r2frida

r2frida Radare2 和 Frida 强强联合 描述 为 radare2 自带 frida 的独立插件，允许使用 r2 命令（但不限于）Frida 脚本来检测本地或远程进程。 radare 项目提供了一套完整的逆向工程工具链，它得到积极维护，提供了完善的功能，并可通过其他编程语言和工具扩展其特性。 Frida 是一个动态检测工具包，通过注入你自己的 JavaScript 代码（可选地还可以与脚本通信）来轻松检查并操控正在运行的进程。 特性 运行未经修改的 Frida 脚本（使用 :. 命令） 在任何进程中执行 C、JavaScript 或 TypeScript 代码片段...

PyMemoryEditor

PyMemoryEditor A pure-Python library built on ctypes that lets you inspect, modify and search the memory of any running process in a few lines of Python — Cheat Engine workflows on Windows, Linux and macOS! Read, write and scan the memory of any process — straight from Python. One unified API...

Behavioral blocking and containment: Transforming optics into protection

In today’s threat landscape—overrun by fileless malware that live off the land, highly polymorphic threats that mutate faster than traditional solutions can keep up with, human-operated attacks that adapt to what adversaries find on compromised machines, and other sophisticated threats—behavioral...

CVE-2016-0338

IBM Security Identity Manager ISIM Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 allows local users to discover cleartext passwords by 1 reading a configuration file or 2 examining a process...