patchkit

patchkit Patches an ELF binary using one or more simple Python scripts. Usage: patch patchdir|file... patchdir Contains one or more Python patch files, which will be executed in alphabetical order against a binary. Patch Examples Nopping an address, injecting an assembly function, and hooking the...

firstexecution

firstexecution 예상된 진입점 외부에서 코드를 실행하는 다양한 방법의 모음...

scenester

Scenester Scenester - 여러 user-agent를 제공하여 웹사이트를 시각적으로 스냅샷하는 도구입니다. 애플리케이션의 다양한 진입점을 발견하는 데 도움을 주도록 설계되었습니다. NCC Group Plc가 오픈소스로 공개 - http://www.nccgroup.com/ 개발자: Sharique Shaikh, sharique dot shaikh at nccgroup dot com https://www.github.com/nccgroup/scenester AGPL 라이선스로 배포됩니다. 자세한 내용은 LICENSE를...

drow

drow 설명 TL;DR drow는 ELF 실행 파일빌드 후에 코드를 삽입하고 진입점을 후킹하는 데 사용되는 명령줄 유틸리티입니다. 수정되지 않은 ELF 실행 파일을 입력으로 받아 런타임에 실행되는 사용자 제공 페이로드가 포함된 수정된 ELF를 내보냅니다. 약간 더 자세히 ... Drow는 새 패치된 ELF를 생성하기 위해 다음 단계를 수행합니다: 1. 수정되지 않은 대상 ELF 실행 파일과 사용자 제공 페이로드위치 독립적인 블롭를 매핑합니다. 2. 프로그램 헤더를 파싱하여 첫 번째 실행 가능 세그먼트를 찾습니다. 3. 섹션...

DotNET_XorCryptor

DotNET XorCryptor 또한 이전 프로젝트인 NET-MalwareCryptor에 주목할 수 있습니다 이것은 페이로드 암호화 기능이 있는 .NET 실행 파일 패커입니다. 교육 목적으로만 사용하십시오. 사용 방법 --file path - 파일 이름 지정 --flood - 파일에 정크 클래스 추가 --proxy - 원래 진입점을 Main에서 이동 예를 들어: xor-pack.exe --file "stub.exe" --proxy --flood 효과를 높이려면 암호화 프로세스를 적용하기 전에 어셈블리를 철저히 난독화하는 것이...

HvLoader

HvLoader Overview HvLoader.efi is an EFI application for loading an external hypervisor loader. HvLoader.efi loads a given hypervisor loader binary DLL, EFI, etc., and calls it's entry point passing HvLoader.efi ImageHandle. This way the hypervisor loader binary has access to HvLoader.efi's comma...

CVE-2026-46588

camel-couchdb CouchDb 헤더 인젝션 재현기 CVE-2026-46588 이 프로젝트는 Apache Camel의 camel-couchdb 구성 요소에서 발견된 메시지 헤더 인젝션 을 시연하며, CVE-2026-46588 로 추적됩니다. 이 구성 요소는 CouchDbDatabase, CouchDbSeq, CouchDbId문서 ID, CouchDbRev문서 개정, CouchDbMethod작업 메서드 등 여러 Exchange 헤더를 읽어 동작을 제어합니다. 이러한 헤더 상수CouchDbConstants에 정의됨의 문자열...

CVE-2026-53940

Conda is a system-level binary package and environment manager that runs on major operating systems and platforms. Prior to 26.5.2, parseentrypointdef in conda/common/path/python.py accepted an unvalidated entry-point command from a noarch:python package's info/link.json metadata...

CVE-2026-53940 Conda: Entry-point path traversal in noarch:python install (arbitrary file write) — canonical Python implementation

Conda is a system-level binary package and environment manager that runs on major operating systems and platforms. Prior to 26.5.2, parseentrypointdef in conda/common/path/python.py accepted an unvalidated entry-point command from a noarch:python package's info/link.json metadata...

CVE-2026-53940 Conda: Entry-point path traversal in noarch:python install (arbitrary file write) — canonical Python implementation

Conda is a system-level binary package and environment manager that runs on major operating systems and platforms. Prior to 26.5.2, parseentrypointdef in conda/common/path/python.py accepted an unvalidated entry-point command from a noarch:python package's info/link.json metadata...

PT-2026-96140

Name of the Vulnerable Software and Affected Versions Conda versions prior to 26.5.2 Description The parse entry point def function in conda/common/path/python.py accepts unvalidated entry-point commands from the info/link.json metadata of noarch:python packages. The CreatePythonEntryPointAction ...

CLEANSTART-2026-OH23140 pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed o...

Multiple security vulnerabilities affect the python3 package. pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory. See...

Astra Linux – Vulnerability in edk2

Existing checks in SmmEntryPoint will not catch underflow when calculating BufferSize...

EulerOS 2.0 SP12 : python-pip (EulerOS-SA-2026-3376)

According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to the installation...

EulerOS Virtualization 2.13.1 : python-pip (EulerOS-SA-2026-3193)

According to the versions of the python-pip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to t...

Linux Distros Unpatched Vulnerability : CVE-2026-72215

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIPS: DEC: Ensure 32-bit stack location for o32 promprintf In 64-bit configurations calling any firmware entry points from a kernel thread other than the initia...

PT-2026-71136

In Eclipse RDF4J, several XML parser entry points do not fully restrict XML External Entity XXE processing when parsing untrusted XML-based RDF data or query results, permitting DOCTYPE declarations, external entity references, and external DTD loading. This is due to an incomplete fix for...

EulerOS 2.0 SP13 : python-pip (EulerOS-SA-2026-2993)

According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to the installation...

CVE-2026-47425

Rattler is a library that provides common functionality used within the conda ecosystem. Prior to version 0.43.2, EntryPoint::FromStr in rattlercondatypes performs only .trim on the command field before the linker joins it onto the install prefix and writes an executable Python script. A maliciou...

CVE-2026-47425

Summary: CVE-2026-47425 affects rattler before 0.43.2, enabling a noarch:python entry-point path traversal that can write files outside the intended install prefix. The issue arises in EntryPoint::FromStr within rattler_conda_types, where only .trim() is applied to the command and a malicious noa...