m3

m3 A simple and scalable Android bot emulation framework. A detailed explanation can be found here. This project was first published at Black Hat Europe 2021's Arsenal. Aside from the documentation in the code both in-line and as JavaDoc, one can learn more about extending the framework here. The...

unicorn

Unicorn Engine 기여자를 찾고 있습니다! 여기를 참조하세요. Unicorn은 QEMU를 기반으로 하는 가볍고, 멀티 플랫폼, 멀티 아키텍처 CPU 에뮬레이터 프레임워크입니다. Unicorn은 몇 가지 비할 데 없는 기능을 제공합니다: 멀티 아키텍처: ARM, ARM64 ARMv8, M68K, MIPS, PowerPC, RISCV, SPARC, S390X, TriCore 및 X86 16, 32, 64비트 깔끔하고/단순하며/가벼운/직관적인 아키텍처 중립 API 순수 C 언어로 구현되었으며, Crystal, Clojure...

Finding vulnerabilities in ClipSp, the driver at the core of Windows’ Client License Platform

By Philippe Laulheret ClipSP clipsp.sys is a Windows driver used to implement client licensing and system policies on Windows 10 and 11 systems. Cisco Talos researchers have discovered eight vulnerabilities related to clipsp.sys ranging from signature bypass to elevation of privileges and sandbox...

Using Speakeasy Emulation Framework Programmatically to Unpack Malware

Andrew Davis recently announced the public release of his new Windows emulation framework named Speakeasy. While the introductory blog post focused on using Speakeasy as an automated malware sandbox of sorts, this entry will highlight another powerful use of the framework: automated malware...