hollows_hunter

hollowshunter Hollows Hunter is a command-line application based on PE-sieve passive memory scanner. Recognizes and dumps a variety of potentially malicious implants replaced/implanted PEs, shellcodes, hooks, in-memory patches. While in case of PE-sieve you can select the process only by its PID,...

PELoader

PELoader PELoader implement various shellcode injection techniques, and use libpeconv library to load encrypted PE files instead of injecting shellcode into remote thread. Following techniques were implemented: Module Stomping LoadLibrary Module Stomping NtMapViewOfSection PoC Transacted Hollowin...

libpeconv

libPeConv PE 파일을 로드하고 조작하기 위한 라이브러리입니다. 목표 libPEConv의 목표는 PE 파일의 사용자 정의 로딩을 위한 "스위스 아미 나이프"를 만드는 것이었습니다. 이 라이브러리는 자체 로더에 빠르게 통합할 수 있는 다양한 헬퍼 함수를 모아 놓았습니다. 예를 들어: 섹션 재매핑, 재배치 적용, 임포트 로딩, 리소스 파싱 등이 있습니다. PE 파일을 로드할 수 있을 뿐만 아니라 일부 단계를 사용자 정의할 수도 있습니다. 즉, IAT 후킹사용자 정의 IAT 해석기 제공 및 함수 리디렉션을 지원합니다. 그러나...

EUVD-2023-27561

Malicious code in bioql PyPI...

EUVD-2023-27562

Malicious code in bioql PyPI...

CVE-2023-23461

Libpeconv – access violation, before commit b076013 30/11/2022...

CVE-2023-23462

Libpeconv – integer overflow, before commit 75b1565 30/11/2022...

CVE-2023-23462

Libpeconv – integer overflow, before commit 75b1565 30/11/2022...

CVE-2023-23461

Libpeconv – access violation, before commit b076013 30/11/2022...

Integer overflow

Libpeconv – integer overflow, before commit 75b1565 30/11/2022...

Code injection

Libpeconv – access violation, before commit b076013 30/11/2022...

CVE-2023-23461 Libpeconv – access violation

Libpeconv – access violation, before commit b076013 30/11/2022...

CVE-2023-23462: Integer Overflow or Wraparound

Libpeconv – integer overflow, before commit 75b1565 30/11/2022...

CVE-2023-23461 Libpeconv – access violation

Libpeconv – access violation, before commit b076013 30/11/2022...

CVE-2023-23462 Libpeconv – integer overflow

Libpeconv – integer overflow, before commit 75b1565 30/11/2022...

CVE-2023-23462 Libpeconv – integer overflow

Libpeconv – integer overflow, before commit 75b1565 30/11/2022...

CVE-2023-23461: Undefined Security Weakness

Libpeconv – access violation, before commit b076013 30/11/2022...

Libpeconv 输入验证错误漏洞

libPeConv is a library for loading and manipulating PE files by hasherezade individual developers. A security vulnerability exists in versions prior to Libpeconv 75b1565 30/11/2022 that stems from the presence of an integer overflow...

Libpeconv 安全漏洞

libPeConv is a library for loading and manipulating PE files by hasherezade individual developers. A security vulnerability exists in versions prior to libpeconv b076013 30/11/2022, which stems from an access conflict issue...

CVE-2023-23462

CVE-2023-23462 maps to Libpeconv with an integer overflow in versions prior to the fix commit 75b1565 (30/11/2022). Multiple sources (NVD entry, CNNVD, PRION, CVE lists) describe Libpeconv as a library for loading/manipulating PE files and confirm an overflow condition tied to pre-commit code. Th...