EvilClippy

Esta herramienta fue lanzada durante nuestra charla en BlackHat Asia 28 de marzo de 2019. Hay una grabación en video de esta charla disponible en https://www.youtube.com/watch?v=9ULzZA70Dzg. Evil Clippy Un asistente multiplataforma para crear documentos maliciosos de MS Office. Puede ocultar macr...

ghostrings

Ghostrings Script per recuperare le definizioni di stringhe nei binari Go con analisi P-Code. Testato con x86, x86-64, ARM e ARM64. Script Golang Questi si trovano nella categoria Golang dello Script Manager. GoDynamicStrings.java Analizza il P-Code per trovare le strutture di stringa create sull...

Feeding Gophers to Ghidra

Feeding Gophers to Ghidra By Max Kersten · June 6, 2023 The scripts discussed in the article are based on the magnificent work of Dorka Palotay from CUJOai. Golang malware is becoming increasingly prevalent, requiring analysts to know how to effectively analyze these files without diving into a...

Delving deep into VBScript

In late April we found and wrote a description of CVE-2018-8174, a new zero-day vulnerability for Internet Explorer that was picked up by our sandbox. The vulnerability uses a well-known technique from the proof-of-concept exploit CVE-2014-6332 that essentially "corrupts" two memory objects and...