px-vm

PerimeterX Auditor VM 解析 概要 このリポジトリは、PerimeterX の auditor.js のリバースエンジニアリングを文書化したものです。auditor.js は、PX のボット検出パイプラインにおいて二次的なフィンガープリンティング層として使用されるバイトコード仮想マシンです。この分析では以下をカバーしています。 バイトコードの抽出と5層の復号パイプライン オペコードテーブルの再構築（基本107種 + ハニー40種 + パディング24種 + スーパーインストラクショングループ16種） 定数プールの復号（1230エントリ、1095個の暗号化文字列）...

jadx-magic-strings

JADX Magic Strings 插件 一个从字符串常量中提取信息的 JADX 插件。 功能 该插件从反编译代码中提取并分析字符串常量，以发现： 1. 源文件引用 ：检测字符串常量中对 Java/Kotlin 源文件（.java、.kt、.kts、.scala、.groovy）的引用 2. 方法名候选 ：使用正则表达式模式从字符串中识别潜在的方法名 3. 字符串分析 ：收集所有字符串常量及其关联的方法和类 安装 选项 1：从 GitHub 安装（推荐） 如果此插件已发布到 GitHub，你可以直接安装： root@kitploit: jadx plugins --install...

replica

REPLICA ドラゴンを飼いならせ ✨機能 ⚡ 見逃された命令を逆アセンブル - Ghidraの自動解析が見逃したコードを定義 ⚡ 見逃された関数を検出・修正 - Ghidraの自動解析が見逃した関数を定義 ⚡ 'undefinedN'データ型の修正 - 'undefinedN'データ型を修正して逆アセンブルと逆コンパイルを強化 ⚡ MSDN API情報をコメントとして設定 - 関数、引数、戻り値の情報をコメントとしてGhidraの逆アセンブルリストに統合 ⚡ API呼び出しに基づく関数のタグ付け -...

llvm-jutsu

llvm-jutsu: 反LLM難読化 これは32ビット整数です 問題 2025年です。あなたは完璧なライセンスチェックを作成するのに数週間を費やしました。不透明述語、制御フロー平坦化、MBA式、ありとあらゆるトリックを使いました。デプロイします。数時間後、誰かがバイナリをClaudeに貼り付け、「ライセンスキーは何ですか？」と尋ね、モデルが……教えてくれます。 機械が勝利しました。そうでしょうか？ 九字印の古の技 何世紀にもわたり、忍者は印を結んでチャクラを流し、術を放ってきました。巻物に書かれていないのは、これらの手の形が機械から秘密を守る力を持っているということです。...

postgresql: PostgreSQL pg_stat_statements: Arbitrary code execution via heap buffer overflow

A flaw was found in PostgreSQL pgstatstatements. A local attacker, specifically a query author, could exploit a heap buffer overflow vulnerability by crafting special queries containing array constants. This could allow the attacker to execute arbitrary code as the operating system user running t...

CVE-2026-48206

A flaw was found in the Apache Camel JIRA component. Due to improper input validation, non-Camel-prefixed Exchange header constants can bypass the HTTP header filter. This allows a remote attacker, potentially unauthenticated, to supply specific headers and override intended values. Consequently,...

CVE-2026-16693

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to the use of hardcoded cryptographic constants to obfuscate encryption keys...

EUVD-2026-71486

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to the use of hardcoded cryptographic constants to obfuscate encryption keys...

CVE-2026-16693 IBM i is Affected By Cryptographic Algorithm Weakness in DCM []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to the use of hardcoded cryptographic constants to obfuscate encryption keys...

CVE-2026-16693

IBM i versions 7.3, 7.4, 7.5, and 7.6 are affected by a cryptographic weakness in Digital Certificate Manager (DCM) (5770-SS1 Option 34). The vulnerability stems from hardcoded cryptographic constants used to obfuscate encryption keys, classified as CWE-327 (Use of a Broken or Risky Cryptographic...

Security Bulletin: IBM i is Affected By Cryptographic Algorithm Weakness in DCM [CVE-2026-16693]

Summary IBM i is vulnerable to allowing an authenticated attacker to obtain sensitive information CVE-2026-16693 in Digital Certificate Manager DCM as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16693 DESCRIPTION: IBM i could allow a remote authenticated...

NoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translation

A NoSQL/expression injection weakness exists in the LINQ-to-aggregation query translation layer of the MongoDB C Driver, in both aggregation expression and query filter translation. When application-supplied values are embedded in certain query constructs, special elements contained within those...

CVE-2026-14676

A flaw was found in PostgreSQL pgstatstatements. A local attacker, specifically a query author, could exploit a heap buffer overflow vulnerability by crafting special queries containing array constants. This could allow the attacker to execute arbitrary code as the operating system user running t...

BIT-POSTGRESQL-2026-14676 PostgreSQL pg_stat_statements heap buffer overflow executes arbitrary code

Heap buffer overflow in PostgreSQL pgstatstatements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries containing array constants. Within major version 18, minor versions before PostgreSQL 18.6 are affected. Versions before...

SUSE CVE-2026-14676

Heap buffer overflow in PostgreSQL pgstatstatements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries containing array constants. Within major version 18, minor versions before PostgreSQL 18.6 are affected. Versions before...

ALPINE-CVE-2026-14676

Heap buffer overflow in PostgreSQL pgstatstatements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries containing array constants. Within major version 18, minor versions before PostgreSQL 18.6 are affected. Versions before...

CVE-2026-14676

Heap buffer overflow in PostgreSQL pgstatstatements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries containing array constants. Within major version 18, minor versions before PostgreSQL 18.6 are affected. Versions before...

UBUNTU-CVE-2026-14676

Heap buffer overflow in PostgreSQL pgstatstatements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries containing array constants. Within major version 18, minor versions before PostgreSQL 18.6 are affected. Versions before...

CVE-2026-14676

Heap buffer overflow in PostgreSQL pgstatstatements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries containing array constants. Within major version 18, minor versions before PostgreSQL 18.6 are affected. Versions before...

CVE-2026-14676

Heap buffer overflow in PostgreSQL pgstatstatements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries containing array constants. Within major version 18, minor versions before PostgreSQL 18.6 are affected. Versions before...