47 matches found
maat
소개 Maat는 오픈소스 동적 기호 실행Dynamic Symbolic Execution 및 바이너리 분석 프레임워크입니다. 기호 실행, 오염 분석, 제약 조건 해결, 바이너리 로딩, 환경 시뮬레이션 등 다양한 기능을 제공하며, Ghidra의 sleigh 라이브러리를 활용하여 어셈블리를 리프팅합니다: https://maat.re 주요 기능: 빠르고 이식성이 뛰어남 : 실제 애플리케이션에 확장 가능하도록 설계되었습니다. 런타임 성능을 위해 완전히 C++로 작성되었습니다. 런타임 의존성이 거의 없으며, 대부분은 선택 사항입니다. 사...
rz-ghidra
rz-ghidra これは、Rizin用のGhidraデコンパイラおよびSleighディスアセンブラの統合です。 Ghidraのデコンパイラ部分のみに基づいており、すべてC++で書かれているため、Ghidra自体は必要なく、プラグインは自己完結型でビルドできます。 このプロジェクトは、もともとradare2向けにr2con 2019でCutterトークの一部として発表されました：https://youtu.be/eHtMiezr7l8?t=950 使用方法 root@kitploit: Usage: pdg Native Ghidra decompiler plugin | pdg...
rizin
Rizin Rizin is a reverse engineering framework, born as a fork of the radare2, with a focus on usability, features and cleanliness. Rizin is portable and it can be used to analyze binaries, disassemble code, debug programs, as a forensic tool, as a scriptable command-line hexadecimal editor able ...
isa_recovery
ISA リカバリシステム ファームウェアバイナリと、その（おそらく誤った）逆アセンブル結果を、動作するGhidraプロセッサ仕様に変換するリバースエンジニアリングパイプラインです。ドキュメントもGhidraサポートもない独自プロセッサに遭遇したとき、このツールは各命令の実際のエンコーディング（どのビットがオペコードで、どのビットがレジスタで、どのビットが即値か）を復元し、Ghidraに直接ロードしてファームウェアを逆コンパイルできるSLEIGH仕様を書き出します。 内部ではエージェンティックワークフロー...
CVE-2026-49496
Ghidra before 12.1 contains a heap-use-after-free vulnerability in SleighBuilder::generatePointerAdd caused by iterator invalidation when PcodeCacher::allocateInstruction reallocates the issued vector. Attackers can trigger memory corruption by decompiling malicious binaries through the public...
CVE-2024-58350
Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. Attackers can trigger an infinite loop or denial of service during shutdown by exploiti...
CVE-2024-58350
Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. Attackers can trigger an infinite loop or denial of service during shutdown by exploiti...
EUVD-2026-36005
Ghidra before 12.1 contains a heap-use-after-free vulnerability in SleighBuilder::generatePointerAdd caused by iterator invalidation when PcodeCacher::allocateInstruction reallocates the issued vector. Attackers can trigger memory corruption by decompiling malicious binaries through the public...
CVE-2026-49496 Ghidra < 12.1 - Heap-Use-After-Free in SleighBuilder::generatePointerAdd via Vector Reallocation
Ghidra before 12.1 contains a heap-use-after-free vulnerability in SleighBuilder::generatePointerAdd caused by iterator invalidation when PcodeCacher::allocateInstruction reallocates the issued vector. Attackers can trigger memory corruption by decompiling malicious binaries through the public...
CVE-2024-58350
Ghidra prior to 11.2 contains a use-after-free in the Sleigh backend caused by undefined static initialization order of SleighArchitecture::translators and XmlArchitectureCapability singletons. This can enable an attacker to trigger an infinite loop or denial of service during shutdown due to uns...
EUVD-2024-55616
Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. Attackers can trigger an infinite loop or denial of service during shutdown by exploiti...
CVE-2024-58350 Ghidra < 11.2 - Use After Free in Sleigh Backend via Static Initialization Order
Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. Attackers can trigger an infinite loop or denial of service during shutdown by exploiti...
CVE-2024-58350 Ghidra < 11.2 - Use After Free in Sleigh Backend via Static Initialization Order
Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. Attackers can trigger an infinite loop or denial of service during shutdown by exploiti...
CVE-2024-58350 Ghidra < 11.2 - Use After Free in Sleigh Backend via Static Initialization Order
Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. Attackers can trigger an infinite loop or denial of service during shutdown by exploiti...
National Security Agency Ghidra 安全漏洞
National Security Agency Ghidra is a software reverse-engineering framework developed by the National Security Agency NSA. Versions of National Security Agency Ghidra prior to version 11.2 contained security vulnerabilities. These vulnerabilities were caused by an undefined static initialization...
PT-2026-48402
Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. Attackers can trigger an infinite loop or denial of service during shutdown by exploiti...
PT-2026-48407
Ghidra before 12.1 contains a heap-use-after-free vulnerability in SleighBuilder::generatePointerAdd caused by iterator invalidation when PcodeCacher::allocateInstruction reallocates the issued vector. Attackers can trigger memory corruption by decompiling malicious binaries through the public...
Malicious Package
Overview elf-stats-aurora-sleigh-694 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious code in elf-stats-nutmeg-sleigh-350 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e43446814eeb05f58979f02ff96534374a9f069055bcc5f5f97425254b0817 The package elf-stats-nutmeg-sleigh-350 was found to contain malicious code. Source: ghsa-malware...