chipsec

CHIPSEC: プラットフォームセキュリティ評価フレームワーク CHIPSEC は、ハードウェア、システムファームウェア（BIOS/UEFI）、プラットフォームコンポーネントを含む PC プラットフォームのセキュリティを分析するためのフレームワークです。セキュリティテストスイート、さまざまな低レベルインターフェースにアクセスするためのツール、およびフォレンジック機能が含まれています。Windows、Linux、UEFI シェルで実行できます。CHIPSEC のインストールと使用手順は、マニュアル に記載されています。 注意:...

chipsec

CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...

EVENSTAR

EVENSTAR Intel 64/Windows 低レベル実験...

pwndbg

pwndbg pwndbg（/paʊnˈdiˌbʌɡ/）是一个GDB和LLDB插件，让调试不再痛苦，专注于低级软件开发人员、硬件黑客、逆向工程师和漏洞利用开发者所需的功能。 它拥有大量功能，请参阅我们的功能页面和CHEATSHEET（可以打印！）。如有任何问题，您可以阅读文档或在我们的Discord服务器上提问。 想要Pwndbg保持快速发展，或者让我们就此做个演讲？赞助我们！ 为什么？ 原生GDB和LLDB在逆向工程和漏洞利用开发中非常难用。输入x/30gx...

LibAFL

LibAFL, 퍼저 라이브러리 고급 퍼징 라이브러리 - 자신의 퍼저를 조합하고 Rust를 사용하여 기능을 확장하세요. LibAFL은 Rust로 작성된 재사용 가능한 퍼저 조각들의 모음으로, 기성 퍼저의 많은 장점을 제공하면서도 완전히 사용자 정의할 수 있습니다. 현재 주요 기능은 다음과 같습니다: 빠름: 컴파일 시간에 최대한 많은 작업을 수행하여 런타임 오버헤드를 최소화합니다. 사용자는 휴대폰에서 frida 모드모든 코어 사용로 초당 120,000회 실행에 도달합니다. 확장 가능: 줄여서 LLMP라고 하는 저수준 메시지 전달을...

bashacks

bashacks 何？ bashacks は、プログラマー、セキュリティアナリスト、および低レベル操作を必要とする一般ユーザーにとって有用と思われる bash 関数のコレクションです。 実際、bashacks にはまったく新しいものはありません。すべての関数は UNIX 系システムの既存ソフトウェアを使って書かれています。しかし、通常は複数のコマンドを必要とする作業を、より短いコマンドで実行できます。 要件 bash = 4 bc binutils coreutils curl file grep hexdump html2text perl sed wget xxd zip ビルド...

impacket

Impacket 저작권 Fortra, LLC 및 그 계열사. 모든 권리 보유. Impacket은 원래 SecureAuth에 의해 만들어졌으며, 현재 Fortra의 Core Security가 유지 관리하고 있습니다. Impacket은 네트워크 프로토콜을 다루기 위한 Python 클래스 모음입니다. Impacket은 패킷에 대한 저수준 프로그래밍 액세스와 일부 프로토콜예: SMB1-3 및 MSRPC의 프로토콜 구현 자체를 제공하는 데 중점을 둡니다. 패킷은 처음부터 구성하거나 원시 데이터에서 구문 분석할 수 있으며, 객체 지향...

linux-insides

linux-insides A book-in-progress about the Linux kernel and its insides. Introduction • Chapter status • Requirements • Translations • Contributing • Author Introduction linux-insides is a book-in-progress about the Linux kernel and its insides. The goal of this project is simple - to share...

CVE-2025-0054

CVE-2025-0054 – SAP NetWeaver 存储型XSS扫描器 🕷 一个轻量级的Python工具，用于检测 SAP NetWeaver Application Server Java 中的存储型跨站脚本（XSS）漏洞，专门针对 CVE-2025-0054 。 ⚠️ 仅供 教育和授权安全测试 使用。请 勿 在未经许可的系统上使用。 关于漏洞 CVE-2025-0054 是 SAP NetWeaver Java 系统中的一个存储型XSS漏洞，允许拥有低权限的攻击者将恶意 JavaScript 注入服务器，当用户访问受影响的页面时，该脚本会被存储并执行。 功能...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: HID: core: Ensure that the allocated report buffer can contain the reserved report ID. When the report ID is not used, the low-level transport drivers expect the first byte to be 0. However, currently, the allocated buffer does n...

Astra Linux – Vulnerability in OpenSSL

Issue Summary: When using the low-level OCB API directly with AES-NI or other hardware-accelerated code paths, inputs whose length is not a multiple of 16 bytes may leave the final partial block unencrypted and unauthenticated. Impact Summary: The last 1–15 bytes of a message may be exposed in...

radare2 v6.2.2

Radare2: Libre Reversing Framework for Unix Geeks Current git master branch is 6.2.3, next release will be 6.2.4. Description r2 is a complete rewrite of radare. It provides a set of libraries, tools and plugins to ease reverse engineering tasks. Distributed under LGPLv3, despite each plugin can...

CVE-2026-33465

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user with low-level permissions could submit a specially crafted request that causes excessive resource consumption, which may render Kibana...

CVE-2025-12768

A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution on the affected device...

EUVD-2025-210818

A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution on the affected device...

CVE-2025-12768 FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability

A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution on the affected device...

CVE-2025-12768 FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability

A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution on the affected device...

CVE-2025-12768: Out-of-bounds Write

A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level authentication could exploit this vulnerability to achieve remote code execution on the affected device...

CVE-2026-33465: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user with low-level permissions could submit a specially crafted request that causes excessive resource consumption, which may render Kibana...

urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers

A flaw was found in urllib3, an HTTP client library for Python. When using the low-level API via ProxyManager.connectionfromurl.urlopen with assertsamehost=False, cross-origin redirects can still forward sensitive headers. This could allow a remote attacker to gain unauthorized access to sensitiv...