ScratchABit

ScratchABit ScratchABit هو مفكك تفاعلي تزايدي مع قدرات تحليل تدفق البيانات/التحكم. ScratchABit مكرس لجهود مجتمع الهندسة العكسية مفتوحة المصدر الهندسة العكسية لإنتاج برامج تشغيل/برامج ثابتة مفتوحة المصدر للأجهزة غير المدعومة بشكل صحيح من قبل البائعين، من أجل التوافق بين الأجهزة والبرامج، ومن أجل...

caracal

Caracal Caracal est un outil d'analyse statique basé sur la représentation SIERRA pour les contrats intelligents Starknet. Fonctionnalités Détecteurs pour repérer du code Cairo vulnérable Imprimantes pour rapporter des informations Analyse de flux de données contaminé taint analysis Cadre d'analy...

ABD

إزالة التعتيم الثنائي المتقدم يحتوي هذا المستودع على مواد الدورة التدريبية الخاصة بـ إزالة التعتيم الثنائي المتقدم في المخيم العالمي للأمن السيبراني GCC طوكيو و المعسكر الوطني للأمن في عام 2020. ملخص الدورة الهندسة العكسية ليست سهلة، خاصة إذا كان الكود الثنائي مبهمًا. بمجرد إجراء التعتيم، لن يتم...

bearer

Scannez votre code source contre les principaux risques de sécurité et de confidentialité. Bearer est un outil de test de sécurité statique d'applications SAST conçu pour analyser votre code source et les flux de données afin d'identifier, filtrer et prioriser les risques de sécurité et de...

polytracker

PolyTracker PolyTracker — это инструмент, изначально созданный для Автоматической лексической аннотации и навигации парсеров Automated Lexical Annotation and Navigation of Parsers, обратного акронима, придуманного исключительно для того, чтобы называть его The ALAN Parsers Project. Однако со...

route-sixty-sink

✏️ Contributeurs Dillon Franke @dillonfranke Michael Maturi @a-marionette 📝 Blog https://www.mandiant.com/resources/route-sixty-sink-launch ⚓ Route Sixty-Sink Route Sixty-Sink est un outil open source qui permet aux défenseurs comme aux chercheurs en sécurité d'identifier rapidement des...

GAPS: Guiding Dynamic Android Analysis with Static Path Synthesis

Dynamically resolving method reachability in Android applications remains a critical and largely unsolved problem. Despite notable advancements in GUI testing and static call graph construction, current tools are insufficient for reliably driving execution toward specific target methods, especial...

EUVD-2021-19525

Malware in sbrugna...

CVE-2021-32754

FlowDroid is a data flow analysis tool. FlowDroid versions prior to 2.9.0 contained an XML external entity XXE vulnerability that allowed an attacker who had control over the source/sink definition file in XML format to read files from external locations. In order for this to occur, the XML-based...

CVE-2021-32754 Improper Restriction of XML External Entity Reference in de.tud.sse

FlowDroid is a data flow analysis tool. FlowDroid versions prior to 2.9.0 contained an XML external entity XXE vulnerability that allowed an attacker who had control over the source/sink definition file in XML format to read files from external locations. In order for this to occur, the XML-based...

CVE-2021-32754

FlowDroid is a data flow analysis tool. CVE-2021-32754 describes an XML External Entity (XXE) vulnerability in FlowDroid versions prior to 2.9.0, where an attacker who can control the XML-based source/sink definition file could read files from external locations. The vulnerability requires use of...

Nagios Network Analyzer Self-XSS Vulnerability

Nagios Network Analyzer is a network data flow analyzer that provides a view of all network traffic and bandwidth utilization. A Self-XSS vulnerability exists in Nagios Network Analyzer versions prior to 2.4.2. An attacker can exploit this vulnerability to conduct cross-site scripting attacks via...

Top 3 Tech Challenges RASP/(ng)WAF Vendors Are Faced With

Here I’d like to share my experience and pain in building L7 data protection solutions which are frequently called WAF/ngWAFs or RASPs. I started to build it back in 2009 from a simple detection logic based on self-adopted heuristics for a CTF competition and then build an entire company on machi...

WAP - Web Application Protection

WAP is a source code static analysis and data mining tool to detect and correct input validation vulnerabilities in web applications written in PHP version 4.0 or higher with a low rate of false positives. WAP detects and corrects the following vulnerabilities: SQL Injection SQLI Cross-site...

Web Application Protection - Tool to detect and correct vulnerabilities in PHP web applications

WAP 2.0 is a source code static analysis and data mining tool to detect and correct input validation vulnerabilities in web applications written in PHP version 4.0 or higher and with a low rate of false positives. WAP detects and corrects the following vulnerabilities: SQL Injection SQLI Cross-si...