drmemory

Dr. Memory: 메모리 디버거 Dr. Memory 소개 Dr. Memory는 초기화되지 않은 메모리 접근, 접근 불가능한 메모리 접근할당된 힙 단위 외부 접근 및 힙 언더플로우/오버플로우 포함, 해제된 메모리 접근, 이중 해제, 메모리 누수, 그리고 Windows에서 핸들 누수, GDI API 사용 오류, 예약되지 않은 스레드 로컬 저장소 슬롯 접근과 같은 메모리 관련 프로그래밍 오류를 식별할 수 있는 메모리 모니터링 도구입니다. Dr. Memory는 일반 IA-32, AMD64 및 ARM 하드웨어에서 Windows,...

bincat

소개 BinCAT이란 무엇인가? BinCAT은 정적 바이너리 코드 분석 도구 키트로, 리버스 엔지니어가 IDA에서 직접 또는 Python을 사용하여 자동화할 수 있도록 설계되었습니다. 주요 기능: 값 분석 레지스터 및 메모리 오염 분석 taint analysis 타입 재구성 및 전파 역방향 및 순방향 분석 use-after-free 및 double-free 탐지 실제 작동 모습 이전 버전의 BinCAT의 실제 작동 모습을 확인할 수 있습니다: 기본 분석 데이터 오염 사용하기 해당 작업에 대한 내용은 튜토리얼을 확인하세요. 간단...

Cross-Scale Persistence Analysis of EM Side-Channels for Reference-Free Detection of Always-On Hardware Trojans

Always-on hardware Trojans pose a serious challenge to integrated circuit trust, as they remain active during normal operation and are difficult to detect in post-deployment settings without trusted golden references. This paper presents a reference-free detection framework based on cross-scale...

LLM Jailbreak Detection for (Almost) Free!

Large language models LLMs enhance security through alignment when widely used, but remain susceptible to jailbreak attacks capable of producing inappropriate content. Jailbreak detection methods show promise in mitigating jailbreak attacks through the assistance of other models or multiple model...

CVE-2022-49127

In the Linux kernel, the following vulnerability has been resolved: reftracker: implement use-after-free detection Whenever reftrackerdirinit is called, mark the struct reftrackerdir as dead. Test the dead status from reftrackeralloc and reftrackerfree This should detect buggy devput/devhold...

CVE-2022-49127

CVE-2022-49127 is a Linux kernel vulnerability fix where the ref_tracker use-after-free detection was added. The patch marks the ref_tracker_dir as dead during ref_tracker_dir_init() and checks this dead status from ref_tracker_alloc() and ref_tracker_free(), aiming to detect buggy dev_put()/dev_...

CVE-2022-49127 ref_tracker: implement use-after-free detection

In the Linux kernel, the following vulnerability has been resolved: reftracker: implement use-after-free detection Whenever reftrackerdirinit is called, mark the struct reftrackerdir as dead. Test the dead status from reftrackeralloc and reftrackerfree This should detect buggy devput/devhold...

CVE-2022-49127 ref_tracker: implement use-after-free detection

In the Linux kernel, the following vulnerability has been resolved: reftracker: implement use-after-free detection Whenever reftrackerdirinit is called, mark the struct reftrackerdir as dead. Test the dead status from reftrackeralloc and reftrackerfree This should detect buggy devput/devhold...

CVE-2022-49127

In the Linux kernel, the following vulnerability has been resolved: reftracker: implement use-after-free detection Whenever reftrackerdirinit is called, mark the struct reftrackerdir as dead. Test the dead status from reftrackeralloc and reftrackerfree This should detect buggy devput/devhold...

GSD-2022-1001070 ref_tracker: implement use-after-free detection

reftracker: implement use-after-free detection This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

libbabl 0.1.62 Broken Double-Free Detection

Exploit Title: libbabl 0.1.62 - Broken Double Free Detection PoC Date: December 14, 2020 Exploit Author: Carter Yagemann Vendor Homepage: https://www.gegl.org Software Link: https://www.gegl.org/babl/ Version: libbabl 0.1.62 and newer Tested on: Debian Buster Linux 4.19.0-9-amd64 Compile: gcc...