moneta

/ \ / | / \ / \ / \ / / \ \ / Y | \ /| | / | //| | / | / / / / / Moneta v1.0 | Forrest Orr | 2020 OBRIGATÓRIO -m |region|referenced|ioc -p |PID OPCIONAL -v detail|debug|surface -d --option from-base|statistics --filter unsigned-module|clr-prvx|clr-heap|metadata-modules --address --region-size...

antipwny

antipwny Autores: Rohan Vazarkar, David Bitner Um IDS/IPS baseado em host escrito em C, voltado para Payloads do Metasploit. Instruções O AntiPwny requer o .NET Framework 4.5, que pode ser obtido aqui. Um instalador offline está disponível aqui Binários pré-compilados podem ser encontrados na pas...

RustChain

Beschreibung Dieses Tool ist ein einfacher PoC, wie man Speicherartefakte mit einer ROP-Kette in Kombination mit Hardware-Breakpoints verstecken kann. Die ROP-Kette ändert die Speicherseitenschutz des Hauptmoduls auf N/A nicht zugänglich während des Schlafens d.h. wenn die Funktion Sleep aufgeruf...

anticuckoo

anticuckoo Ein Werkzeug zum Erkennen und Abstürzen von Cuckoo Sandbox. Getestet in Cuckoo Sandbox Official und Accuvants Cuckoo-Version. Bitte erwägen Sie eine Spende: https://github.com/sponsors/therealdreg Anticuckoo kann auch andere Sandboxen wie FireEye erkennen -c2: Reddit / netsec Diskussio...

dismember

🔪 Dismember Dismember ist ein Kommandozeilen-Toolkit für Linux, das verwendet werden kann, um den Speicher aller oder bestimmter Prozesse auf häufige Geheimnisse und benutzerdefinierte reguläre Ausdrücke zu durchsuchen, unter anderem. Es wird sich letztendlich zu einem vollständigen /proc-Toolkit...

xwf-yara-scanner

अवलोकन यह X-Ways Forensics X-Tension X-Ways में YARA का मूल रूप से उपयोग करने की अनुमति देता है। यह X-Ways Forensics API और YARA API दोनों का उपयोग करके ऐसा करता है। नोट: यह एक ओपन सोर्स प्रोजेक्ट है, कोई औपचारिक CrowdStrike उत्पाद नहीं। X-Ways के अंदर YARA चलाने के कई लाभ हैं, जैसे कि कमांड-लाइन...

aes-finder

AES Finder Utilitário para encontrar chaves AES na memória de processos em execução. Funciona para chaves de 128, 192 e 256 bits. Uso Abra a solução aes-finder.sln no Visual Studio 2013 para compilar o código fonte. Alternativamente, use gcc/clang: root@kitploit: g++ -O3 -march=native...

mXtract

mXtract mXtract è uno strumento open source basato su Linux che analizza e scarica la memoria. È sviluppato come strumento di penetration testing; il suo scopo principale è scansionare la memoria alla ricerca di chiavi private, IP e password utilizzando espressioni regolari. Ricorda: i tuoi...

cve_2023_38831_scanner

Scanner CVE-2023-38831 Visão Geral O Scanner CVE-2023-38831 é uma ferramenta avançada de cibersegurança projetada para detectar e analisar a presença da vulnerabilidade CVE-2023-38831 em instalações do WinRAR. Este projeto implementa uma abordagem multicamadas para detecção de vulnerabilidades,...

mnemosyne

Mnemosyne è uno strumento generico di memory scraping basato su Windows. Esegue la scansione dello spazio di memoria di un processo cercando una stringa o una regex unicode e ascii; se le trova, le emette su stdout, su un file o su un socket verso un listener remoto. L'utility è utile per eseguir...

Loki-RS

Loki-RS Una riscrittura di Loki in Rust. Scanner YARA e IOC ad alte prestazioni, multi-thread, in un singolo binario. Stato : Beta. Funziona, ma ancora in fase di sviluppo attivo. Caratteristiche Scansione YARA di file e memoria dei processi yara-x Riconoscimento IOC hash MD5/SHA1/SHA256, pattern...

fibratus

Fibratus Sensore di sicurezza per il rilevamento e la protezione dalle minacce in tempo reale Inizia » Documentazione • Regole • Filamenti • Download • Discussioni Fibratus rileva ed eradica tecniche offensive avanzate, malware e minacce emergenti esaminando e verificando un'ampia gamma di eventi...

CVE-2026-64289

A flaw was found in the Linux kernel. In the iommufd component, the iommufdhwptinvalidate function allows a local user to provide excessively large values for entrynum and entrylen during cache invalidation. This can lead to a Denial of Service DoS by causing the system to become unresponsive...

📄 Abacre Restaurant Point of Sale 15.0.0.1656 Memory Scanner

Abacre Restaurant Point of Sale version 15.0.0.1656 memory scanner for sensitive data detection. This Python script is an advanced Windows memory scanning tool designed to detect sensitive data leaks within running processes. It performs deep memory analysis to identify patterns resembling produc...

EUVD-2005-1713

Malware in sbrugna...

RX-INT: a Kernel Engine for Real-Time Detection and Analysis of In-Memory Threats

Malware and cheat developers use fileless execution techniques to evade traditional, signature-based security products. These methods include various types of manual mapping, module stomping, and threadless injection which work entirely within the address space of a legitimate process, presenting...

kernel: mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()

In the Linux kernel, the following vulnerability has been resolved: mm: vmscan: account for free pages to prevent infinite Loop in throttledirectreclaim The task sometimes continues looping in throttledirectreclaim because allowdirectreclaimpgdat keeps returning false. 0 ffff80002cb6f8d0 switchto...

GuLoader’s Advanced Anti-Analysis Techniques

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary GuLoader is an advanced malware downloader that uses polymorphic shellcode to bypass traditional security solutions. In GuLoader, all embedded DJB2 hash values are mapped against every API used by the...

Log4J and The Memory That Knew Too Much

Log4J and The Memory That Knew Too Much By Trellix · January 19, 2022 By Guilherme Venere, Ismael Valenzuela, Carlos Diaz, Cesar Vargas, Leandro Costantino, Juan Olle, Jose Luis Sanchez Martinez, AC3 Team Collaborators: Steve Povolny, Douglas McKee, Mark Bereza, Frederick House, Dileep Kumar...

Log4J and The Memory That Knew Too Much

Log4J and The Memory That Knew Too Much By Trellix · January 19, 2022 By Guilherme Venere, Ismael Valenzuela, Carlos Diaz, Cesar Vargas, Leandro Costantino, Juan Olle, Jose Luis Sanchez Martinez, AC3 Team Collaborators: Steve Povolny, Douglas McKee, Mark Bereza, Frederick House, Dileep Kumar...