BinSkim Binary Analyzer.
BinSkim is a checker that examines Portable Executable (PE) files and their associated Program Database File Formats (PDB) to identify various security problems. These include: * Use of Outdated...
View ArticleReverset is a reverse engineering and binary analysis tool.
Reverset is a lightweight portable reverse engineering and binary analysis tool. Currently supports the entire standard x86 instruction set, with coming support for x87 fpu, avx, and sse instructions....
View ArticleASLRay – Linux ELF x32/x64 ASLR DEP/NX bypass exploits with stack-spraying.
ASLRay is a Linux ELF x32/x64 ASLR DEP/NX bypass exploit with stack-spraying. Properties: + ASLR bypass + DEP/NX bypass + Cross-platform + Minimalistic + Simplicity + Unpatchable Dependencies: – Linux...
View Articleretrace is a versatile security vulnerability/bug discovery tool.
retrace is a versatile security vulnerability / bug discovery tool through monitoring and modifying the behavior of compiled binaries on Linux, OpenBSD/FreeBSD/NetBSD (shared object) and macOS (dynamic...
View Articlecrop – C-style language ROP Compiler for CFI-hardened system attacks.
crop is a simple compiler for ROP gadgets. Will be optimized for CFI-based attacks. Dependencies: + Python 2.7.x + Elf Binary + NASM Todo: + creating the smallest x86 ELF binary that would execute...
View ArticleThe Backdoor Factory (BDF) v3.4.2 – Patch PE, ELF, Mach-O binaries with...
NOTICE: For security professionals and researchers only. Changelog The Backdoor Factory (BDF)v3.4.2 1/11/2017: * fix entry point instruction trucation (rare) and copyright updates. BDFactory v3.4.0...
View Articleradare2 v1.1.0 codename: preccc – reverse engineering framework and...
Changelog radare2 v1.1.0 19/12/2016: * New commands: + fla to automatically compute the size of all flags matching glob + pdC to show comments found in N instructions + pir is like ‘pdr’ but with ‘pI’...
View Articleradare2 v0.10.6 codename: Sleepy Autumn – unix-like reverse engineering...
Changelog radare2 0.10.6 codename Sleepy Autumn: Commands * Implement oom to reopen file in malloc:// * Add zs as an alias for z/ * Implement zo command * Rename command Vvm to Vvr * Implement...
View Articleelfshell is a GNU program used to extract shellcodes from ELF binary files.
elfshell is a GNU program used to extract shellcodes from ELF binary files. that helps exploiting ELF binary files & helps security guys to extract machine executable code, from diffrent parts of...
View ArticleMsfvenom Payload Creator (MPC) v-1.4.3.
Changelog v1.4.3 : + mpc.sh: Removes the use of IPv6 when in the IP selection menu, as it’s not yet supported. Msfvenom Payload Creator (MPC) is a wrapper to generate multiple types of payloads, based...
View ArticleThe Backdoor Factory (BDF) v3.4.0 – Patch PE, ELF, Mach-O binaries with...
Changelog v3.4.0 6/19/2016: + Added the preprocessor and other optimizations + The preprocessor allows the user to modify the binary prior to payload injection + Invoke with the -p flag + See samples...
View ArticlePeach Fuzz – Vulnerability Scanning Framework.
This tool aims to look through files in a given directory to detect any unsafe, vulnerable, or dangerous function calls. It is designed to be extensible and easy to understand; you can “plug-and-play”...
View Articleradare2 v0.10.1 Codename: solid chair society released.
changelog v0.10.1 Codename: solid chair society: + Variables and flags can now be renamed in cursor mode asciinema + Optimized GDB connectivity, now its 10x faster! + print signed base 10 hexdumps with...
View ArticleMsfvenom Payload Creator (MPC) v-1.4.2.
Changelog v1.4.2 : Now works with Kali-Linux rolling (Note from US: this script work fine at Ubuntu 12-15 & Metaspoit). mpc v1-4-2 Msfvenom Payload Creator (MPC) is a wrapper to generate multiple...
View ArticleMsfvenom Payload Creator (MPC) v-1.4.1.
Changelog v1.4.1 : Supports non-root users & non english OSs. MPC-v1-4-1quick way to generate various “basic” Meterpreter payloads via msfvenom (part of the Metasploit framework). Msfvenom Payload...
View ArticleThe Backdoor Factory (BDF) v-3.3.0 – Patch PE, ELF, Mach-O binaries with...
Changelog v3.3.0: + Added PE codesiging support. You must provide your own codesigning cert. You can see full disclosure how to Add PE Code Signing to Backdoor Factory (BDF). BDFactory-v-3-3-0Test Run...
View ArticleThe Backdoor Factory (BDF) v-3.2.3 released : Patch PE, ELF, Mach-O binaries...
NOTICE: For security professionals and researchers only. Changelog 11/13/2015 v2.3.2: – proper removeal of PE Sig resulting in better IAT patching – pebin.py : proper truncation of unsigned PE –...
View ArticleBinary is a Sample codes for assembly, linker and attack.
Binary is a Sample codes for assembly, linker and attack demos Rule *.asm is NASM source code file *.s is GNU Assembly (i.e., GAS) source code file *.nasm.o is NASM object file *.gas.o is GAS object...
View ArticleSimple Rootkit written in C.
Basic Knowledge : A rootkit is a collection of computer software, typically malicious, designed to enable access to a computer or areas of its software that would not otherwise be allowed (for example,...
View ArticleThe Backdoor Factory (BDF) v-3.2.0 released : Patch PE, ELF, Mach-O binaries...
NOTICE: For security professionals and researchers only. Changelog 10/14/2015: + Import Directory Table patching into code cave support The goal of BDF is to patch executable binaries with user desired...
View Article