36 matches found
diaphora
δiaphora Installation Install with the Hex-Rays plugin manager: root@kitploit: hcli plugin install https://github.com/joxeankoret/diaphora/archive/refs/tags/3.4.2.zip Manual install instructions are below. Diaphora διαφορά, Greek for 'difference' version 3.4 is the most advanced program diffing...
wonitor
web monitor fast, zero config web endpoint change monitor. for comparing responses, a selected list of http headers and the full response body is stored on a local key/value store file. no configuration needed. to increase network throughput, a --worker flag allows to set the concurrency when...
ida_haru
+OPTIONS: ^: idaharu Scripts/plugins for IDA Pro Note: Old scripts don't work for IDA 8.x, but I leave them just for reference. esetcrackme IDA Pro loader/processor modules for ESET CrackMe driver VM stackstringstatic IDAPython script statically-recovering strings constructed in stack fnfuzzy...
diaphora-mcp
Читать на русском языке Diaphora MCP Diaphora MCP is an MCP Model Context Protocol server for automated binary diffing. It connects Diaphora the diffing engine and IDA Pro the disassembler via the MCP protocol, allowing AI agents such as Claude Code to perform binary file comparison, find securit...
polypyus
Polypyus 固件史官 Polypyus 通过学习从相似固件中提取已知函数，从而学会在原始二进制文件中定位函数。因此，它是一位固件史官。 Polypyus 无需反汇编这些二进制文件即可工作，这对于难以反汇编且常用工具会遗漏函数的二进制文件来说是一个优势。此外，仅基于二进制的方法使其非常快速，只需几秒即可运行。然而，这种方法要求二进制文件具有相同的架构和相似的编译器选项。 Polypyus 可集成到现有工具（如 Ghidra 、 IDA 、 BinDiff 和 Diaphora ）的工作流程中。例如，它可以导入之前注释过的函数并从中学到知识，还可以导出已找到的函数以便导入到 IDA...
diaphora
δiaphora 安装 使用 Hex-Rays 插件管理器 安装： root@kitploit: hcli plugin install https://github.com/joxeankoret/diaphora/archive/refs/tags/3.4.2.zip 手动安装说明见下文。 Diaphora（διαφορά，希腊语中意为“差异”）3.4 版本是截至目前（2026 年）可用的最先进的程序差异比较工具（作为 IDA 插件工作）。它于 2015 年在 SyScan 期间首次发布，此后一直得到积极维护：Diaphora 已经被移植了 11 年，覆盖了从 6.8 到 9.4...
sickle-pdk
Sickle - 载荷开发套件 Sickle 是我最初为帮助自己更高效地开发和理解 shellcode 而开发的一个工具。然而，在开发和使用的过程中，它已演变为一个载荷开发套件。尽管目前的模块主要面向汇编，但该工具并不仅限于 shellcode。 目前 Sickle 可以协助以下工作： 将汇编指令转换为机器码（操作码） 执行字节码，包括生成的载荷 为目标语言格式化操作码 识别坏字符 线性反汇编 差异对比 Shellcode 生成 Sickle 通过 Keystone Engine 支持 shellcode...
patch-diffing-in-the-dark
Diffing de Parches en la Oscuridad Una serie de publicaciones de blog que aprovechan el análisis de CVE y el diffing de parches para descubrir nuevas vulnerabilidades. Como se revela en las publicaciones del blog, 4 CVEs surgieron del estudio en profundidad de CVE-2021-1657. Índice Resultados de...
conf-presentations
Tabla de Contenidos Conferencias y seminarios de Quarkslab Publicaciones de Quarkslab en revistas o actas de congresos y preprints Publicaciones de Quarkslab en revistas especializadas CTFs de hardware de Quarkslab Conferencias y seminarios de Quarkslab 2026 2026-08: Glitch me et glitch moi sont...
CVE-2026-20841_notepad_analysis
Propósito Investigar la vulnerabilidad RCE de Microsoft Notepad CVE-2026-20841, realizar análisis de binarios y crear un exploit PoC con fines educativos. División de roles Pongo en marcha un Agent Team con la división de roles que tengo en mente. Cazador de binarios: recopila los binarios antes ...
diaphora v3.4.2
δiaphora Installation Install with the Hex-Rays plugin manager: root@kitploit: hcli plugin install https://github.com/joxeankoret/diaphora/archive/refs/tags/3.4.2.zip Manual install instructions are below. Diaphora διαφορά, Greek for 'difference' version 3.4 is the most advanced program diffing...
[SECURITY] Fedora 43 Update: imhex-1.37.4-3.fc43
ImHex is a Hex Editor, a tool to display, decode and analyze binary data to reverse engineer their format, extract informations or patch values in them. What makes ImHex special is that it has many advanced features that can often only be found in paid applications. Such features are a completely...
[SECURITY] Fedora 42 Update: imhex-1.37.4-3.fc42
ImHex is a Hex Editor, a tool to display, decode and analyze binary data to reverse engineer their format, extract informations or patch values in them. What makes ImHex special is that it has many advanced features that can often only be found in paid applications. Such features are a completely...
Binary Diff Summarization Using Large Language Models
Security of software supply chains is necessary to ensure that software updates do not contain maliciously injected code or introduce vulnerabilities that may compromise the integrity of critical infrastructure. Verifying the integrity of software updates involves binary differential analysis...
[SECURITY] Fedora 41 Update: python-nbdime-4.0.2-2.fc41
Nbdime provides tools for diffing and merging of Jupyter notebooks. - nbdiff: compare notebooks in a terminal-friendly way - nbmerge: three-way merge of notebooks with automatic conflict resolution - nbdiff-web: shows you a rich rendered diff of notebooks - nbmerge-web: gives you a web-based...
[SECURITY] Fedora 40 Update: python-nbdime-4.0.2-2.fc40
Nbdime provides tools for diffing and merging of Jupyter notebooks. - nbdiff: compare notebooks in a terminal-friendly way - nbmerge: three-way merge of notebooks with automatic conflict resolution - nbdiff-web: shows you a rich rendered diff of notebooks - nbmerge-web: gives you a web-based...
[SECURITY] Fedora 39 Update: radare2-5.9.6-1.fc39
The radare2 is a reverse-engineering framework that is multi-architecture, multi-platform, and highly scriptable. Radare2 provides a hexadecimal editor, wrapped I/O, file system support, debugger support, diffing between two functions or binaries, and code analysis at opcode, basic block, and...
Exploit for Improper Authentication in Automattic Woocommerce_Payments
CVE-2023-28121 WooCommerce Payments - For installing requirem...
[SECURITY] Fedora 38 Update: radare2-5.8.6-1.fc38
The radare2 is a reverse-engineering framework that is multi-architecture, multi-platform, and highly scriptable. Radare2 provides a hexadecimal editor, wrapped I/O, file system support, debugger support, diffing between two functions or binaries, and code analysis at opcode, basic block, and...
