qiling

Qiling's use case, blog and related work Qiling is an advanced binary emulation framework, with the following features: Emulate multi-platforms: Windows, macOS, Linux, Android, BSD, UEFI, DOS, MBR. Emulate multi-architectures: 8086, X86, X8664, ARM, ARM64, MIPS, RISC-V, PowerPC. Support multiple...

uEmu

Overview uEmu is a tiny cute emulator plugin for IDA based on unicorn engine. Supports following architectures out of the box: x86 , x64 , ARM , ARM64 , MIPS , MIPS64 What is it GOOD for? Emulate bare metal code bootloaders, embedded firmware etc Emulate standalone functions What is it BAD for?...

unicorn-bios

unicorn-bios About Basic BIOS emulator/debugger for Unicorn Engine. Written to debug the XEOS Operating System boot sequence. Usage: Usage: unicorn-bios OPTIONS BOOTIMG Options: --help / -h: Displays help. --memory / -m: The amount of memory to allocate for the virtual machine in megabytes...

QuickAsm

Quick Assembler Simple experimental x86/x86 assembler and emulator. Quick Assembler is built with wxWidgets. This is my first attempt at using wxWidgets for something real. I have created a private build of wxWidgets that supports static linking of wxWidgets with CRT static linking. If you build...

iblessing

☠️ ██╗██████╗ ██╗ ███████╗███████╗███████╗██╗███╗ ██╗ ██████╗ ██║██╔══██╗██║ ██╔════╝██╔════╝██╔════╝██║████╗ ██║██╔════╝ ██║██████╔╝██║ █████╗ ███████╗███████╗██║██╔██╗ ██║██║ ███╗ ██║██╔══██╗██║ ██╔══╝ ╚════██║╚════██║██║██║╚██╗██║██║ ██║ ██║██████╔╝███████╗███████╗███████║███████║██║██║...

zelos

Zelos Zelos Z eropoint E mulated L ightweight O perating S ystem एक पायथन-आधारित बाइनरी एमुलेशन प्लेटफ़ॉर्म है। Zelos का एक उपयोग कमांड-लाइन या पायथन स्क्रिप्ट के माध्यम से बाइनरी के गतिशील व्यवहार का त्वरित मूल्यांकन करना है। सभी सिस्कॉल्स को एमुलेट किया जाता है ताकि लक्ष्य बाइनरी को अलग किया जा...

Cmulator

Cmulator - Scriptable x86 RE Sandbox Emulator v0.3 Beta Cmulator is x86 - x64 Scriptable Reverse Engineering Sandbox Emulator for shellcode and PE binaries Based on Unicorn & Capstone Engine & javascript . 💬 This is the last supported Pascal version and new code base C/C++ will be in here Cmulato...

unicorn

यूनिकॉर्न इंजन योगदानकर्ताओं की तलाश है! देखें यह। Unicorn एक हल्का, मल्टी-प्लेटफॉर्म, मल्टी-आर्किटेक्चर CPU एमुलेटर फ्रेमवर्क है, जो QEMU पर आधारित है। Unicorn कुछ अद्वितीय सुविधाएँ प्रदान करता है: मल्टी-आर्किटेक्चर: ARM, ARM64 ARMv8, M68K, MIPS, PowerPC, RISCV, SPARC, S390X, TriCore और X86 16,...

unicorn_pe

Unicorn PE Unicorn PE هو مشروع/إطار عمل قائم على unicorn مصمم لمحاكاة تنفيذ الكود لملفات PE الخاصة بنظام ويندوز، خاصة تلك المعبأة packed. هذا المشروع مؤرشَف ولم يعد مدعومًا. يُنصح باستخدام sogen كبديل. الميزات تفريغ صورة PE من ذاكرة المحاكاة إلى ملف، إصلاح جدول الاستيراد، فك تشفير سلاسل VMProtect...

“Good enough” emulation: Fuzzing a single thread to uncover vulnerabilities

A Cisco Talos researcher worked around the limitations of hardware-level Code Read-out Protection RDP on the Socomec DIRIS M-70 gateway by pivoting from physical debugging to a "good enough" emulation approach. By focusing on emulating only the single thread responsible for Modbus protocol handli...

EUVD-2020-23959

Malware in sbrugna...

EUVD-2021-23555

Malware in sbrugna...

EUVD-2021-0455

Malware in sbrugna...

EUVD-2022-34021

Malicious code in bioql PyPI...

EUVD-2022-34020

Malicious code in bioql PyPI...

EUVD-2022-34019

Malicious code in bioql PyPI...

EUVD-2022-34018

Malicious code in bioql PyPI...

CVE-2022-29692

Unicorn Engine v1.0.3 was discovered to contain a use-after-free vulnerability via the hook function...

unicorn:fuzz_emu_x86_32: Crash in pcmpxstrx

Project: https://github.com/unicorn-engine/unicorn.git Detailed Report: https://oss-fuzz.com/testcase?key=5334332751544320 Project: unicorn Fuzzing Engine: libFuzzer Fuzz Target: fuzzemux8632 Job Type: libfuzzermsanunicorn Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x72e100014dc6...

FreeBSD : py39-unicorn -- sandbox escape and arbitrary code execution vulnerability (17083017-d993-43eb-8aaf-7138f4486d1c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 17083017-d993-43eb-8aaf-7138f4486d1c advisory. - An issue was discovered in splitregion in uc.c in Unicorn Engine before 2.0.0-rc5. It allows local...