r2gopclntabParser

r2gopclntabParser 注意: この機能は radare2 のコアに直接実装され、gopc analysis plugin として提供されています。 radare2ベースのGo gopclntab パーサーで、完全にストリップされたものを含むGoバイナリから関数シンボルを復元します。ELF、Mach-O、PEバイナリをサポートし、Goバージョン1.2、1.16、1.18、1.20+に対応しています。 Go 1.2以降のすべてのバイナリには、gopclntab（Program Counter Line...

resym

ReSym 工件 本仓库提供了论文 "ReSym: 利用 LLM 从剥离后的二进制文件中恢复变量和数据结构符号"（CCS 2024）的工件。 🏆 ACM SIGSAC 杰出论文奖得主 注意 ：我们正在积极维护/更新我们的工件。请确保您使用的是最新版本。 提供的数据和资源 数据准备脚本 ：位于 processdata 文件夹中。它生成带有真实符号信息的训练数据。该脚本是一键式的，文件夹中提供了使用说明。 二进制文件和反编译代码 ：可在 Zenodo（ReSymrawdata）上获取。这包括我们在本项目中使用过的原始二进制文件和相应的反编译代码： bin/：包含带有调试信息的原始未剥离二进制...

kong

Kong: エージェンティックリバースエンジニア バイナリリバースエンジニアリングのためのLLMオーケストレーション Kongとは？ ほとんどのタスクは線形の関係に従います。タスクが難しいほど、通常は時間がかかるものです。リバースエンジニアリング（およびバイナリ解析）は、実際の難易度は多少簡単ですが、実行時間は数時間（そして数日！）にも及ぶことがあり、関数が数百しかないバイナリであっても同様です。...

fnprint

fnprint matches functions in binaries by what they do , not by what their bytes or control-flow graphs look like. it runs each function in a tiny emulator with made-up inputs, records the side effects it produces, and hashes that behavior into a fingerprint. two functions that behave the same get...

KernelPatch

KernelPatch 仅使用经过裁剪的 Linux 内核镜像来对 Linux 内核进行补丁和挂钩。 root@kitploit: | |/ / | | \ | | | | | ' // \ '| ' \ / \ | | / | / | ' \ | . \ / | | | | | / | / | | || | | | | ||\|| || ||||| ,|\|| || 在没有源代码和符号信息的情况下获取所有符号信息。 向内核注入任意代码。（对内核镜像进行静态补丁或运行时动态加载）。 提供内核函数内联挂钩和系统调用表挂钩。 为 Android 提供额外的 SU。 如果你使用的是...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: net: hsr: avoided possible NULL dereference in skbclone The syzbot encountered a crash 1 in skbclone, caused by a bug in hsrgetuntaggedframe. When/if createstrippedskbhsr returns NULL, we must not attempt to call skbclone...

BIT-MODSECURITY-2026-52747 ModSecurity: Multipart form-data parser silently strips embedded line breaks from form-field values, enabling request-body inspection bypass

ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. Prior to 3.0.16, the multipart/form-data request body parser in libmodsecurity silently removes embedded line breaks from non-file form-field values before exporting them to ARGS and...

CVE-2026-50184

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22, and 19.2.23, an issue in the @angular/service-worker package compromises the integrity of request-policy enforcement during...

CVE-2026-44503 Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect

The RedirectHandler middleware in microsoft/kiota-java com.microsoft.kiota:microsoft-kiota-http-okHttp v1.9.0 and other Kiota libraries fails to strip sensitive HTTP headers when following 3xx redirects to a different host or scheme. Only the Authorization header is removed; Cookie,...

CVE-2026-4057

The Download Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the makeMediaPublic and makeMediaPrivate functions in all versions up to, and including, 3.3.51. This is due to the functions only checking for editposts capability...

GHSA-X8JC-JVQM-PM3F File Browser's Signup Grants Execution Permissions When Default Permissions Includes Execution

Summary The signupHandler in File Browser applies default user permissions via d.settings.Defaults.Applyuser, then strips only Admin commit a63573b. The Execute permission and Commands list from the default user template are not stripped. When an administrator has enabled signup, server-side...

SQL Injection

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to SQL Injection in the getAllCategories function via the doNotShowCats parameter due to insufficient sanitization, where only single quotes are stripped but...

Identifying Adversary Tactics and Techniques in Malware Binaries with an LLM Agent

Understanding TTPs Tactics, Techniques, and Procedures in malware binaries is essential for security analysis and threat intelligence, yet remains challenging in practice. Real-world malware binaries are typically stripped of symbols, contain large numbers of functions, and distribute malicious...

CVE-2022-50817

In the Linux kernel, the following vulnerability has been resolved: net: hsr: avoid possible NULL deref in skbclone syzbot got a crash 1 in skbclone, caused by a bug in hsrgetuntaggedframe. When/if createstrippedskbhsr returns NULL, we must not attempt to call skbclone. While we are at it, replac...

CVE-2022-50817

In the Linux kernel, the following vulnerability has been resolved: net: hsr: avoid possible NULL deref in skbclone syzbot got a crash 1 in skbclone, caused by a bug in hsrgetuntaggedframe. When/if createstrippedskbhsr returns NULL, we must not attempt to call skbclone. While we are at it, replac...

CVE-2022-50817 net: hsr: avoid possible NULL deref in skb_clone()

In the Linux kernel, the following vulnerability has been resolved: net: hsr: avoid possible NULL deref in skbclone syzbot got a crash 1 in skbclone, caused by a bug in hsrgetuntaggedframe. When/if createstrippedskbhsr returns NULL, we must not attempt to call skbclone. While we are at it, replac...

CVE-2022-50817

CVE-2022-50817 : Linux kernel vulnerability in the HSR path where a NULL pointer deference could occur in skb_clone(), triggered by a bug in hsr_get_untagged_frame(). The issue arises when create_stripped_skb_hsr() returns NULL and skb_clone() is still invoked. Documents consistently describe the...

Malicious code in @akunsansan0/biru38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf8db8917918d0a3bcef7943fefa20905495de9100964af08f1ceef9a0e1268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masoodkashif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ded60cfbd213b919dc7d7f1a49b2e4580ba95ab161cb3a7444aa060de5d9f529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25303934a10b7a6302c8adf799c7244df48ae152b1bfe8499cb5ca783fe587b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...