shredder-rs

Shredder-RS A polymorphic mutation engine for x8664 binaries. Overview Shredder-RS implements instruction-level shredding to defeat static analysis. By breaking the linear flow of the code and injecting randomized junk nodes, it forces disassemblers to follow a complex graph of JMP-linked...

nasm_linux_x86_64_pure_sharedlib

NASM Linux x8664 pure no deps shared library .so Tested with "Reflective SO injection". A library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process...

Jump-over-ASLR-BTB

Branch Predictors & ASLR Author: Byte Reaper Description This repository contains research C implementation that demonstrates concepts related to branch predictors, speculative execution, and cache-based side channels in the context of address space layout randomization ASLR. Requirements : Linux...

K55

K55 - Linux x8664 Process Injection Utility C++14 About K55 pronounced: "kay fifty-five" The K55 payload injection tool is used for injecting x8664 shellcode payloads into running processes. The utility was developed using modern C++11 techniques as well as some traditional C linux functions like...

avml

AVML Acquire Volatile Memory for Linux Summary A portable volatile memory acquisition tool for Linux. AVML is a Linux userland volatile memory acquisition tool written in Rust, intended to be deployed as a static binary. AVML can be used to acquire memory without knowing the target OS distributio...

rbpf

rbpf Rust user-space virtual machine for eBPF Description Link to the crate API Example uses Building eBPF programs Build Features Feedback welcome! Questions / Answers Caveats To do list License Inspired by Other resources Description This crate contains a virtual machine for eBPF program...

foolav

foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...

honggfuzz

Honggfuzz A security-oriented, feedback-driven, evolutionary fuzzer. Honggfuzz is a general-purpose fuzzer that uses code coverage software and hardware-based to find bugs. It is multi-process, multi-threaded, and supports persistent fuzzing for extreme speed. Key Features Fast : Multi-process an...

e9patch

E9Patch - A Powerful Static Binary Rewriter E9Patch is a powerful static binary rewriting tool for x8664 Linux ELF binaries. E9Patch is: Scalable : E9Patch can reliably rewrite large/complex binaries including web browsers 100MB in size. Compatible : The rewritten binary is a drop-in replacement ...

Brovan

A user-mode x8664 binary emulator for inspecting programs, tracing syscalls, and safely running untrusted software. What is Brovan? Brovan is an interactive x8664 emulator that gives you full control over how programs execute. It can be used to reverse engineer binaries, trace API and system call...

CVE-2022-2274

CVE-2022-2274 A POC OF CVE-2022-2274 openssl The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X8664 CPUs supporting the AVX512IFMA instructions. This issue makes the RSA implementation with 2048 bit private keys incorrect on such machines and memory corruption will...

ELFLoader

ELFLoader This is a ELF object in memory loader/runner. The goal is to create a single elf loader that can be used to run follow on capabilities across all x8664 and x86 nix operating systems. How it works The way this loader works is that it has all the code needed to build and load an ELF objec...

voltron

Voltron Voltron is an extensible debugger UI toolkit written in Python. It aims to improve the user experience of various debuggers LLDB, GDB, VDB and WinDbg by enabling the attachment of utility views that can retrieve and display data from the debugger host. By running these views in other TTYs...

TriforceLinuxSyscallFuzzer

TriforceLinuxSyscallFuzzer 20160613 https://github.com/nccgroup/TriforceLinuxSyscallFuzzer Jesse Hertz [email protected] Tim Newsham [email protected] New: For those looking to play with TriforceAFL and TLSF, Richard Johnson created a Dockerfile which installs both and even builds a Lin...

heaptrace

About heaptrace is a heap debugger for tracking glibc heap operations in ELF64 x8664 binaries. Its purpose is to help visualize heap operations when debugging binaries or doing heap pwn. replaces addresses with easy-to-understand symbols detects heap corruption and memory leakage issues can debug...

cve-2024-20017

cve-2024-20017 exploits NOTE: the x8664 exploits are unlikely to work out-of-the-box against a vanilla build of the wapp daemon as they were written against slightly modified versions of the code. Either way, you're probably unlikely to find this daemon running on x8664...

hackaday-u

Hackaday U - Introduction to Reverse Engineering with Ghidra This repository contains the exercises and resource materials for the Hackaday-U Course: Introduction to Reverse Engineering with Ghidra. The purpose of this course is to provide an overview of how to use Ghidra and how to reverse...

EvilVM

EvilVM EvilVM compiler for information security research tools. The project is built around a native code Forth compiler that is deployed as a position independent shellcode. It provides a platform for remote code execution, useful in information security contexts. NolaCon 2019 Presentation I...

android-kernel-exploitation

Android Kernel Exploitation Objective The objective of this workshop is to get started with kernel vulnerability analsysis and exploitation in Android platform. Usage Clone the repository git clone https://github.com/cloudfuzz/android-kernel-exploitation /workshop Github Pages URL...

shellcode

shellcode “A vulnerability provides an assembly language for a computer that has never been programmed before, and that was not designed with programmability in mind.” -- Halvar Flake A collection of new and old shellcode samples. Article https://hnsecurity.it/blog/new-and-old-shellcode-samples/...