msf_shellcode_analysis

Statische Analyse eines Metasploit-Shellcodes Für einen ersten Blogbeitrag dachte ich, es wäre schön, einen gängigen Metasploit-Shellcode zu analysieren – eine großartige Gelegenheit, Themen wie Encoding, PEB, Windows-Shellcodes und Export-Adresstabellen zu besprechen. Erste Schritte Wir beginnen...

smoke_conf_extract

Extraktion der Smoke-Konfiguration Überblick Dieses Projekt zielt darauf ab, Konfigurationen aus SmokeLoader-Beispielen ab der Anfangsphase zu extrahieren. Ich hatte vor, dies statisch zu tun, musste mich daher auf Dinge wie Unicorn verlassen, um einige der komplizierteren Komponenten zu umgehen...

semgrep-rules

elttams semgrep-rules Willkommen im öffentlichen Repository für semgrep-Reg...

SecretScrub

SecretScrub O SecretScrub vai eliminar todos os seus segredos sujos embutidos no código. Este script processa arquivos no formato de arquivo SARIF, que é gerado por várias ferramentas de análise estática. A ferramenta examina um diretório no sistema de arquivos e cria uma nova cópia do diretório...

ApkAnalyser

Copyright C 2012 Sony Mobile Communications AB Este arquivo faz parte do ApkAnalyser. Licenciado sob a Licença Apache, Versão 2.0 a "Licença"; você não pode usar este arquivo exceto em conformidade com a Licença. Você pode obter uma cópia da Licença em root@kitploit:...

pyre-check

!WARNING This Repository Is Archived This repository is no longer maintained and has been archived. Type checking: Pyre has been replaced by Pyrefly, our next-generation Python typechecker and language server. Security analysis Pysa: Pysa has moved to its own repository at github.com/facebook/Pys...

retdec

Warning The RetDec project is currently in a limited maintenance mode due to a lack of resources: Pull Requests are welcomed. They are reviewed with priority, if possible without delays. Issues are reacted on with delays up to one quarter. Issues are not actively solved unless they relate to a...

karonte

Karonte Karonte is a static analysis tool to detect multi-binary vulnerabilities in embedded firmware. The master branch provides the latest version of Karonte, ported to python3. For the original implementation and experiments presented in our paper, please checkout the IEEE-SP-20 branch and hav...

inhale

Inhale - Malware Inhaler Inhale is a malware analysis and classification tool that is capable of automating and scaling many static analysis operations. This is the beta release version, for testing purposes, feedback, and community development. Background Inhale started as a series of small...

bincat

Introduction What is BinCAT? BinCAT is a static Binary Code Analysis Toolkit, designed to help reverse engineers, directly from IDA or using Python for automation. It features: value analysis registers and memory taint analysis type reconstruction and propagation backward and forward analysis...

truegaze

truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...

truegaze

truegaze Ein statisches Analysewerkzeug für Android- und iOS-Anwendungen, das sich auf Sicherheitsprobleme außerhalb des Quellcodes konzentriert, wie z. B. Ressourcenstrings, Drittanbieterbibliotheken und Konfigurationsdateien. Voraussetzungen Python 3 wird benötigt, und alle erforderlichen Modul...

fickling

Fickling Fickling è un decompilatore, un analizzatore statico e un riscrittore di bytecode per le serializzazioni di oggetti Python in formato pickle. Puoi usare Fickling per rilevare, analizzare, fare reverse engineering o persino creare file pickle o basati su pickle dannosi, inclusi i file...

CVE-2025-55182-Scanner

CVE-2025-55182 Hybrid Security Scanner Uno scanner di sicurezza ibrido e professionale, progettato per colmare il divario tra analisi statica e capacità di sfruttamento dinamico per la CVE-2025-55182. Questo strumento serve sia gli sviluppatori sicurezza shift-left sia i professionisti della...

sobelow

...

slither-mcp

Slither MCP Server Um servidor Model Context Protocol MCP que fornece capacidades de análise estática para contratos inteligentes Solidity utilizando Slither. Visão Geral Este servidor MCP encapsula a funcionalidade de análise estática do Slither, tornando-a acessível através do Model Context...

sshconfig-lint

sshconfig-lint Verifique erros comuns no seu /.ssh/config. Verifica blocos de host duplicados, arquivos de identidade ausentes, problemas de ordenação de curingas, algoritmos fracos, diretivas duplicadas e muito mais. Suporta diretivas Include com detecção de ciclos...

flawfinder

About This is "flawfinder" by David A. Wheeler. Flawfinder is a simple program that scans C/C++ source code and reports potential security flaws. It can be a useful tool for examining software for vulnerabilities, and it can also serve as a simple introduction to static source code analysis tools...

vibegate

Un checkpoint di sicurezza per gli strumenti di AI per programmare. Esamina ogni file che un assistente AI scrive e ferma quelli pericolosi prima che arrivino sul disco. Che problema risolve? Gli assistenti AI per programmare Claude Code, Codex, … scrivono codice velocemente — incluso codice che...

die-in-browser

die-in-browser Statische Binäranalyse mit Detect It Easy — 100% im Browser, keine Uploads. 🔍 Was ist das? Dieses Projekt führt Detect It Easy DIE — einen leistungsstarken statischen Binäranalysator — vollständig in Ihrem Browser aus, unter Verwendung des v86-Emulators. ✅ Keine Datei-Uploads :...