reverse-engineering

Recursos de Ingeniería Inversa Una lista curada de recursos impresionantes de reversa Reversing Impresionante Libros Cursos Práctica Editores Hex Formato Binario Desensambladores Análisis Binario Análisis de Bytecode Reconstrucción de Importaciones Análisis Dinámico Depuración Descifrado en Mac...

uafuzz

UAFuzz: Binary-level Directed Fuzzing for Use-After-Free Vulnerabilities Directed Greybox Fuzzing DGF like AFLGo aims to perform stress testing on pre-selected potentially vulnerable target locations, with applications to different security contexts: 1 bug reproduction, 2 patch testing or 3 stati...

silifuzz

SiliFuzz - Fuzzing di CPU tramite proxy Cos'è SiliFuzz SiliFuzz è un sistema che trova difetti nelle CPU fuzzando proxy software, come simulatori o disassemblatori di CPU, ed esegue poi gli input di test accumulati noti come corpus su CPU reali su larga scala. SiliFuzz è un lavoro in corso; per i...

CVE-2023-43694

An issue was discovered in Malwarebytes 4.6.14.326 and before and 5.1.5.116 and before and Nebula 2020-10-21 and later. An Out of bounds read in several disassembling utilities causes stability issues and denial of service...

CVE-2023-43694

An issue was discovered in Malwarebytes 4.6.14.326 and before and 5.1.5.116 and before and Nebula 2020-10-21 and later. An Out of bounds read in several disassembling utilities causes stability issues and denial of service...

CVE-2023-43694

CVE-2023-43694 affects Malwarebytes software and Nebula components. Affected: Malwarebytes 4.6.14.326 and earlier, and 5.1.5.116 and earlier; Nebula 2020-10-21 and later. Root cause: out-of-bounds reads in several disassembling utilities. Impact: stability issues and denial of service. Exploitati...

4 Steps to Creating a Powerful Research Lab for Reverse Engineering

However, manual lab setup and configuration can prove to be a laborious and time-consuming process. In this article, we'll look at 4 ways to create a reverse engineering lab, discuss how to save time, and, potentially, improve the detection rate using a sandbox-as-a-service, and a recommended lis...

The leap of a Cycldek-related threat actor

Introduction In the nebula of Chinese-speaking threat actors, it is quite common to see tools and methodologies being shared. One such example of this is the infamous "DLL side-loading triad": a legitimate executable, a malicious DLL to be sideloaded by it, and an encoded payload, generally dropp...

The Windows Malware Analysis Distribution: flare-vm

FLARE VM is a freely available and open sourced Windows-based security distribution designed for reverse engineers, malware analysts, incident responders, forensicators, and penetration testers. Inspired by open-source Linux-based security distributions like Kali Linux, REMnux and others, FLARE V...

[WinAppDbg 1.5] Python Debugger

The WinAppDbg python module allows developers to quickly code instrumentation scripts in Python under a Windows environment. It uses ctypes to wrap many Win32 API calls related to debugging, and provides an object-oriented abstraction layer to manipulate threads, libraries and processes, attach...