malpedia-flossed

Malpedia FLOSSed This repository contains the result of the FLARE FLOSS tool applied to all unpacked and dumped samples in Malpedia, pre-processed for further use. We intend to update this collection periodically. In the last run in January 2026, 9.202 files associated with 2.136 malware families...

bytesrevealer

https://bytesrevealer.online/ VULNEX https://www.vulnex.com/ Bytes Revealer Version: 0.4 Bytes Revealer is a powerful reverse engineering and binary analysis tool designed for security researchers, forensic analysts, and developers. With features like hex view, visual representation, string...

proctools

proctools Small toolkit for extracting information and dumping sensitive strings from Windows processes . Made to accompany FormThief. procsearch - find sensitive strings in target process memory searches for parsed string in readable process memory, if found, displays a range of valid ASCII char...

CVE-2024-1346

CVE-2024-1346 Contraseña débil de la base de datos MySQL root en LaborOfficeFree afecta a la versión 19.10. Esta vulnerabilidad permite a un atacante calcular la contraseña root de la base de datos MySQL utilizada por LaborOfficeFree usando dos constantes. Exploit Title: LaborOfficeFree 19.10 MyS...

hardcodes

hardcodes 从源代码中提取字符串 hardcodes 是一款用于搜索开发者在程序中硬编码的字符串的工具。它使用模块化分词器，能够处理注释、任意数量的反斜杠以及几乎所有你能扔给它的语法。 是的，它旨在处理任何语法，并且官方支持以下语言： root@kitploit: ada, applescript, c, c, c++, coldfusion, golang, haskell, html, java, javascript, jsp, lua, pascal, perl, php, powershell, python, ruby, scala, sql, swift, xml ...

bytesrevealer

https://bytesrevealer.online/ VULNEX https://www.vulnex.com/ Bytes Revealer 版本: 0.4 Bytes Revealer 是一款功能强大的逆向工程和二进制分析工具，专为安全研究人员、取证分析人员和开发者设计。它提供十六进制视图、可视化表示、字符串提取、熵计算和文件签名检测等功能，帮助用户发现文件中隐藏的数据。无论是分析恶意软件、调试二进制文件，还是调查未知文件格式，Bytes Revealer 都能让您轻松浏览、搜索和提取任何二进制文件中的有价值信息。 Bytes Revealer...

CVE-2026-30873 OpenWrt Project jsonpath: Memory leak when processing strings, labels, and regexp tokens

OpenWrt Project is a Linux operating system targeting embedded devices. In versions prior to both 24.10.6 and 25.12.1, the jpgettoken function, which performs lexical analysis by breaking input expressions into tokens, contains a memory leak vulnerability when extracting string literals, field...

PT-2026-26382

OpenWrt Project is a Linux operating system targeting embedded devices. In versions prior to both 24.10.6 and 25.12.1, the jp get token function, which performs lexical analysis by breaking input expressions into tokens, contains a memory leak vulnerability when extracting string literals, field...

Happy IR in the New Year!

At the end of last year Mr. Jake Williams from aka @MalwareJake asked a very important question about Lack of visibility during detecting APT intrusions in twitter. Results show us that endpoint analysis is the most important part of any research connected with APTs. Also, for sure endpoint...

Professional PE file Explorer: PPEE

Professional PE file Explorer Puppy is a lightweight yet strong tool for static investigation of suspicious files. A companion plugin is also provided to query the file in the well-known malware repositories and take one-click technical information about the file such as its size, entropy,...

Automated Memory Analyzer For Malware Samples: VolatilityBot

Automated Memory Analyzer For Malware Samples VolatilityBot is an automation tool for researchers cuts all the guesswork and manual tasks out of the binary extraction phase, or to help the investigator in the first steps of performing a memory analysis investigation. Not only does it automaticall...

PE Static Malware Analysis: PortEx

PortEx is a Java library for static malware analysis of portable executable files. Its focus is on PE malformation robustness and anomaly detection. PortEx is written in Java and Scala, and targeted at Java applications. Features Reading Header information from: MSDOS Header, COFF File Header,...