ved-ebpf

VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF VED Vault Exploit Defense-eBPF leverages eBPF extended Berkeley Packet Filter to implement runtime kernel security monitoring and exploit detection for Linux systems. Introduction eBPF is an in-kernel virtual machine that allows code...

grap

grap: define and match graph patterns within binaries https://github.com/QuoSecGmbH/grap grap takes patterns and binary files, uses a Casptone-based disassembler to obtain the control flow graphs from the binaries, then matches the patterns against them. Patterns are user-defined graphs with...

jadx

JADX jadx - Dex to Java decompiler Command line and GUI tools for producing Java source code from Android Dex and Apk files !WARNING Please note that in most cases jadx can't decompile all 100% of the code, so errors will occur. Check Troubleshooting guide for workarounds. Main features: decompil...

Alcatraz

Alcatraz Alcatraz is a x64 binary obfuscator that is able to obfuscate various different pe files including: .exe .dll .sys Overview Alcatraz Requirements Usage Features Obfuscation of immediate moves Control flow flattening ADD mutation Entry-point obfuscation Lea obfuscation Anti disassembly...

angr

angr angr is a platform-agnostic binary analysis framework. It is brought to you by the Computer Security Lab at UC Santa Barbara, SEFCOM at Arizona State University, their associated CTF team, Shellphish, the open source community, and @rhelmot. Project Links Homepage: https://angr.io Project...

CVE-2026-82539

CVE-2026-82539 Submitter: Nicola Giuffrida Information Vendor: TOTOLINK Vendor's website: TOTOLINK Model: A720R Firmware version: V4.1.5cu.630B20250509 Firmware download address: TOTOLINK Severity CVSS v4.0 Base Score: 8.7 High Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA...

process_overwriting

Process Overwriting Process Overwriting is a PE injection technique, closely related to Process Hollowing and Module Overloading. With its help, you can replace the main executable not a DLL of the target process. It works only for a newly created process - injection to existing processes is not...

CVE-2026-2766-but-with-wasm

CVE-2026-2766, but with wasm Status: validated crash PoC with demonstrated control-flow hijack crashpc = freed-cell poison 0xcdcdcdcdcdcdcdcd under the debug shell — the engine jumps to a pointer read out of the freed ICScript. Remaining work: control the reclaimed bytes. See research/README.md. ...

lvi-lfb-attack-poc

PoC for the LVI-LFB Control Flow Hijacking attack CVE-2020-0551 This repository holds the sources for the LVI-LFB Control Flow Hijacking attack PoC. Contents lvi-cfh-poc - hijack the control flow of another process via line-fill buffer spraying whitepaper Prerequisites 1. Visual Studio 2015 2. A...

PowerShell-Pro-Obfuscator-Python

PowerShell Pro Obfuscator — Offusca e Virtualizza Codice PowerShell PowerShell Pro Obfuscator protegge script .ps1 proprietari con rinomina, crittografia polimorfa di stringhe e interi, appiattimento del flusso di controllo, automi a stati finiti FSA, un motore VM, controlli di integrità...

ScratchABit

ScratchABit ScratchABit ist ein interaktiver inkrementeller Disassembler mit Daten-/Kontrollflussanalyse-Funktionen. ScratchABit ist den Bemühungen der OpenSource Reverse Engineering Community gewidmet Reverse Engineering, um OpenSource-Treiber/Firmware für Hardware zu erstellen, die von...

ved-ebpf

VED-eBPF: Rilevamento di Exploit del Kernel e Rootkit tramite eBPF VED Vault Exploit Defense-eBPF sfrutta eBPF extended Berkeley Packet Filter per implementare il monitoraggio runtime della sicurezza del kernel e il rilevamento di exploit per sistemi Linux. Introduzione eBPF è una macchina virtua...

REpsych

REpsych : Guerra psicologica nel Reverse Engineering github.com/xoreaxeaxeax/repsych // domas // @xoreaxeaxeax Panoramica Il toolset REpsych è una prova di concetto che illustra la generazione di immagini attraverso il grafo di flusso di controllo CFG di un programma. CFG di una funzione tipica| ...

REpsych

REpsych : Guerra psicologica nel reverse engineering github.com/xoreaxeaxeax/repsych // domas // @xoreaxeaxeax Panoramica Il toolset REpsych è una prova di concetto che illustra la generazione di immagini attraverso il grafo di controllo di flusso CFG di un programma. Il CFG di una funzione tipic...

diaphora

δiaphora Installazione Installa con il gestore plugin Hex-Rays: root@kitploit: hcli plugin install https://github.com/joxeankoret/diaphora/archive/refs/tags/3.4.2.zip Le istruzioni di installazione manuale sono riportate di seguito. Diaphora διαφορά, greco per 'differenza' versione 3.4 è il più...

pyt

.. image:: https://travis-ci.org/python-security/pyt.svg?branch=master :target: https://travis-ci.org/python-security/pyt .. image:: https://readthedocs.org/projects/pyt/badge/?version=latest :target: http://pyt.readthedocs.io/en/latest/?badge=latest .. image::...

Chromium: CVE-2026-79033 Insufficient control flow management in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

panopticon

DEPRECATO Il progetto Panopticon è stato spostato suGitlab ed è stato ristrutturato in più crate. La GUI Qt è stata sostituita con Verso. Accetterò pull request ma non farò lavoro sostanziale su questa versione. La maggior parte dei link sottostanti sono morti. Panopticon - Un Disassemblatore...

retdec

Warning The RetDec project is currently in a limited maintenance mode due to a lack of resources: Pull Requests are welcomed. They are reviewed with priority, if possible without delays. Issues are reacted on with delays up to one quarter. Issues are not actively solved unless they relate to a...

Reverse-Engineering

Un tutorial completo e gratuito di reverse engineering che copre le architetture x86, x64, ARM a 32/64 bit, AVR a 8 bit e RISC-V a 32 bit. PROMO DEL CORSO GRATUITO DI EMBEDDED HACKING QUI Unisciti a DC540 Discord QUI OUROBOROS BADGE QUI COME FUNZIONA QUI CLICCA SULL'IMMAGINE SOTTO PER GUARDARE IL...