, searching XOR-ed text strings, scanning with a YARA rule, code...

unicorn_pe

Unicorn PE Unicorn PE è un progetto/framework di strumentazione basato su unicorn progettato per emulare l'esecuzione del codice per file PE Windows, in particolare quelli packed. Questo progetto è archiviato e non più mantenuto. sogen è consigliato come successore. Funzionalità Estrai l'immagine...

unicorn:fuzz_emu_mips_32le: Index-out-of-bounds in gen_intermediate_code_pc_mipsel

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=6236015036596224 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemumips32le Job Type: libfuzzerubsanunicorn Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Cras...

Complex Code Reuse Attacks: ROPMEMU

ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks Talos has developed ROPMEMU, a framework to analyze, dissect and decompile complex code-reuse attacks. It adopts a set of different techniques to analyze ROP chains and reconstruct their equivalent code in a form...

Against the heuristics, code emulation detection techniques analysis-vulnerability warning-the black bar safety net

Recent researchVirusthe detection technique, although in thisTrojan, andmalwarerampant,detection technologyin addition to considering the efficiency factorshas become not very important. But I still interest want from here. looking for some ideas. Perhaps against the technology itself is not a wh...