rikune

Rikune Rikune is an MCP server for reverse engineering Windows executables and related binary formats. It combines sample intake, static triage, Ghidra-assisted function recovery, plugin-driven specialist tooling, artifact management, and optional isolated Windows runtime execution behind a Model...

Robber

Robber — DLL Hijack Scanner Free, open source tool for finding DLL hijacking opportunities in Windows executables. No third-party dependencies. What it does Windows loads DLLs by searching a fixed set of directories in order — the executable's own directory first, then System32, Windows, PATH...

backdoorppt

backdoorppt - 'Office 扩展名伪装工具' root@kitploit: 版本发布：v1.7-稳定版 作者：pedro ubuntu r00t-3xp10it 支持发行版：Linux Kali, Ubuntu, Mint Suspicious-Shell-Activity© SSA 红队开发 @2017 将你的 payload.exe 伪装成一个虚假的 Word 文档 .ppt root@kitploit: 简单脚本，允许用户将一个现有的 executable.exe 添加 ms-word 图标 （使用 resource-hacker 作为后端应用程序） 并利用 Rub...

deobf-Arxan-Deob-C

Arxan-Deob-C Programa simple en C para desofuscar rápidamente ejecutables de Windows protegidos con Arxan. Está un poco desordenado por ahora... ¡Ten cuidado : Lo iré limpiando...

zeek-xor-exe-plugin

Corelight::PEXOR Plugin de Zeek para detectar y descifrar ejecutables de Windows ofuscados con XOR. La clave utilizada para aplicar XOR al archivo se descubrirá automáticamente y se usará para aplicar XOR al archivo y devolverlo al ejecutable original de Windows. Una vez que el archivo se...

MAL-2026-11144 Malicious code in react-puller (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ac07c0f6c79714a7b1f6bfd1272f9f7942cf0473875ca5276a1034c084f06d The package's postinstall hook runs node index.js, which spawns a detached worker that downloads two Windows executables CDPUserPlatform.exe and...

SUSE CVE-2026-48831

Wine ships a .desktop file that registers itself as a MIME handler for EXE files and several other Windows executable file types. In some configurations, handling of an EXE file causes that file to be blindly executed with the permissions of the invoker. This allows escaping Flatpak and Snap...

CVE-2026-48831

Wine ships a .desktop file that registers itself as a MIME handler for EXE files and several other Windows executable file types. In some configurations, handling of an EXE file causes that file to be blindly executed with the permissions of the invoker. This allows escaping Flatpak and Snap...

[SECURITY] Fedora 42 Update: mingw-binutils-2.43.1-6.fc42

Cross compiled binutils utilities like 'strip', 'as', 'ld' which understand Windows executables and DLLs...

[SECURITY] Fedora 43 Update: mingw-binutils-2.45.1-2.fc43

Cross compiled binutils utilities like 'strip', 'as', 'ld' which understand Windows executables and DLLs...

[SECURITY] Fedora 43 Update: mingw-binutils-2.45-2.fc43

Cross compiled binutils utilities like 'strip', 'as', 'ld' which understand Windows executables and DLLs...

[SECURITY] Fedora 42 Update: mingw-binutils-2.43.1-5.fc42

Cross compiled binutils utilities like 'strip', 'as', 'ld' which understand Windows executables and DLLs...

EUVD-2018-17162

Malware in sbrugna...

EUVD-2023-54617

Malicious code in bioql PyPI...

[SECURITY] Fedora 42 Update: mingw-binutils-2.43.1-4.fc42

Cross compiled binutils utilities like 'strip', 'as', 'ld' which understand Windows executables and DLLs...

GitHub: CVE-2025-46334 Git Malicious Shell Vulnerability

CVE-2025-46334 is regarding a vulnerability in Git GUI Windows only where a malicious repository can ship versions of sh.exe or typical textconv filter programs such as astextplain. On Windows, path lookup can find such executables in the worktree. These programs are invoked when the user selects...

LibreOffice 输入验证错误漏洞

LibreOffice is an open source office software suite from The Document Foundation. An input validation error vulnerability exists in LibreOffice versions prior to 24.8 through 24.8.5 that stems from improper input validation and could lead to unconditional execution of Windows executables...

CVE-2023-4770

An uncontrolled search path element vulnerability has been found on 4D and 4D server Windows executables applications, affecting version 19 R8 100218. This vulnerability consists in a DLL hijacking by replacing x64 shfolder.dll in the installation path, causing an arbitrary code execution...

CVE-2023-4770

CVE-2023-4770 affects 4D and 4D server Windows executables, specifically version 19 R8 100218. The issue is an uncontrolled search path element causing DLL hijacking by replacing the x64 shfolder.dll in the installation path, leading to arbitrary code execution. Public details confirm the vulnera...

Fedora: Security Advisory for mingw-binutils (FEDORA-2023-d6560c7198)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...