5830 matches found
maat
About Maat is an open-source Dynamic Symbolic Execution and Binary Analysis framework. It provides various functionalities such as symbolic execution, taint analysis, constraint solving, binary loading, environment simulation, and leverages Ghidra's sleigh library for assembly lifting:...
RvbbitSafe
RvbbitSafe: The Hacker's Nightmare – A Six-Fortress Anti-Ransomware Architecture for Windows 🛡️ Overview RvbbitSafe is a research prototype demonstrating a paradigm shift in ransomware defense. It's an active, multi-layered fortress that combines hardware virtualization, AI-driven deception,...
angr
angr angr is a platform-agnostic binary analysis framework. It is brought to you by the Computer Security Lab at UC Santa Barbara, SEFCOM at Arizona State University, their associated CTF team, Shellphish, the open source community, and @rhelmot. Project Links Homepage: https://angr.io Project...
VMDragonSlayer
VMDragonSlayer Project will be public by mid-October Refactoring In Progress Advanced Virtual Machine Detection and Analysis Framework VMDragonSlayer is a comprehensive framework for analyzing binaries protected by Virtual Machine VM based protectors such as VMProtect 2.x/3.x, Themida, and custom...
ioctlance
IOCTLance Description Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduces IOCTLance, a tool that enhances its capacity to detect various vulnerability types in Windows Driver Model WDM drivers. In a...
CVE-2025-48799
Description This is PoC for CVE-2025-48799, an elevation of privilege vulnerability in Windows Update service. This vulnability affects windows clients win11/win10 with at least 2 hard drives. When machine have multiple hard drives it is possible to change location where new content is saved usin...
CVE-2023-23946-POC
CVE-2023-23946 POC Exploit Explanation and POC of the CVE-2023-23946 The CVE-2023-23946 vulnerability is caused by a flaw in the way git handles symbolic links. When git creates a symbolic link, it doesnt actually handle it as a symbolic link and because of that we can exploit it to point to file...
radare2
Radare2: Libre Reversing Framework for Unix Geeks Current git master branch is 6.2.2, next release will be 6.2.4. Description r2 is a complete rewrite of radare. It provides a set of libraries, tools and plugins to ease reverse engineering tasks. Distributed under LGPLv3, despite each plugin can...
CVE-2026-53694-NoMachine-LPE
CVE-2026-53694: NoMachine Local Privilege Escalation via Argument Injection Overview This repository contains the write-up and Proof of Concept PoC for CVE-2026-53694, a Local Privilege Escalation LPE vulnerability in NoMachine for Linux. Due to improper neutralization of argument delimiters in t...
CVE-2015-1769
CVE-2015-1769 PoC for CVE-2015-1769 VHD file to reproduce CVE-2015-1769. VHD doesn't contain actual payload only notepad.exe. Upon mounting inspect system log for reported blocked error if latest patch is installed. Batch script shows how symbolic link was created that triggers the vulnerability...
lightbulb-framework
LightBulb LightBulbは、Webアプリケーションファイアウォールやフィルタを監査するためのオープンソースのPythonフレームワークです。 概要 このフレームワークは、次の2つの主要なアルゴリズムで構成されています。 GOFA : 標準的なメンバーシップ/等価クエリモデルにおいて、オートマトンの記号的表現を推論する能動学習アルゴリズムです。 能動学習アルゴリズムは、フィルタやサニタイザプログラムをリモートで分析することを可能にします。つまり、対象プログラムにクエリを実行し、その出力を観察する能力のみが与えられた場合でも分析できます。 SFADiff :...
angrgdb
angrgdb GDB内でangrを使用します。現在のデバッガ状態からangr状態を作成します。 インストール root@kitploit: pip install angrgdb echo "python import angrgdb.commands" /.gdbinit 使用方法 angrgdbはGDBでangrdbg APIを実装しています。 スクリプト内で次のように使用できます： root@kitploit: from angrgdb import gdb.execute"b 0x004005f9" gdb.execute"r aaaaaaaa" sm = StateManag...
angrgdb
angrgdb Use angr inside GDB. Create an angr state from the current debugger state. Install root@kitploit: pip install angrgdb echo "python import angrgdb.commands" /.gdbinit Usage angrgdb implements the angrdbg API in GDB. You can use it in scripts like this: root@kitploit: from angrgdb import...
Triton
Triton is a dynamic binary analysis library. It provides internal components that allow you to build your program analysis tools, automate reverse engineering, perform software verification or just emulate code. Dynamic symbolic execution Dynamic taint analysis AST representation of the x86 ,...
ManticoreUI
============ Manticore UI .. image:: https://raw.githubusercontent.com/trailofbits/manticore/master/docs/images/manticore.png :width: 200px :align: center :alt: Manticore The Manticore User Interface MUI project provides a graphical user interface plugin for different disassemblers that allows...
Ponce
Ponce Ponce pronounced 'poN θe pon-they is an IDA Pro plugin that provides users the ability to perform taint analysis and symbolic execution over binaries in an easy and intuitive fashion. With Ponce you are one click away from getting all the power from cutting edge symbolic execution. Entirely...
maat
概要 Maatは、オープンソースの動的シンボリック実行およびバイナリ解析フレームワークです。シンボリック実行、汚染解析、制約解決、バイナリ読み込み、環境シミュレーションなど様々な機能を提供し、アセンブリリフティングにはGhidraのsleighライブラリを活用しています: https://maat.re 主な機能: 高速でポータブル : 実世界のアプリケーションにスケールするよう設計されています。優れた実行性能のため完全にC++で書かれています。実行時の依存関係はほとんどなく、そのほとんどはオプションです。 ユーザーフレンドリー :...
exrop
Exrop x86-64 バイナリ向け自動ROPチェーン生成ツール。 Triton によるシンボリック実行を利用。 機能 レジスタを定数または他のレジスタに設定 rdi=0x41414141, rdi=rax メモリへの書き込み 定数およびレジスタベースのアドレス/値 メモリへの文字列/バイトの書き込み 定数/レジスタ/文字列引数を混在させた関数呼び出し open"/etc/passwd", 0 システムコールチェーン Badchar回避 非リターンガジェット対応 jmp reg, call reg カーネルエクスプロイトのためのJOPチェーン検索によるスタックピボット...
CVE-2023-36723
CVE-2023-36723 This is PoC for arbitrary directory creation bug in Container Manager service. This PoC is not thoroughly tested so it may not even work most of the time it was enough for msrc to confirm vulnerability. In order to exploit this vulnerability a Windows Sandbox feature have to be...