Dna

Dna Dna — это фреймворк для статического анализа бинарных файлов, построенный на основе LLVM. Примечательно, что он написан почти полностью на C, включая управляемые привязки для LLVM, Remill и Souper. Функциональность Dna реализует итеративную реконструкцию графа потока управления, вдохновлённую...

jadx

JADX jadx - Dex to Java decompiler Command line and GUI tools for producing Java source code from Android Dex and Apk files !WARNING Please note that in most cases jadx can't decompile all 100% of the code, so errors will occur. Check Troubleshooting guide for workarounds. Main features: decompil...

cfgrip

cfgrip PE/ELF x86/x64 — извлекатель CFG. Принимает бинарный файл, дизассемблирует его, разрешает каждый переход и вызов GOT, таблицы переходов, трассировка регистров и экспортирует полный граф потока управления в виде структурированного JSON. зачем Вам нужно точно знать, куда ведёт каждая ветвь. ...

REpsych

REpsych : Guerra psicologica nel Reverse Engineering github.com/xoreaxeaxeax/repsych // domas // @xoreaxeaxeax Panoramica Il toolset REpsych è una prova di concetto che illustra la generazione di immagini attraverso il grafo di flusso di controllo CFG di un programma. CFG di una funzione tipica| ...

REpsych

REpsych : Guerra psicologica nel reverse engineering github.com/xoreaxeaxeax/repsych // domas // @xoreaxeaxeax Panoramica Il toolset REpsych è una prova di concetto che illustra la generazione di immagini attraverso il grafo di controllo di flusso CFG di un programma. Il CFG di una funzione tipic...

panopticon

DEPRECATO Il progetto Panopticon è stato spostato suGitlab ed è stato ristrutturato in più crate. La GUI Qt è stata sostituita con Verso. Accetterò pull request ma non farò lavoro sostanziale su questa versione. La maggior parte dei link sottostanti sono morti. Panopticon - Un Disassemblatore...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: BPF: Handling jset if a & b ... as a jump in CFG computation. BPFJSET is a conditional jump, and currently, verifier.c:canjump does not take this into account. This can lead to incorrect live registers and incorrect SCC Set of...

NFTDELTA: Detecting Permission Control Vulnerabilities in NFT Contracts through Multi-View Learning

Permission control vulnerabilities in Non-fungible token NFT contracts can result in significant financial losses, as attackers may exploit these weaknesses to gain unauthorized access or circumvent critical permission checks. In this paper, we propose NFTDELTA, a framework that leverages static...

The Code Whisperer: LLM and Graph-Based AI for Smell and Vulnerability Resolution

Code smells and software vulnerabilities both increase maintenance cost, yet they are often handled by separate tools that miss structural context and produce noisy warnings. This paper presents The Code Whisperer, a hybrid framework that combines graph-based program analysis with large language...

Aether Smart Contract Security Analysis Framework 5.0.2

Aether is a Python-based framework for analyzing Solidity smart contracts, generating vulnerability findings, producing Foundry-based proof-of-concept PoC tests, and validating exploits on mainnet forks. It combines Solidity AST parsing, taint analysis, control flow graph analysis, cross-contract...

Aether Smart Contract Security Analysis Framework 6.0

Aether is a Python-based framework for analyzing Solidity smart contracts, generating vulnerability findings, producing Foundry-based proof-of-concept PoC tests, and validating exploits on mainnet forks. It combines Solidity AST parsing, taint analysis, control flow graph analysis, cross-contract...

SAGA: Detecting Security Vulnerabilities Using Static Aspect Analysis

Python is one of the most popular programming languages; as such, projects written in Python involve an increasing number of diverse security vulnerabilities. However, existing state-of-the-art analysis tools for Python only support a few vulnerability types. Hence, there is a need to detect a...

EUVD-2021-0439

Malware in sbrugna...

EUVD-2025-27932

Malicious code in bioql PyPI...

CVE-2025-38607

In the Linux kernel, the following vulnerability has been resolved: bpf: handle jset if a & b ... as a jump in CFG computation BPFJSET is a conditional jump and currently verifier.c:canjump does not know about that. This can lead to incorrect live registers and SCC computation. E.g. in the...

UBUNTU-CVE-2025-38607

In the Linux kernel, the following vulnerability has been resolved: bpf: handle jset if a & b ... as a jump in CFG computation BPFJSET is a conditional jump and currently verifier.c:canjump does not know about that. This can lead to incorrect live registers and SCC computation. E.g. in the...

CVE-2025-38607

In the Linux kernel, the following vulnerability has been resolved: bpf: handle jset if a & b ... as a jump in CFG computation BPFJSET is a conditional jump and currently verifier.c:canjump does not know about that. This can lead to incorrect live registers and SCC computation. E.g. in the...

CVE-2025-38607

CVE-2025-38607 refers to a Linux kernel issue in the BPF verifier where BPF_JSET (conditional jump) was not handled correctly in CFG/live register/SCC computation. The described flaw could cause incorrect live-register tracking and SCC analysis due to can_jump() not accounting for jset, potential...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the bpf module not treating jset as a jump in CFG calculations...

PT-2025-33805 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue where the BPF JSET conditional jump is not correctly handled during control flow graph CFG computation. This can lead to incorrect live register and...