unicorn

Moteur Unicorn RECHERCHE DE CONTRIBUTEURS ! Voir ceci. Unicorn est un framework d'émulation de CPU léger, multi-plateforme et multi-architecture, basé sur QEMU. Unicorn offre des fonctionnalités inégalées : Multi-architecture : ARM, ARM64 ARMv8, M68K, MIPS, PowerPC, RISCV, SPARC, S390X, TriCore e...

m3

m3 Простая и масштабируемая структура для эмуляции Android-ботов. Подробное объяснение можно найти здесь. Этот проект впервые был представлен на Black Hat Europe 2021's Arsenal. Помимо документации в коде как встроенной, так и в виде JavaDoc, можно узнать больше о расширении фреймворка здесь. Два...

Finding vulnerabilities in ClipSp, the driver at the core of Windows’ Client License Platform

By Philippe Laulheret ClipSP clipsp.sys is a Windows driver used to implement client licensing and system policies on Windows 10 and 11 systems. Cisco Talos researchers have discovered eight vulnerabilities related to clipsp.sys ranging from signature bypass to elevation of privileges and sandbox...

Using Speakeasy Emulation Framework Programmatically to Unpack Malware

Andrew Davis recently announced the public release of his new Windows emulation framework named Speakeasy. While the introductory blog post focused on using Speakeasy as an automated malware sandbox of sorts, this entry will highlight another powerful use of the framework: automated malware...