peframe

======= peframe peframe is a open source tool to perform static analysis on Portable Executable malware and generic suspicious file. It can help malware researchers to detect packer, xor, digital signature, mutex, anti debug, anti virtual machine, suspicious sections and functions, macro and much...

sbox

sbox - C++용 컴파일 타임 AES 문자열 난독화 표준 솔루션은 length + "" + string에 의존합니다. 이는 역추적이 쉽습니다. sbox 는 constexpr AES-128 블록 암호를 사용하여 문자열을 높은 엔트로피의 노이즈로 변환합니다. 배경 이야기 Neetcode의 "Encode and Decode Strings" 챌린지 중에, 저는 제 난독화 프로젝트인 Obfusk8의 AES 엔진을 포팅했습니다. 구현체는 첫 제출 시 7ms 만에 통과했습니다. 암호화 보안이 성능의 희생양이 되어서는 안 됩니다. 특징...

obfus.h

obfus.h obfus.h is a macro-only library for compile-time obfuscating C applications, designed specifically for the Tiny C tcc you can download it here - Tiny-C-Compiler/releases. It is tailored for Windows x86 and x64 platforms and supports almost all versions of the compiler. Very reliable armor...

Obfusk8

Obfusk8: C++17 기반 난독화 라이브러리 Obfusk8 는 경량 헤더 전용 C++17 라이브러리로, 애플리케이션의 난독화를 크게 향상시켜 리버스 엔지니어링을 훨씬 더 어렵게 만들도록 설계되었습니다. 코드의 로직과 데이터를 보호하기 위해 다양한 컴파일 타임 및 런타임 기술을 사용합니다. 목차 1. 핵심 난독화 전략 2. 의존성 3. 시각화 4. 엔진 분석 및 탐지 프로필 5. 구조적 및 포렌식 특성 6. 사용법 7. 빌드 8. 데모 9. 기여 및 피드백 핵심 난독화 전략 1. main 함수 래핑 main 매크로...

static_asm

staticasm A header-only C++20 library for compile-time x86/x86-64 instruction encoding. This project is dual-licensed under the Boost Software License 1.0 and the MIT License. You may choose either license. Purpose Learning x86 assembly encoding in a practical and fun way Generating assembly...

[SECURITY] Fedora 45 Update: ocaml-jst-config-0.17.0-13.fc45

This package defines compile-time constants used in Jane Street libraries such as Base, Core, and Async...

CVE-2022-24713-POC

Ubuntu에서 CVE-2022-24713의 PoC Ubuntu에서 현재 rust-regex 패키지를 설치하십시오. 그런 다음, 이 저장소를 클론하십시오. 그런 다음, cargo build를 실행하십시오. regex 의존성은 /usr/share/cargo/registry 폴더로 설정되어 있으므로 의존성 문제가 없습니다. 컴파일이 터무니없이 오래 걸린다면, 이는 서비스 거부이며 CVE-2022-24713입니다. 그렇지 않다면, 패치되었습니다...

WTSRM2

WTSRM2 これは私の元のプロジェクト WTSRM と対応する トーク の続きです。 このプロジェクトは、C++17 を利用して、必要な機能をコンパイル時に簡単に変更できるテンプレートを作成するために書き直されました! これはヘッダーのみのファイルとして実装されているため、自分のプロジェクトに簡単に追加できます。 現在実装されている機能には以下があります: CRT 依存なし 10KB バイナリ \KnownDlls\ または \System32\ を使用した '.text' パッチにより、すべての Windows DLL のフックを解除 パッチには VirtualProtect または...

nimvoke

nimvoke 間接システムコール + DInvoke をシンプルに。 自身の Nim プロジェクトに直接インポートできるように設計された nimvoke は、マクロを使って間接システムコールと DInvoke スタイルのデリゲート宣言の詳細を抽象化します。このライブラリは、すぐに使えて比較的 op-sec フレンドリーになることを意図しています。マクロで使用される関数名とライブラリ名はコンパイル時にハッシュ化され、SSN と syscall 命令のアドレスはフックの有無にかかわらず取得されます。すべてのシステムコールは ntdll.dll 内の正しい syscall 命令を経由します。...

CentOS Linux 8 [TuxCare] Security Update: perl / perl-Attribute-Handlers / perl-Devel-Peek / etc (CENTOS-STREAM8:CLSA-2026:1780395563)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1780395563 advisory. - Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling...

[SECURITY] [DSA 6416-2] jq regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-6416-2 [email protected] https://www.debian.org/security/ Aron Xu September 25, 2026 https://www.debian.org/security/faq -...

SindriKit v2.0.0

SindriKit Offensive Development Deserves Better Architecture. A C library for building offensive capabilities. Core Concept Most offensive utilities hardcode their execution mechanics inside the technique's logic. A reflective loader doesn't just map an image; it maps it using a specific, hardcod...

CVE-2026-59989

Phalcon (PHP framework) versions 5.15.0 and earlier are vulnerable to a Server-Side Template Injection (SSTI) in the Volt compiler's join filter. The root cause is in resolveFilter within phalcon/Mvc/View/Engine/Volt/Compiler.zep, which inserts raw separator and array token values directly into g...

CVE-2026-59989 Phalcon Volt compiler `join` filter compile-time PHP code injection (SSTI lead to RCE)

Phalcon is a high-performance, full-stack PHP framework. In 5.15.0 and earlier, resolveFilter in phalcon/Mvc/View/Engine/Volt/Compiler.zep builds the join filter by inserting the raw separator and array token values into generated PHP without passing them through expression. An attacker who can...

Rust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns

Malicious versions of the arrayref Rust crate and others executed a backdoor at compile time. The campaign's infrastructure overlaps with recent DPRK supply chain attacks, including Mastra and axios...

SindriKit v1.6.0

SindriKit Offensive Development Deserves Better Architecture. A C library for building offensive capabilities. Core Concept Most offensive utilities hardcode their execution mechanics inside the technique's logic. A reflective loader doesn't just map an image; it maps it using a specific, hardcod...

SindriKit v1.5.0

SindriKit Offensive Development Deserves Better Architecture. A C library for building offensive capabilities. Core Concept Most offensive utilities hardcode their execution mechanics inside the technique's logic. A reflective loader doesn't just map an image; it maps it using a specific, hardcod...

Script security bypass vulnerability in script-security

script-security 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annotations such as @CompileStatic and @TypeChecked that carry an extensions member, which causes Groovy to load and execute a script from the classpath at compile time, before the sandbox is applied. This ma...

Exploit for CVE-2026-49757

CVE-2026-49757 — AshAuthentication OAuth2/OIDC Account Takeove...

Obliv-Clang: Real-World Oblivious Programming in C++

Side-channel vulnerabilities, particularly timing and access-pattern-based attacks, have become critical issues for confidential data processing in trusted environments. Oblivious programming is an effective approach to alleviate these attacks by making program execution not leak any secret throu...