mtproto-dissector

Disector de Protocolo Telegram Este es un disector de Wireshark que te ayuda a entender el tráfico de Telegram a tu alrededor. Disecta los paquetes de Telegram que ve según el Protocolo MTProto 2.0. Características Protocolos de transporte soportados: Abridged, Full, Intermediate, HTTP Soporta...

RTF-Cleaner

RTF-Cleaner RTF de-obfuscator for CVE-2017-0199 documents to find URLs statically. Use this tool to statically find URLs in obfuscated RTF documents. Usage: .\rtfCleanerUniversal.ps1 path-to-file Example: .\rtfCleanerUniversal.ps1 'C:\Users\yams\Downloads\invoiceForYams.doc' If the built in...

PowerShellProfiler

PowerShellProfiler El código de este proyecto proviene de https://github.com/pan-unit42/publictools/tree/master/powershellprofiler Introducción PowerShellProfiler.py es un script para analizar estáticamente scripts de PowerShell mediante la desofuscación y normalización del contenido, que luego s...

Obfu-DE-Scate

🤖 ObfuDEscate：Android APK 的反混淆与对比工具。📱 ObfuDEscate 是一个 Python 工具，旨在简化对两个版本 Android APK 进行反混淆和对比的过程——即使函数名已被混淆重命名。通过模糊对比逻辑，ObfuDEscate 可以识别函数之间的相似性，帮助您发现 APK 版本之间的变更。 ➡️ 开始上手 安装 ObfuDEscate 的安装非常简单！请按照以下步骤操作： 1. 将仓库克隆到本地机器。 2. 手动安装依赖项，或通过包含的 requirements 文件使用以下命令安装： root@kitploit: pip install -r...

EUVD-2025-203095

An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allows attackers to overwrite arbitrary files as root via scanning a crafted file...

CVE-2025-65530

An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allows attackers to overwrite arbitrary files as root via scanning a crafted file...

CVE-2025-65530

CVE-2025-65530 describes an eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit, affecting versions prior to 32.7.4. The vulnerability enables attackers to overwrite arbitrary files as root by scanning a crafted file, as stated in Red Hat, ENISA, NVD, CIRCL, CVE List, and...

CVE-2020-13470

Gigadevice GD32F103 and GD32F130 devices allow physical attackers to extract data via the probing of easily accessible bonding wires and de-obfuscation of the observed data...

CVE-2020-13470

CVE-2020-13470 affects Gigadevice GD32F103 and GD32F130 microcontrollers. The root cause is physical access enabling probing of bonding wires to de-obfuscate and extract data, with potential high integrity impact and no public remediation details in the provided documents. Monitor for vendor advi...

CVE-2020-13470

Gigadevice GD32F103 and GD32F130 devices allow physical attackers to extract data via the probing of easily accessible bonding wires and de-obfuscation of the observed data...

On "Advanced" Network Security Monitoring

My TaoSecurity News page says I taught 41 classes lasting a day or more, from 2002 to 2014. All of these involved some aspect of network security monitoring NSM. Many times students would ask me when I would create the "advanced" version of the class, usually in the course feedback. I could never...

Smiasm - Reverse engineering framework

Smiasm - Reverse engineering framework What is Miasm? Miasm is a a free and open source GPLv2 reverse engineering framework. Miasm aims at analyzing/modifying/generating binary programs. Here is a non exhausting list of features: opening/modifying/generating PE/ELF 32/64 le/be using Elfesteem...