mtproto-dissector

Telegram Protocol Dissector This is a Wireshark dissector that helps you understand the Telegram traffic around you. It dissects the Telegram packets it sees according to the MTProto 2.0 Protocol. Features Supported transport protocols: Abridged, Full, Intermediate, HTTP Supports de-obfuscation...

Obfu-DE-Scate

🤖 ObfuDEscate：Android APKの難読化解除と比較ツール 📱 ObfuDEscate は、Android APK の2つのバージョンを難読化解除し比較するプロセスを簡素化するために設計された Python ツールです。難読化の一部として関数名が変更されていても、ファジー比較ロジックを使用して関数間の類似性を特定し、APK バージョン間の変更を明らかにすることができます。 ➡️ はじめに インストール ObfuDEscate の開始は簡単です！以下の手順に従ってください： 1. リポジトリをローカルマシンにクローンします。 2. 依存関係を手動でインストールするか、付属の...

RTF-Cleaner

RTF-Cleaner CVE-2017-0199 ドキュメントを対象とした、URL を静的に検出する RTF 難読化解除ツール。 このツールを使用すると、難読化された RTF ドキュメント内の URL を静的に検出できます。 使い方: .\rtfCleanerUniversal.ps1 path-to-file 例: .\rtfCleanerUniversal.ps1 'C:\Users\yams\Downloads\invoiceForYams.doc' 組み込みの正規表現で何も見つからない場合は、rtf ファイル内で見つけたもの、すなわち pntxtb、lchars...

PowerShellProfiler

PowerShellProfiler Dieser Projektcode stammt von https://github.com/pan-unit42/publictools/tree/master/powershellprofiler Einführung PowerShellProfiler.py ist ein Skript zur statischen Analyse von PowerShell-Skripten, indem der Inhalt deobfuskiert und normalisiert wird, der anschließend auf...

EUVD-2025-203095

An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allows attackers to overwrite arbitrary files as root via scanning a crafted file...

CVE-2025-65530

An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allows attackers to overwrite arbitrary files as root via scanning a crafted file...

CVE-2025-65530

CVE-2025-65530 describes an eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit, affecting versions prior to 32.7.4. The vulnerability enables attackers to overwrite arbitrary files as root by scanning a crafted file, as stated in Red Hat, ENISA, NVD, CIRCL, CVE List, and...

CVE-2020-13470

Gigadevice GD32F103 and GD32F130 devices allow physical attackers to extract data via the probing of easily accessible bonding wires and de-obfuscation of the observed data...

CVE-2020-13470

CVE-2020-13470 affects Gigadevice GD32F103 and GD32F130 microcontrollers. The root cause is physical access enabling probing of bonding wires to de-obfuscate and extract data, with potential high integrity impact and no public remediation details in the provided documents. Monitor for vendor advi...

CVE-2020-13470

Gigadevice GD32F103 and GD32F130 devices allow physical attackers to extract data via the probing of easily accessible bonding wires and de-obfuscation of the observed data...

On "Advanced" Network Security Monitoring

My TaoSecurity News page says I taught 41 classes lasting a day or more, from 2002 to 2014. All of these involved some aspect of network security monitoring NSM. Many times students would ask me when I would create the "advanced" version of the class, usually in the course feedback. I could never...

Smiasm - Reverse engineering framework

Smiasm - Reverse engineering framework What is Miasm? Miasm is a a free and open source GPLv2 reverse engineering framework. Miasm aims at analyzing/modifying/generating binary programs. Here is a non exhausting list of features: opening/modifying/generating PE/ELF 32/64 le/be using Elfesteem...