ALEAPP

Android Logs Events And Protobuf Parser If you want to contribute hit me up here: https://abrignoni.github.io Blog posts here: https://leapps.org/blog Download Pre-built releases need no Python installation: ALEAPP GitHub Releases, or LEAPPs Releases for the whole LEAPP family. Platform| Download...

pbtk

pbtk - Protobuf 앱 리버스 엔지니어링 Protobuf는 Google에서 개발한 직렬화 형식으로, 점점 더 많은 Android, 웹, 데스크톱 및 기타 애플리케이션에서 사용되고 있습니다. 이는 데이터 구조를 선언하는 언어 로 구성되며, 대상 구현에 따라 코드 또는 다른 종류의 구조로 컴파일됩니다. pbtk Protobuf 툴킷는 통합 GUI를 통해 접근할 수 있는 완전한 기능의 스크립트 세트로, 두 가지 주요 기능을 제공합니다: 프로그램에서 Protobuf 구조 추출 , 이를 다시 읽을 수 있는 .proto 파일로...

pbtk

pbtk - Reverse engineering Protobuf apps Protobuf is a serialization format developed by Google and used in an increasing number of Android, web, desktop and more applications. It consists of a language for declaring data structures , which is then compiled to code or another kind of structure...

Platypus

Platypus Linux 시스템 플릿을 위한 호스트 관리 허브입니다. 소유한 모든 호스트에 Platypus 에이전트를 설치하세요. 에이전트는 TLS + protobuf를 통해 Platypus 서버로 다시 연결됩니다. 서버에서 모든 관리 호스트에 대한 대화형 셸, 파일 관리, 네트워크 터널링을 하나의 중앙 제어판을 통해 얻을 수 있습니다. 스크린샷 Vercel 스타일의 플랫 네비게이션 UI로 프로젝트 대시보드, 호스트/리스너/세션 브라우저, 멀티 호스트 디스패치 콘솔, 관리 사용자 관리자를 제공합니다. 전체 갤러리는...

protobuf-inspector

protobuf-inspector Google Protobuf로 인코딩된 blob버전 2 또는 3을 해당 정의 없이도 파싱할 수 있는 간단한 프로그램입니다. blob의 내용을 보기 좋고 컬러로 표현해 줍니다. 예시: 보시다시피 필드 이름은 당연히 사라지며, 다음과 같은 상세 정보도 함께 사라집니다: varint가 zig-zag 인코딩을 사용하는지 여부 기본적으로 zig-zag 미사용 가정 32비트/64비트 값이 정수인지 부동소수점인지 여부 기본적으로 둘 다 표시 부호 여부 기본적으로 자동 감지 하지만...

CVE-2026-41242

CVE-2026-41242 — protobuf.js コードインジェクションによるRCE CVSS 9.4（クリティカル） | コードインジェクション（CWE-94） 概要 protobuf.js（npm: protobufjs）バージョン ≤ 7.5.4 および ≤ 8.0.0 には、protobufスキーマ内のタイプ名を介した任意コード実行 の脆弱性があります。@protobufjs/codegen モジュールはタイプ名をJavaScript文字列に直接連結し、Function コンストラクタ（eval...

quokka

Quokka 画像は DALL-E によって生成されました 目次 はじめに インストール 使い方 ビルド ドキュメント FAQ はじめに Quokka はバイナリエクスポーターです。プログラムの逆アセンブル結果から、逆アセンブラなしで使用できるエクスポートファイルを生成します。現在は逆アセンブリバックエンドとして IDA Pro 、Ghidra 、Binary Ninja をサポートしています。 Quokka の主な目的は、最初のエクスポート後に逆アセンブラを開くことなく、バイナリを完全に操作できるようにすることです。さらに、逆アセンブラの API...

blackboxprotobuf

Blackbox Protobuf Blackbox Protobuf は現在、PyPi 上にbbpb という名前の公式パッケージがあります。 blackboxprotobuf パッケージは古いフォークです 説明 Blackbox Protobuf は、エンコードされた Protocol Buffers protobuf を対応する protobuf 定義なしで扱うためのツール群です。 Protobuf は、Google によるバイナリ直列化フォーマットであり、JSON や XML のようなフォーマットの より効率的な代替手段として使用できます。開発者は .proto...

