norimaci

Norimaci "Norimaci" is a simple and lightweight malware analysis sandbox for macOS. This tool was inspired by "Noriben". Norimaci uses the features of OpenBSM or Monitor.app to monitor macOS system activity instead of Sysinternals Process Monitor procmon. Norimaci consists of 3 Python scripts...

bytecode-viewer

Bytecode Viewer Bytecode Viewer - a lightweight user-friendly Java/Android Bytecode Viewer, Decompiler & More. New Features Jump to Declaration Draggable tabs Patched CVE-2022-21675 Make sure to upgrade to v2.11.X Dark mode by default with multiple themes Translated into over 30 languages...

uac

Unix-like Artifacts Collector UAC About • Documentation • Main Features • Supported Operating Systems • Usage • Contributing • Support • License 🔎 About UAC UAC Unix-like Artifacts Collector is a powerful and extensible incident response tool designed for forensic investigators, security analysts...

engine

Droidefense Engine Advance Android Malware Analysis Framework Latest release Download What Droidefense is Droidefense originally named atom: a nalysis t hrough o bservation m achine is the codename for android apps/malware analysis/reversing tool. It was built focused on security issues and trick...

IoT-PT-v1

🛠️ IoT-PT OS v1 इंटरनेट ऑफ थिंग्स पेनिट्रेशन टेस्टिंग OS - संस्करण 1 📦 IoT-PT OS v1 क्या है? IoT-PT OS v1 एक पेनिट्रेशन टेस्टिंग वर्चुअल मशीन है जो विशेष रूप से IoT सुरक्षा आकलन के लिए डिज़ाइन की गई है। इसमें फर्मवेयर विश्लेषण, एम्बेडेड सिस्टम हमलों, वायरलेस हैकिंग और अधिक के लिए तैयार किए गए...

ThreatPursuit-VM

root@kitploit: / || | / | \ | | \ / \ \ \ | | | Y | | \ / / | | || || || \ || |/ | \ | | \ / | | | \ \ | | | | /| | \ | | | || | | /|/ || / |/|||| || / मैंडिएंट थ्रेट इंटेलिजेंस VM संस्करण 2020.1 [email protected] root@kitploit: द्वारा निर्मित: Dan Kennedy Jake Barteaux @day1player...

javascript-obfuscator

JavaScript obfuscator 🚀 Obfuscator.io مع تشويش VM Obfuscator.io يضيف تشويش البايت كود القائم على VM إلى هذه الحزمة - حيث يتم تجميع دوال JavaScript الخاصة بك إلى بايت كود مخصص يعمل على آلة افتراضية مدمجة. كل بناء ينتج رموز تشغيل وهيكل VM فريدين، مما يجعل الهندسة العكسية وإزالة التشويش الآلي أصعب...

Lime-RAT

قديم. قم بأرشفته بدلاً من حذفه LimeRAT v0.1.9 أداة إدارة عن بُعد لنظام ويندوز الوصف أداة RAT بسيطة لكنها قوية لأجهزة ويندوز. هذا المشروع بسيط وسهل الفهم، ويجب أن يمنحك معرفة عامة حول برمجيات dotNET الخبيثة وكيف تتصرف. الميزات الرئيسية .NET مكتوبة بلغة Visual Basic .NET، يتطلب العميل إطار العمل 2....

kali-vm

منشئ صور آلة Kali الافتراضية هذا هو سكربت البناء لإنشاء صور الآلة الافتراضية VM الخاصة بـ Kali Linux. حاليًا، هناك طريقتان ممكنتان للبناء: build.sh - البناء مباشرةً من جهازك build-in-container.sh - البناء من داخل حاوية Docker أو Podman في كلتا الحالتين، يتم البناء فعليًا من داخل آلة افتراضية يتم...

PowerShell-Pro-Obfuscator-Python

PowerShell Pro Obfuscator — Offusca e Virtualizza Codice PowerShell PowerShell Pro Obfuscator protegge script .ps1 proprietari con rinomina, crittografia polimorfa di stringhe e interi, appiattimento del flusso di controllo, automi a stati finiti FSA, un motore VM, controlli di integrità...

Astra Linux – Vulnerability in Qemu

QEMU 5.0.0 has a use-after-free issue in the hw/usb/hcd-xhci.c file, as the return value of usbpacketmap is not checked...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: igb: Initialize the mailbox message for VF reset When a MAC address is not assigned to the VF, that portion of the message sent to the VF is not set. However, the memory is allocated from the stack, which means that information m...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel before version 6.6.7, a untrusted VMM could trigger the int80 syscall handling at any given point. This issue is related to the files arch/x86/coco/tdx/tdx.c and arch/x86/mm/memencryptamd.c...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Forcibly leave nested virtualization mode when SMM state is toggled The nested virtualization mode is forcibly exited if the user space toggles the SMM state using KVMSETVCPUEVENTS or KVMSYNCX86EVENTS. If the user space...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pv: fix index value of replaced ASCE The index field of the struct page corresponding to a guest ASCE should be 0. When replacing the ASCE in s390replaceasce, the index of the new ASCE should also be set to 0. Using th...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: x86/hyperv: Disabling IBT when the hypercall page lacks the ENDBR instruction. On hardware that supports Indirect Branch Tracking IBT, Hyper-V VMs with ConfigVersion 9.3 or later support IBT in the guest. However, current version...

Astra Linux – Vulnerability in open-vm-tools

VMware Tools contains a vulnerability related to bypassing the SAML token signature. A malicious actor who has been granted “Guest Operation Privileges” can potentially elevate their privileges if the target virtual machine has been assigned a more privileged “Guest Alias”. source-iocs-preserved...

Astra Linux – Vulnerability in amd64-microcode

Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to influence the cache line write-back behavior of the CPU, resulting in a potential loss of integrity of the guest virtual machine VM memory...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: making the apf token non-zero to fix the bug In the current async pagefault logic, when a page is ready, KVM relies on kvmarchcandequeuepagepresent to determine whether to deliver a READY event to the Guest. This...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: KVM: Do not dereference ops-destroy with a null pointer. The cleanup of a KVM device occurs through either of two callbacks: 1 destroy, called when the VM is being destroyed; 2 release, called when a device file descriptor is...