17 matches found
qiling
Qiling's use case, blog and related work Qiling is an advanced binary emulation framework, with the following features: Emulate multi-platforms: Windows, macOS, Linux, Android, BSD, UEFI, DOS, MBR. Emulate multi-architectures: 8086, X86, X8664, ARM, ARM64, MIPS, RISC-V, PowerPC. Support multiple...
bindiff
版权所有 2011-2026 Google LLC。 BinDiff 本仓库包含 BinDiff 的源代码。BinDiff 是一款开源二进制文件比较工具，可快速发现反汇编代码中的差异与相似之处。 目录 关于 BinDiff 快速入门 文档 代码地图 从源码构建 许可协议 参与贡献 关于 BinDiff BinDiff 是一款开源二进制文件比较工具，可帮助漏洞研究人员和工程师快速发现反汇编代码中的差异与相似之处。 借助...
shellcide
Shellcide x8664 shellcode IDE for Linux（适用于 Linux 的 x8664 shellcode 集成开发环境）。 你可以在这里找到在线演示（不支持调试）：Shellcide 在线演示 状态 这是我大约在 2018 年尝试制作的一个工具，但由于缺乏技能和对 GUI 开发的兴趣，一直未能完成。现在我把它当作学习现代随性编程的借口，并借助初次尝试的经验加以加速和改进。 这仍然是一个开发中的项目，但在我看来，与传统的编写汇编器、objdump、格式化、插入 C 程序并通过 GDB 运行的方法相比，它已经更好用了。 功能 Linux 支持 x8664 汇编器...
USN-8575-1 linux, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-realtime, linux-xilinx-zynqmp vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...
[SECURITY] Fedora 43 Update: PackageKit-1.3.4-3.fc43
PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API...
[SECURITY] Fedora 44 Update: PackageKit-1.3.4-3.fc44
PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API...
USN-8028-1 linux, linux-raspi vulnerabilities
It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. CVE-2024-36331 Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt...
Vision Transformers: the Threat of Realistic Adversarial Patches
The increasing reliance on machine learning systems has made their security a critical concern. Evasion attacks enable adversaries to manipulate the decision-making processes of AI systems, potentially causing security breaches or misclassification of targets. Vision Transformers ViTs have gained...
FlowMalTrans: Unsupervised Binary Code Translation for Malware Detection Using Flow-Adapter Architecture
Applying deep learning to malware detection has drawn great attention due to its notable performance. With the increasing prevalence of cyberattacks targeting IoT devices, there is a parallel rise in the development of malware across various Instruction Set Architectures ISAs. It is thus importan...
SUSE CVE-2009-0834
The auditsyscallentry function in the Linux kernel 2.6.28.7 and earlier on the x8664 platform does not properly handle 1 a 32-bit process making a 64-bit syscall or 2 a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit configurations via crafted...
[SECURITY] Fedora 27 Update: PackageKit-1.1.10-1.fc27
PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API...
[SECURITY] Fedora 28 Update: PackageKit-1.1.10-1.fc28
PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API...
QuarkslaB Dynamic binary Instrumentation: QBDI
QuarkslaB Dynamic binary Instrumentation QBDI is a modular, cross-platform and cross-architecture DBI framework. It aims to support Linux, macOS, Android, iOS and Windows operating systems running on x86, x86-64, ARM and AArch64 architectures. Information about what is a DBI framework and how QBD...
[SECURITY] Fedora 15 Update: PackageKit-0.6.15-2.fc15
PackageKit is a D-Bus abstraction layer that allows the session user to manage packages in a secure way using a cross-distro, cross-architecture API...
kernel: x86-64: syscall-audit: 32/64 syscall hole
The auditsyscallentry function in the Linux kernel 2.6.28.7 and earlier on the x8664 platform does not properly handle 1 a 32-bit process making a 64-bit syscall or 2 a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit configurations via crafted...