GAMBA

GAMBA GAMBA 是一款用于简化混合布尔算术表达式 MBA 的工具。GAMBA 是 General Advanced Mixed Boolean Arithmetic simplifier（通用高级混合布尔算术简化器）的缩写。它利用线性代数简化器 SiMBA 来迭代简化潜在非线性输入 MBA 中的线性子表达式。总体而言，其核心组成部分如下： 使用抽象语法树 AST 通过应用（简单及更复杂的）变换来分离线性子表达式 重构以增加构建可简化线性子表达式的机会 使用 SiMBA 简化线性子表达式 替换逻辑，以暂时消除按位运算中的非常量常数和算术运算 GAMBA 基于以下...

miasm

What is Miasm? Miasm is a free and open source GPLv2 reverse engineering framework. Miasm aims to analyze / modify / generate binary programs. Here is a non exhaustive list of features: Opening / modifying / generating PE / ELF 32 / 64 LE / BE Assembling / Disassembling X86 / ARM / MIPS / SH4 /...

awesome-mba

本仓库包含与混合布尔算术（MBA）混淆相关的链接。欢迎提交 PR。 请注意，这里的一些资源并非 严格 与 MBA 相关，但都以某种方式相关。 论文 软件中采用混合布尔算术变换的信息隐藏 混合布尔算术表达式混淆：重建、分析与简化工具 简化混合布尔算术表达式的正交方法分析与应用 基于程序合成辅助的混合布尔算术表达式简化的代码反混淆 提升 SMT 求解器在混合位运算-算术表达式上的性能 MBA-Blast：揭示并简化混合布尔算术混淆 混合布尔算术表达式的原位简化 使用非线性混合布尔算术表达式的软件混淆 NeuReduce：通过循环神经网络化简混合布尔算术表达式 线性混合布尔算术表达式的高效反混...

EUVD-2024-2007

Malicious code in bioql PyPI...

Code Execution

javascript-deobfuscator is vulnerable to Code Execution. The vulnerability is due to crafted payloads targeting expression simplification, which allows an attacker to execute arbitrary code...

CVE-2024-36120

javascript-deobfuscator removes common JavaScript obfuscation techniques. In affected versions crafted payloads targeting expression simplification can lead to code execution. This issue has been patched in version 1.1.0. Users are advised to update. Users unable to upgrade should disable the...

CVE-2024-36120 javascript-deobfuscator crafted payload can lead to code execution

javascript-deobfuscator removes common JavaScript obfuscation techniques. In affected versions crafted payloads targeting expression simplification can lead to code execution. This issue has been patched in version 1.1.0. Users are advised to update. Users unable to upgrade should disable the...

CVE-2024-36120 javascript-deobfuscator crafted payload can lead to code execution

javascript-deobfuscator removes common JavaScript obfuscation techniques. In affected versions crafted payloads targeting expression simplification can lead to code execution. This issue has been patched in version 1.1.0. Users are advised to update. Users unable to upgrade should disable the...

CVE-2024-36120 javascript-deobfuscator crafted payload can lead to code execution

javascript-deobfuscator removes common JavaScript obfuscation techniques. In affected versions crafted payloads targeting expression simplification can lead to code execution. This issue has been patched in version 1.1.0. Users are advised to update. Users unable to upgrade should disable the...

JavaScript deobfuscator security vulnerability

JavaScript deobfuscator is a simple but powerful anti-obfuscator for Ben's personal developers. A security vulnerability exists in JavaScript deobfuscator versions prior to 1.1.0, which stems from a well-designed payload targeting expression simplification that may lead to code execution...

CVE-2024-36120: Improper Control of Generation of Code

javascript-deobfuscator removes common JavaScript obfuscation techniques. In affected versions crafted payloads targeting expression simplification can lead to code execution. This issue has been patched in version 1.1.0. Users are advised to update. Users unable to upgrade should disable the...