CVE-2026-29781

Sliver C2 サーバーにおけるアーキテクチャ上の脆弱性により、Reverse-C2 Weaponization（リバースC2の武器化）が可能になります。捕捉したインプラントから認証情報を抽出することで、防御側はC2の関係性を武器化し、リモートからのインフラストラクチャ・キルスイッチを発動できます。この悪用は、Protobufハンドラーにおけるnilポインタ検証の体系的な欠如を標的とし、グローバルなランタイムパニックを引き起こします。 CVE-2026-29781の影響は、C2インフラストラクチャの完全な運用麻痺です。 1...

A-potential-Denial-of-Service-issue-in-protobuf-java

protobuf-javaにおける潜在的なサービス拒否（DoS）問題 protobuf-javaにおける潜在的なサービス拒否（DoS）問題 深刻度: 高 GitHub レビュー済み 5日前に protocolbuffers/protobuf で公開 • 昨日更新 脆弱性の詳細 Dependabotアラート 2 パッケージ com.google.protobuf:protobuf-java maven 影響を受けるバージョン = 3.18.0, = 3.19.0, = 3.18.0, = 3.19.0, 3.19.2 パッチ適用済みバージョン 3.18.2 3.19.2 パッケージ...

CVE-2026-21020-Protobuf-Message-Parsing-Polymorphic-Deserialization-Vulnerability

CVE-2026-21020 – Protobufメッセージ解析におけるポリモーフィック逆シリアル化の脆弱性 プログラムコード（protobufを使用したPython） protovuln.py - Insecure handling of Any type import addressbookpb2 Example protobuf Simulated deserialization that trusts an injected typeurl from google.protobuf import anypb2 anymsg = anypb2.Any anymsg.typeurl ...

Rocky Linux 8 [CIQ] Security Update: aardvark-dns / buildah / buildah-debuginfo / buildah-debugsource / etc Multiple Vulnerabilities (crlsa-2024_3254)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243254 advisory. buildah: full container escape at build time CVE-2024-1753 golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters...

Rocky Linux 8 [CIQ] Security Update: aardvark-dns / buildah / buildah-debuginfo / buildah-debugsource / etc (crlsa-2024_4246)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20244246 advisory. golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON CVE-2024-24786...

AlmaLinux 9.6 [TuxCare] Security Update: protobuf / protobuf-compiler / protobuf-devel / protobuf-emacs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1772451263)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772451263 advisory. - Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags ca...

Rocky Linux 9.6 [TuxCare] Security Update: protobuf / protobuf-compiler / protobuf-devel / protobuf-emacs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1772451263)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772451263 advisory. - Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags...

Rocky Linux 8 [CIQ] Security Update: protobuf / protobuf-compiler / protobuf-compiler-debuginfo / etc (crlsa-2022_7464)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20227464 advisory. protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference CVE-2021-22570 Tenable has extracted the preceding description block direct...

Rocky Linux 9 [CIQ] Security Update: skopeo / skopeo-debuginfo / skopeo-debugsource / skopeo-tests Multiple Vulnerabilities (crlsa-2024_2549)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242549 advisory. golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON...

Rocky Linux 9 [CIQ] Security Update: protobuf / protobuf-compiler / protobuf-compiler-debuginfo / etc (crlsa-2026_3095)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20263095 advisory. python: protobuf: Protobuf: Denial of Service due to recursion depth bypass CVE-2026-0994 Tenable has extracted the preceding description block directly from the CI...

Rocky Linux 9 [CIQ] Security Update: protobuf / protobuf-compiler / protobuf-compiler-debuginfo / etc (crlsa-2022_7970)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20227970 advisory. protobuf: Incorrect parsing of nullchar in the proto symbol leads to Nullptr dereference CVE-2021-22570 Tenable has extracted the preceding description block direct...

Rocky Linux 9.6 [CIQ] Security Update: protobuf / protobuf-compiler / protobuf-compiler-debuginfo / etc (ciqsa-2026_1447)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261447 advisory. This advisory aggregates security fixes for the protobuf SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2026-0994. Tenable has extracted the preceding description...