reflector

reflector 描述 Burp Suite 扩展能够实时在浏览网站时发现页面上的反射型 XSS，并包含以下特性： 在响应标签页中高亮显示反射内容。 测试该反射中允许哪些符号。 分析反射上下文。 Content-Type 白名单。 如何使用 安装插件后，您只需开始操作被测 Web 应用程序。每当发现反射时，reflector 会定义严重性并生成 Burp issue。 每个 Burp issue 包含有关反射参数的详细信息，例如： 该反射中允许的符号。 在响应中高亮显示反射值。 反射上下文分析。 允许的符号分析 当发现反射并且启用了"Aggressive...

windiff

WinDiff About WinDiff is an open-source web-based tool that allows browsing and comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the operating system. The binary database is automatically updated to include information from the latest Windo...

r2gopclntabParser

r2gopclntabParser Note: This feature has been implemented directly to radare2's core as gopc analysis plugin A radare2-based Go gopclntab parser for recovering function symbols from Go binaries, including fully stripped ones. Supports ELF, Mach-O, and PE binaries across Go versions 1.2, 1.16, 1.1...

vmlinux-to-elf

vmlinux-to-elf Esta herramienta permite obtener un archivo .ELF completamente analizable a partir de una imagen de kernel vmlinux/vmlinuz/bzImage/zImage ya sea un blob binario sin procesar o un archivo .ELF existente pero sin símbolos, con los símbolos de funciones y variables recuperados. Para...

libc-database

Web 界面 libc-database 现已提供 Web 服务和前端。请访问 https://libc.rip/ 体验！ 如果您对 API 感兴趣，请阅读 https://github.com/niklasb/libc-database/tree/master/searchengine。 构建 libc 偏移数据库 如果遇到错误，请查看下面的“需求”部分。 下载所需的 libc 类别并提取符号偏移。不会重复下载任何内容，因此您也可以使用它来更新数据库： root@kitploit: $ ./get 列出类别 $ ./get ubuntu debian 下载 Ubuntu 和 Debia...

phantom-frida

phantom-frida phantom-frida compila Android Frida Server y Gadget desde el código fuente mientras cambia un conjunto específico de identificadores de tiempo de ejecución observables. Es un constructor y un arnés de verificación, no una promesa de que se derrota cualquier método de detección...

decomp2dbg

decomp2dbg La ingeniería inversa implica análisis tanto estático descompilador como dinámico depurador, pero a menudo usamos estos análisis sin compartir conocimiento entre ellos. En el caso de hacer ingeniería inversa de binarios estáticos, el cambio de contexto entre el ensamblador del depurado...

ghidra-copilot

Ghidra Copilot Asistente potenciado por IA para Ghidra. Integra un panel de chat que puede responder preguntas sobre tu programa actual, sugerir próximos pasos y ejecutar pequeñas herramientas de análisis directamente desde la conversación. Qué hace Chat dentro de Ghidra que se mantiene en contex...

ida_kernelcache

idakernelcache: An IDA Toolkit for analyzing iOS kernelcaches idakernelcache is an IDAPython module for IDA Pro to make working with iOS kernelcaches easier. The module provides functions to: Convert iOS 12's new static tagged pointers into normal kernel pointers. Parse the kernel's PRELINKINFO...

telfhash

Trend Micro ELF哈希 telfhash telfhash 是针对 ELF 文件的符号哈希，就像 imphash 是 PE 文件的导入哈希一样。通过 telfhash，你可以根据符号对 ELF 文件进行聚类。这对于对恶意样本进行聚类特别有用。如果样本没有符号，telfhash 会使用其调用地址的目标来模拟一个符号列表。更多信息请参见 资源 部分。 安装 pip 最简单的让 telfhash 工作的方法是通过 pip 安装它： pip install telfhash 手动 要求 telfhash 在生成哈希时使用 TLSH。为了 telfhash 正常工作，必须在你的系统中安...

lst2x64dbg

lst2x64dbg This command extracts all the labels found in the LST file that is given as the single argument. An x64dbg database is created in the current directory based on the extracted labels. The LST file can be generated in IDA from the File menu: Produce file - Create LST file... Example...

lst2x64dbg

lst2x64dbg 此命令提取给定 LST 文件中的所有标签（该文件作为单一参数提供）。根据提取的标签，在当前目录中创建一个 x64dbg 数据库。 LST 文件可以在 IDA 中通过 文件 菜单生成：生成文件 - 创建 LST 文件... 示例 root@kitploit: $ lst2x64dbg sample.lst ghidra2x64dbg 此命令提取给定 CSV 文件中的所有标签（该文件作为单一参数提供）。根据提取的标签，在当前目录中创建一个 x64dbg 数据库。必须提供镜像基址值。 CSV 文件可以在 Ghidra 中通过 窗口 菜单选择 符号表 生成。...

icebox

IceBox Icebox is a Virtual Machine Introspection solution that enable you to stealthily trace and debug any process kernel or user. It's based on project Winbagility. Files which might be helpful: INSTALL.md: how to install icebox. BUILD.md: how to build icebox. Demo Project Organisation fdp: Fas...

CVE-2026-90786

A vulnerability was determined in Dvidelabs flatcc up to 0.6.3. This impacts the function alignordermembers of the file src/compiler/semantics.c of the component Duplicate Symbol Handler. This manipulation causes reachable assertion. The attack can be initiated remotely. The exploit has been...

CVE-2026-90786 Dvidelabs flatcc Duplicate Symbol semantics.c align_order_members assertion

A vulnerability was determined in Dvidelabs flatcc up to 0.6.3. This impacts the function alignordermembers of the file src/compiler/semantics.c of the component Duplicate Symbol Handler. This manipulation causes reachable assertion. The attack can be initiated remotely. The exploit has been...

CVE-2026-90786 Dvidelabs flatcc Duplicate Symbol semantics.c align_order_members assertion

A vulnerability was determined in Dvidelabs flatcc up to 0.6.3. This impacts the function alignordermembers of the file src/compiler/semantics.c of the component Duplicate Symbol Handler. This manipulation causes reachable assertion. The attack can be initiated remotely. The exploit has been...

EUVD-2026-77478

A vulnerability was determined in Dvidelabs flatcc up to 0.6.3. This impacts the function alignordermembers of the file src/compiler/semantics.c of the component Duplicate Symbol Handler. This manipulation causes reachable assertion. The attack can be initiated remotely. The exploit has been...

CVE-2026-90786

Dvidelabs flatcc (up to version 0.6.3 ) contains a vulnerability in the Duplicate Symbol Handler component, specifically in the align_order_members function within src/compiler/semantics.c. The flaw allows a reachable assertion to be triggered via crafted input. The attack can be initiated remote...

vol-rs

vol-rs A port of the Volatility 3 memory forensics framework from Python to Rust. It reads the same memory images, runs the same plugins with the same options, and prints the same output, byte for byte, a good deal faster. License This project is a port of Volatility 3 and is therefore an...

bochs_linux_kernel_debugging

bochslinuxkerneldebugging Herramientas para la depuración del kernel de Linux en Bochs incluye símbolos, depurador nativo de Bochs e IDA PRO Generar archivo de símbolos para la depuración del kernel de Linux Siga los siguientes pasos: 0- Generar un archivo de información de depuración estilo nm...