qiling

Qiling's use case, blog and related work Qiling is an advanced binary emulation framework, with the following features: Emulate multi-platforms: Windows, macOS, Linux, Android, BSD, UEFI, DOS, MBR. Emulate multi-architectures: 8086, X86, X8664, ARM, ARM64, MIPS, RISC-V, PowerPC. Support multiple...

GraphQLer

The only dependency-aware GraphQL API testing tool! GraphQLer is a cutting-edge tool designed to dynamically test GraphQL APIs with a focus on adaptability. It offers a range of sophisticated features that streamline the testing process and ensure robust analysis of GraphQL APIs. GraphQLer...

dynamorio

DynamoRIO About DynamoRIO DynamoRIO is a runtime code manipulation system that supports code transformations on any part of a program, while it executes. DynamoRIO exports an interface for building dynamic tools for a wide variety of uses: program analysis and understanding, profiling,...

miasm

What is Miasm? Miasm is a free and open source GPLv2 reverse engineering framework. Miasm aims to analyze / modify / generate binary programs. Here is a non exhaustive list of features: Opening / modifying / generating PE / ELF 32 / 64 LE / BE Assembling / Disassembling X86 / ARM / MIPS / SH4 /...

koppeling-p

koppeling-p Adaptive DLL hijacking / dynamic export forwarding - EAT preserve Overview This project is a limited, Python-only extension to the amazing project by Nick Landers @monoxgas, available here. Differences The only difference to the original project is that koppeling-p p stands for...

aparoid

Aparoid Aparoid is a framework designed for Android application analysis. It offers an automated set of tools to discover vulnerabilities and other risks in mobile applications. It is built using the Flask framework and offers a web GUI to upload APK files and explore the contents / results. The...

AndroPyTool

AndroPyTool Update! DroidBox images were fixed. Dynamic analysis is working now. This is a tool for extracting static and dynamic features from Android APKs. It combines different well-known Android apps analysis tools such as DroidBox, FlowDroid, Strace, AndroGuard or VirusTotal analysis. Provid...

CVE-2023-4911

glibc Heap Buffer Overflow Vulnerability CVE-2023-4911 Item| Description ---|--- CVE ID| CVE-2023-4911 Attack Type| Heap Buffer Overflow → Local Privilege Escalation CVSS 3.1| 7.8 High Disclosure Date| 2023-10-03 Vulnerability Point| glibc dynamic loader ld.so GLIBCTUNABLES parser Affected...

awesome-android-security

Awesome-Android-Security Table of Contents Blog How To's Papers Books Trainings Tools Static Analysis Tools Dynamic Analysis Tools Online APK Analyzers Online APK Decompiler Forensic Analysis Tools Labs Talks Misc Bug Bounty & Writeups Cheat Sheet Checklist Bug Bounty Report Blogs 1-click Exploit...

magika

Magika Magika is a novel AI-powered file type detection tool that relies on the recent advance of deep learning to provide accurate detection. Under the hood, Magika employs a custom, highly optimized model that only weighs about a few MBs, and enables precise file identification within...

slides

slides Hack Different: Pwning iOS 14 with Generation Z Bugz BlackHat USA 2021 Zhi Zhou@CodeColorist, Jundong Xie @Jdddong paper recording parody See No Eval: Runtime Dynamic Code Execution in Objective-C RWCTF 2021 Zhi Zhou@CodeColorist Cross-Site Escape: Pwning macOS Safari Sandbox the Unusual W...

VMProtect-devirtualization

VMProtect Devirtualization An experimental dynamic approach to devirtualize pure functions protected by VMProtect 3.x TL;DR Introduction The approach Example 1: A simple bitwise operation protected Example 2: A MBA operation protected Example 3: More than one basic block Conclusion and limitation...

awesome-nodejs-security

A curated list of awesome Node.js Security resources. Learn Node.js Secure Coding techniques and best practices from Liran Tal Contents Tools Web Framework Hardening Static Code Analysis Dynamic Application Security Testing Input/Output Validation Secure Composition CSRF Vulnerabilities and...

magisk-renef

MagiskRenef A Magisk / KernelSU / APatch module that automatically packages and runs renef — a dynamic instrumentation toolkit for Android. Inspired by magisk-frida. Requirements Rooted Android device Magisk / KernelSU / KernelSU Next / APatch ARM64 only — renef only supports ARM64 Android Androi...

UniversalDVC

Universal Dynamic Virtual Channel connector for Remote Desktop Services UDVC Terminal Services or Remote Desktop Services are offering many hidden features for those who want to dig deeper. One of these services is the Dynamic Virtual Channel that enables us to communicate over an open RDP...

Android-Security-Teryaagh

AST - Android Security Teryaagh 🔥 Android security guides, roadmap, tools, docs, courses, write-ups and teryaagh. 📚Check out the full Documentation Website here! Auto-generated using MkDocs Buy me a coffee ☕ USDTERC20 : 0x36811c0544E09b48Fe491f67C5743a43067b280B Contents 📜 0. Roadmap Programing...

strix

Strix The open-source AI pentesting tool. Autonomous AI hackers that find and fix your app’s vulnerabilities. !TIP New! Strix integrates seamlessly with GitHub Actions and CI/CD pipelines. Automatically scan for vulnerabilit...

muraena

Muraena is an almost-transparent reverse proxy aimed at automating phishing and post-phishing activities. The tool re-implements the 15-years old idea of using a custom reverse proxy to dynamically interact with the origin to be targeted, rather than maintaining and serving static pages...

jackhammer

Jackhammer: One Security vulnerability assessment/management tool to solve all the security team problems. What is Jackhammer? Jackhammer is a collaboration tool built with an aim of bridging the gap between Security team vs dev team, QA team and being a facilitator for TPM to understand and trac...

NmapReportTemplate

Nmap Report Template Template designed to dynamically display information obtained from Nmap Scan Screenshots Usage 1. Download the nmaptemplatereport.xsl file and, when running Nmap , pass the file as a stylesheet. Example nmap --open -A -T4 -F --script vulners -oX scanoutput.xml --stylesheet...