idacode

IDACode IDACode makes it easy to execute and debug Python scripts in your IDA environment without leaving Visual Studio Code. The VS Code extension can be found on the marketplace. IDACode is still in a very early state and bugs are to be expected. Please open a new issue if you encounter any...

blutter

Blutter Flutter Mobile Application Reverse Engineering Tool by Compiling Dart AOT Runtime Currently the application supports only Android libapp.so arm64 only. Also the application is currently work only against recent Dart versions. For high priority missing features, see TODO Environment Setup...

PSBits

PSBits 通常よりも少し深く掘り下げることを可能にする、（比較的）シンプルなソリューション群。 各フォルダには詳細を説明する独自の readme.md を置くべきです。ない場合は、コードの冒頭とインラインに詳細なコメントがあります。 ニュースレター：https://gtworek.ck.page/ 自分でコンパイルしたい場合は、無料版 Visual Studio のダウンロード、インストール、設定に関する詳細な手順をこちらで確認できます：...

systeminformer

System Informer A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc...

CVE-2018-8172

CVE-2018-8172 Microsoft Visual Studio CVE-2018-8172 원격 코드 실행 취약점 http://darkcert.com/2018/08/microsoft-visual-studio-remote-code-execution-cve-2018-8172/ https://twitter.com/SyFi2k...

tiny_tracer

tinytracer A Pin Tool for tracing: API calls, including input and output of selected functions defined local functions, and functions from statically linked libraries selected instructions: RDTSC, CPUID, INT inline system calls, including parameters of selected syscalls transition between section...

reko

reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...

CVE-2024-30085

CVE-2024-30085 CVE-2024-30085 Alex Birnberg 영향받는 버전: Windows 11 23H2 원본은 여기에서 확인할 수 있습니다. Visual Studio에서 별도 구성 없이 컴파일되도록 약간 수정됨...

CVE-2024-35250-BOF

CVE-2024-35250-BOF CVE-2024-35250용 Beacon Object File BOF 구현, Cobalt Strike용. Visual Studio로 컴파일되었습니다. 감사의 말 모든 취약점 코드의 공로는 원작자 varwara에게 있습니다. 면책 조항 저는 여러분이 이 끔찍한 코드를 사용하여 저지를 수 있는 어떠한 반인륜 범죄나 핵전쟁에 대해서도 책임을 지지 않습니다...

maldev-for-dummies

Malware Development for Dummies In the age of EDR, red team operators cannot get away with using pre-compiled payloads anymore. As such, malware development is becoming a vital skill for any operator. Getting started with maldev may seem daunting, but is actually very easy. This workshop will sho...

xori

Xori - Custom disassembly framework Xori is an automation-ready disassembly and static analysis library that consumes shellcode or PE binaries and provides triage analysis data. Acknowledgements: Xori wouldn't exist without inspiration and ideas from the open source community. We are indebted to...

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

CVE-2020-27955-LFS-main

Git-lfs 원격 코드 실행 RCE 익스플로잇 CVE-2020-27955 .bat / powershell 버전 취약 대상: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken 등 Dawid Golunski 발견 https://legalhackers.com https://exploitbox.io Windows에서 테스트됨: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code,...

nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

kekeo

kekeo kekeo is a little toolbox I have started to manipulate Microsoft Kerberos in C and for fun ASN.1 library In kekeo, I use an external commercial library to deal with Kerberos ASN.1 structures: OSS ASN.1/C http://www.oss.com/asn1/products/asn1-c/asn1-c.html It was the only code...

CVE-2020-27955

Git-lfs 원격 코드 실행 RCE 익스플로잇 CVE-2020-27955 .bat / powershell 버전 취약한 대상: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken 등. Dawid Golunski 발견 https://legalhackers.com https://exploitbox.io Windows에서 테스트됨: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code...

CVE-2020-27955

Git-lfs 원격 코드 실행 RCE 익스플로잇 CVE-2020-27955 .bat / powershell 버전 취약한 대상: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken 등 발견자 Dawid Golunski https://legalhackers.com https://exploitbox.io Windows에서 테스트 완료: git, GitHub CLI gh, GitHub Desktop, Visual Studio...

CVE-2020-27955-LFS

Git-lfs 원격 코드 실행 RCE 익스플로잇 CVE-2020-27955 .bat / powershell 버전 취약 대상: git, GitHub CLI gh, GitHub Desktop, Visual Studio Code, SourceTree, SmartGit, GitKraken 등 Dawid Golunski 가 발견함 https://legalhackers.com https://exploitbox.io Windows에서 테스트 완료: git, GitHub CLI gh, GitHub Desktop, Visual Studio...

Spartacus

!CAUTION 이 저장소는 유지보수되지 않습니다. 최신 버전은 https://github.com/sadreck/Spartacus 에서 확인하세요. Spartacus DLL/COM 하이재킹 툴킷 왜 "Spartacus"인가? 1960년 영화 스파르타쿠스를 보셨다면, 로마인들이 스파르타쿠스에게 자수하라고 요구하는 장면을 기억하실 것입니다. 진짜 스파르타쿠스가 일어났을 때, 다른 많은 사람들도 일어나 "나는 스파르타쿠스다"라는 대사를 사용하며 자신이 그라고 주장했습니다. DLL 하이재킹에 취약한 프로세스가 DLL 로드를 요청할 때...

PMD

実践的マルウェア開発 演習 1 - 環境セットアップ 1. ハイパーバイザー内に Windows 仮想マシンをセットアップします。 a. ベースインストールのスナップショットを必ず取得してください。 2. Visual Studio 2022 をダウンロードしてインストールします - https://visualstudio.microsoft.com/vs/ a. インストール時に Desktop development with C++ ワークロードを選択します 3. 以下をダウンロードしてインストールします: DebugView++ -...