Win32_Offensive_Cheatsheet

Win32 Offensive Cheatsheet Techniken zum Missbrauch von Win32 und Kernel für Pentester & Red-Teamer, erstellt von @UVision und @RistBS Dev-Modus aktiviert, offen für jede Hilfe : Windows-Binärdokumentation PE-Struktur PE-Header PE parsen Export Address Table EAT Funktionsadresse auflösen Import...

RpcInvestigator

RPC Investigator Leggi il nostro annuncio sul blog. RPC Investigator RPCI è un'applicazione .NET/C Windows Forms UI che fornisce un'interfaccia avanzata di scoperta e analisi per gli endpoint RPC di Windows. Lo strumento offre un'interfaccia visiva attorno alle capacità RPC di base esistenti dell...

DInvoke_rs

DInvokers Rust-Port von Dinvoke. DInvokers kann für viele Zwecke verwendet werden, beispielsweise für das Parsen von PE-Dateien, die dynamische Auflösung exportierter Funktionen, das dynamische Laden von PE-Plugins zur Laufzeit, die Umgehung von API-Hooks und mehr. Features: Undokumentierte...

AZL-35255 CVE-2023-40548 affecting package shim for versions less than 15.8-3

A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a user-controlled value parsed from the PE binary being used by Shim. This value is further used for memory allocation operations, leading to a heap-based buffer overflow. This fl...

ClamAV antivirus multiple security vulnerabilities

Memory corruption on PDF and PE parsing...

Microsoft Malware Protection Engine TWO DoS Vulnerabilities

CVE-2008-1437 CVE-2008-1438 There are two vulnerabilities idenitified in Microsoft Antivirus product. These vulnerabilities can be exploited to cause Denial of service. 1. CVE-2008-1437 PE Parsing Memory Corruption While scanning a specially crafted PE file, Malware orotection engine...