DotDumper

DotDumper ¡Un desempaquetador y registrador automático para archivos orientados a DotNet Framework! Esta herramienta fue presentada en Black Hat USA 2022. En Black Hat Asia 2023, se publicaron DotDumperGUI y DotDumperNative, junto con la versión 1.1-estable de DotDumper. Estas tres herramientas...

Process-Dump

Process Dump Process Dump is a Windows reverse-engineering command-line tool to dump malware memory components back to disk for analysis. Often malware files are packed and obfuscated before they are executed in order to avoid AV scanners, however when these files are executed they will often...

ChromeKatz

ChromeKatz ChromeKatz es una solución para volcar información sensible desde la memoria de los navegadores basados en Chromium. Por ahora, ChromeKatz consta de tres proyectos: 1. CookieKatz - El volcador de cookies 2. CredentialKatz - Obsoleto.. por ahora 3. ElevationKatz - Obtén la clave de...

CryKeX

Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges optional Limitations: AES and RSA keys only Fails most...

lmg

Linux Memory Grabber 用于转储 Linux 内存并创建 VolatilityTM 配置文件的脚本。 Hal Pomeranz [email protected], 2020-02-01 致谢 “如果说我看得比别人更远，那是因为我站在巨人的肩膀上。” —— 艾萨克·牛顿 很多人应该为这个简单小工具的实现而获得感谢： —— 微软的优秀团队，感谢他们提供了 AVML —— Joe Sylve，感谢他在 LiME 上的工作 —— 整个 VolatilityTM 开发团队的持续付出。 我尤其要感谢 Andrew Case，他在我开发工具的过程中回答了许多烦人的问题。 ...

fridump

Fridump Fridump v0.1 是一个开源内存转储工具，主要面向渗透测试人员和开发者。Fridump 利用 Frida 框架从任何支持的平台上转储可访问的内存地址。它可以在 Windows、Linux 或 Mac OS X 系统上使用，用于转储 iOS、Android 或 Windows 应用程序的内存。 用法 使用方法： fridump -h -o dir -U -v -r -s --max-size bytes process 以下是 fridump 可用的主要参数： 位置参数： process 你将注入的进程 可选参数： -h, --help 显示此帮助信息并退出 -o...

memdumper

memdumper memdumper lee la memoria de un proceso de macOS en ejecución bajo el entitlement de depurador de otro binario firmado. La idea es que taskforpid y ptrace se ejecuten como ese binario con entitlement, de modo que un EDR lo registre a él en lugar de a memdumper. por cenobyte...

UBUNTU-CVE-2026-64231

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: don't dump registers past the mapped region On DSI 6G platforms the IO address space is internally adjusted by iooffset. Later this adjusted address might be used for memory dumping. However the size that is used for...

SUSE CVE-2026-64231

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: don't dump registers past the mapped region On DSI 6G platforms the IO address space is internally adjusted by iooffset. Later this adjusted address might be used for memory dumping. However the size that is used for...

Design/Logic Flaw

On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state, or assuming the status of standard i/o file descriptors. If a setuid/setgid binary is executed with standard I...

Avast AV Memory Dumping Utility

This module leverages an Avast Anti-Virus memory dump utility that is shipped by default with Avast Anti-Virus Home software suite. Module Options msf use post/windows/gather/avastmemorydump msf postavastmemorydump show actions ...actions... msf postavastmemorydump set ACTION msf...

KsDumper - Dumping Processes Using The Power Of Kernel Space

I always had an interest in reverse engineering. A few days ago I wanted to look at some game internals for fun, but it was packed & protected by EAC EasyAntiCheat. This means its handle were stripped and I was unable to dump the process from Ring3. I decided to try to make a custom driver that...

CVE-2018-14656

A missing address check in the callers of the showopcodes in the Linux kernel allows an attacker to dump the kernel memory at an arbitrary kernel address into the dmesg log...

Malware monitor - leveraging PyREBox for malware analysis

This post was authored by Xabier Ugarte Pedrero In July 2017 we released PyREBox, a Python Scriptable Reverse Engineering Sandbox as an open source tool. This project is part of our continuous effort to create new tools to improve our workflows. PyREBox is a versatile instrumentation framework...

Exploit for Observable Discrepancy in Intel Atom_C

Spectre attack Spectre breaks the isolatio...

BSA-2017-440

Security Advisory ID : BSA-2017-440 Component : Samba Revision : 2.0: Interim An information leak flaw was found in the way SMB1 protocol was implemented by Samba. A malicious client could use this flaw to dump server memory contents to a file on the samba share or to a shared printer, though the...

Information Disclosure

commons-net is vulnerable to information disclosure. The vulnerability is possible because newStringUtf8 in Base64.java does not prevent the storage of sensitive data in a String object which would not be deleted until the JVM performs garbage collection. There is a chance for an attacker to...

Android 6.0.0 MDA89E / 6.0.1 MMB29V OEM Panic

Vulnerable versions: ================ Android 6.0.0 MDA89E through 6.0.1 MMB29V bootloaders bhz10i/k Non-vulnerable versions: ==================== Android 6.0.1 MHC19J bootloader bhz10m and above. Details: ====== The attacker reboots the phone into the 'fastboot' mode. A physical attacker can do...

OpenSSL Heartbeat (Heartbleed) Information Leak

This module implements the OpenSSL Heartbleed attack. The problem exists in the handling of heartbeat requests, where a fake length can be used to leak memory data in the response. Services that support STARTTLS may also be vulnerable. The module supports several actions, allowing for scanning,...

Nmap NSE net: wdb-version

Detects vulnerabilities and gathers information such as version numbers and hardware support from VxWorks Wind DeBug agents. Wind DeBug is a SunRPC-type service that is enabled by default on many devices that use the popular VxWorks real-time embedded operating system. H.D. Moore of Metasploit ha...