ABD

高度なバイナリ難読化解読 このリポジトリには、2020年に開催されたGlobal Cybersecurity Camp GCC TokyoおよびSecurity Camp National Workshopにおける高度なバイナリ難読化解読コースの教材が含まれています。 コース概要...

bearer

ソースコードをスキャンして、主要なセキュリティ およびプライバシー のリスクを検出します。 Bearerは、ソースコードをスキャンしてデータフローを分析し、セキュリティとプライバシーのリスクを特定、フィルタリング、優先順位付けするために設計された静的アプリケーションセキュリティテスト（SAST）ツールです。 Bearerは、無料のオープンソリューションであるBearer CLIと、Cycodeから入手可能な商用ソリューションBearer Proを提供しています。 はじめに - よくある質問 - ドキュメント - バグを報告 言語サポート...

caracal

Caracal Caracal 是一个针对 Starknet 智能合约的 SIERRA 表示的静态分析工具。 功能特点 检测器：检测易受攻击的 Cairo 代码 打印器：报告信息 污点分析 数据流分析框架 易于在 Scarb 项目中运行 安装 预编译二进制文件 预编译的二进制文件可在我们的发布页面获取。如果您使用的是 Cairo 编译器 1.x.x，请使用 v0.1.x 二进制文件；如果您使用的是 Cairo 编译器 2.x.x，请使用 v0.2.x。 从源码构建 您需要安装 Rust 编译器和 Cargo。 从 git 构建： root@kitploit: cargo install...

ScratchABit

ScratchABit ScratchABit는 데이터/제어 흐름 분석 기능을 갖춘 대화형 증분식 디스어셈블러입니다. ScratchABit는 오픈소스 리버스 엔지니어링 커뮤니티의 노력에 전념합니다벤더가 제대로 지원하지 않는 하드웨어에 대한 오픈소스 드라이버/펌웨어 생성, 하드웨어 및 소프트웨어 상호 운용성, 보안 연구를 위한 리버스 엔지니어링. ScratchABit는 디스어셈블리/확장 모듈 작성을 위해 커뮤니티에서 잘 알려진 IDAPython API를 지원합니다. ScratchABit는 진행 중인 작업이며, 필요에 따라 기능이...

polytracker

PolyTracker PolyTracker는 원래 파서의 자동 어휘 주석 및 탐색Automated Lexical Annotation and Navigation of Parsers 을 위해 만들어진 도구로, 이 이름은 오직 ALAN 파서 프로젝트The ALAN Parsers Project 라고 부르기 위해 뒤에서 만든 역두문자어backronym입니다. 그러나 현재는 프로그램의 데이터 흐름 및 제어 흐름 분석을 효율적으로 수행하기 위한 범용 도구로 발전했습니다. PolyTracker는 입력 파일의 어떤 바이트가 어떤 함수에 의해...

route-sixty-sink

✏️ 기여자 Dillon Franke @dillonfranke Michael Maturi @a-marionette 📝 블로그 https://www.mandiant.com/resources/route-sixty-sink-launch ⚓ Route Sixty-Sink Route Sixty-Sink 는 방어자와 보안 연구자가 자동화된 소스-싱크 분석source-to-sink analysis을 사용하여 모든 .NET 어셈블리에서 취약점을 신속하게 식별할 수 있게 해주는 오픈 소스 도구입니다. 애플리케이션 바이너리 또는 소스 코드 내의...

GAPS: Guiding Dynamic Android Analysis with Static Path Synthesis

Dynamically resolving method reachability in Android applications remains a critical and largely unsolved problem. Despite notable advancements in GUI testing and static call graph construction, current tools are insufficient for reliably driving execution toward specific target methods, especial...

EUVD-2021-19525

Malware in sbrugna...

CVE-2021-32754

FlowDroid is a data flow analysis tool. FlowDroid versions prior to 2.9.0 contained an XML external entity XXE vulnerability that allowed an attacker who had control over the source/sink definition file in XML format to read files from external locations. In order for this to occur, the XML-based...

CVE-2021-32754 Improper Restriction of XML External Entity Reference in de.tud.sse

FlowDroid is a data flow analysis tool. FlowDroid versions prior to 2.9.0 contained an XML external entity XXE vulnerability that allowed an attacker who had control over the source/sink definition file in XML format to read files from external locations. In order for this to occur, the XML-based...

CVE-2021-32754

FlowDroid is a data flow analysis tool. CVE-2021-32754 describes an XML External Entity (XXE) vulnerability in FlowDroid versions prior to 2.9.0, where an attacker who can control the XML-based source/sink definition file could read files from external locations. The vulnerability requires use of...

Nagios Network Analyzer Self-XSS Vulnerability

Nagios Network Analyzer is a network data flow analyzer that provides a view of all network traffic and bandwidth utilization. A Self-XSS vulnerability exists in Nagios Network Analyzer versions prior to 2.4.2. An attacker can exploit this vulnerability to conduct cross-site scripting attacks via...

Top 3 Tech Challenges RASP/(ng)WAF Vendors Are Faced With

Here I’d like to share my experience and pain in building L7 data protection solutions which are frequently called WAF/ngWAFs or RASPs. I started to build it back in 2009 from a simple detection logic based on self-adopted heuristics for a CTF competition and then build an entire company on machi...

WAP - Web Application Protection

WAP is a source code static analysis and data mining tool to detect and correct input validation vulnerabilities in web applications written in PHP version 4.0 or higher with a low rate of false positives. WAP detects and corrects the following vulnerabilities: SQL Injection SQLI Cross-site...

Web Application Protection - Tool to detect and correct vulnerabilities in PHP web applications

WAP 2.0 is a source code static analysis and data mining tool to detect and correct input validation vulnerabilities in web applications written in PHP version 4.0 or higher and with a low rate of false positives. WAP detects and corrects the following vulnerabilities: SQL Injection SQLI Cross-si...