mtproto-dissector

Telegram Protocol Dissector This is a Wireshark dissector that helps you understand the Telegram traffic around you. It dissects the Telegram packets it sees according to the MTProto 2.0 Protocol. Features Supported transport protocols: Abridged, Full, Intermediate, HTTP Supports de-obfuscation...

Obfu-DE-Scate

🤖 ObfuDEscate: A De-obfuscation and Comparison tool for Android APKs. 📱 ObfuDEscate is a Python tool designed to simplify the process of de-obfuscating and comparing two versions of an Android APK - even if the functions have been renamed as part of obfuscation. With fuzzy comparison logic,...

PowerShellProfiler

PowerShellProfiler 이 프로젝트 코드는 https://github.com/pan-unit42/publictools/tree/master/powershellprofiler 에서 가져온 것입니다. 소개 PowerShellProfiler.py는 PowerShell 스크립트의 콘텐츠를 난독화 해제de-obfuscating하고 정규화한 후 행동 지표를 프로파일링하여 PowerShell 스크립트를 정적으로 분석하는 스크립트입니다. 이러한 행동들은 점수로 산정되며, 점수의 총합은 PowerShell 스크립트에 대한 가능한 위...

RTF-Cleaner

RTF-Cleaner CVE-2017-0199 문서에서 URL을 정적으로 찾기 위한 RTF 난독화 해제 도구입니다. 이 도구를 사용하여 난독화된 RTF 문서에서 URL을 정적으로 찾을 수 있습니다. Usage: .\rtfCleanerUniversal.ps1 path-to-file Example: .\rtfCleanerUniversal.ps1 'C:\Users\yams\Downloads\invoiceForYams.doc' 내장된 정규식regexer이 아무것도 찾지 못하면 RTF 파일에서 찾은 내용예: pntxtb, lchars ...

EUVD-2025-203095

An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allows attackers to overwrite arbitrary files as root via scanning a crafted file...

CVE-2025-65530

An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allows attackers to overwrite arbitrary files as root via scanning a crafted file...

CVE-2025-65530: Improper Neutralization of Directives in Dynamically Evaluated Code

An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allows attackers to overwrite arbitrary files as root via scanning a crafted file...

CVE-2025-65530

CloudLinux ai-bolit versions prior to v32.7.4 are vulnerable to an eval injection within the malware de-obfuscation routines . An attacker can exploit this flaw by scanning a crafted file to overwrite arbitrary files as root . Remediation requires updating CloudLinux ai-bolit to version 32.7.4 or...

CVE-2020-13470

Gigadevice GD32F103 and GD32F130 devices allow physical attackers to extract data via the probing of easily accessible bonding wires and de-obfuscation of the observed data...

CVE-2020-13470

CVE-2020-13470 affects Gigadevice GD32F103 and GD32F130 microcontrollers. The root cause is physical access enabling probing of bonding wires to de-obfuscate and extract data, with potential high integrity impact and no public remediation details in the provided documents. Monitor for vendor advi...

CVE-2020-13470

Gigadevice GD32F103 and GD32F130 devices allow physical attackers to extract data via the probing of easily accessible bonding wires and de-obfuscation of the observed data...

On "Advanced" Network Security Monitoring

My TaoSecurity News page says I taught 41 classes lasting a day or more, from 2002 to 2014. All of these involved some aspect of network security monitoring NSM. Many times students would ask me when I would create the "advanced" version of the class, usually in the course feedback. I could never...

Smiasm - Reverse engineering framework

Smiasm - Reverse engineering framework What is Miasm? Miasm is a a free and open source GPLv2 reverse engineering framework. Miasm aims at analyzing/modifying/generating binary programs. Here is a non exhausting list of features: opening/modifying/generating PE/ELF 32/64 le/be using Elfesteem...