Posts

Showing posts with the label Binary

Mcextractor - Intel, Amd, Via & Freescale Microcode Extraction Tool

Image
Intel, AMD, VIA & Freescale Microcode Extraction Tool MC Extractor News Feed MC Extractor Discussion Topic Intel, AMD & VIA CPU Microcode Repositories A. About MC Extractor MC Extractor is a tool which parses Intel, AMD, VIA as well as Freescale processor microcode binaries. It tin sack live used yesteryear end-users who are looking for all relevant microcode information such equally CPUID, Platform, Version, Date, Release, Size, Checksum etc. It is capable of converting Intel microcode containers (dat, inc, h, txt) to binary images for BIOS integration, detecting new/unknown microcodes, checking microcode health, Updated/Outdated condition as well as more. MC Extractor tin sack live also used equally a query analysis tool amongst multiple structures which allow, amid others, total parsing & information display of all documented or non microcode Headers. Moreover, amongst the aid of its extensive database, MC Extractor is capable of uniquely categorizing all su...

Miasm - Contrary Applied Scientific Discipline Framework Inward Python

Image
Miasm is a gratis together with opened upward source (GPLv2) reverse engineering framework. Miasm aims to analyze / modify / generate binary programs. Here is a not exhaustive listing of features: Opening / modifying / generating PE / ELF 32 / 64 LE / BE using Elfesteem Assembling / Disassembling X86 / ARM / MIPS / SH4 / MSP430 Representing assembly semantic using intermediate language Emulating using JIT (dynamic code analysis, unpacking, ...) Expression simplification for automatic de-obfuscation ... See the official blog for to a greater extent than examples together with demos. Basic examples Assembling / Disassembling Import Miasm x86 architecture: >>> from miasm2.arch.x86.arch import mn_x86 >>> from miasm2.core.locationdb import LocationDB Get a place db: >>> loc_db = LocationDB() Assemble a line: >>> fifty = mn_x86.fromstring('XOR ECX, ECX', loc_db, 32) >>> impress fifty XOR ECX, ECX >...

Kbd-Audio - Tools For Capturing Together With Analysing Keyboard Input Paired Amongst Microphone Capture

Image
This is a collection of command-line together with GUI tools for capturing together with analyzing audio data. The most interesting tool is called keytap - it tin jurist pressed keyboard keys alone past times analyzing the well captured from the computer's microphone. Build instructions Dependencies: SDL2 - used to capture well together with to opened upward GUI windows libsdl FFTW3 - to a greater extent than or less of the helper tools perform Fourier transformations fftw Linux together with Mac OS git clone https://github.com/ggerganov/kbd-audio cd kbd-audio git submodule update --init mkdir construct && cd construct cmake .. make Windows (todo, PRs welcome) Tools record-full Record well to a raw binary file on disk Usage: ./record-full output.kbd play-full Playback a recording captured via the record-full tool Usage: ./play-full input.kbd record Record well alone spell typing. Useful for collecting preparation information for keyta...

Bincat - Binary Code Static Analyser, Amongst Ida Integration

Image
BinCAT is a static Binary Code Analysis Toolkit, designed to attention contrary engineers, straight from IDA. It features: value analysis (registers in addition to memory) taint analysis type reconstruction in addition to propagation backward in addition to forrad analysis use-after-free in addition to double-free detection In action You tin depository fiscal establishment check (an older version of) BinCAT inwards activeness here: Basic analysis Using information tainting Check the tutorial out to come across the corresponding tasks. Quick FAQ Supported host platforms: IDA plugin: all, version 6.9 or later (BinCAT uses PyQt, non PySide) analyzer (local or remote): Linux, Windows, macOS (maybe) Supported CPU for analysis (for now): x86-32 ARMv7 ARMv8 PowerPC Installation Only IDA v6.9 or subsequently (7 included) are supported Binary distribution install (recommended) The binary distribution includes everything needed: the analyzer the ID...

Autopwn - Automate Repetitive Tasks For Fuzzing

Image
Warning Completely re-writing this correct now. Focus volition live on on interactive Linux apps that entirely accept input from stdin for starters. Attempting to usage Shellphish's Driller in addition to Fuzzer functionality. autoPwn inwards it's electrical flow country volition practise this inwards express form. Simply run autoPwn ./binary in addition to then choose the Start option. Installing Given all the dependency issues here, the easiest means to larn autoPwn upwardly in addition to running is to usage the Docker build. Note, yous tin take the --security-opt in addition to --cap-add statement, but about fuzzing aspects mightiness non work. $ sudo docker push clit bannsec/autoPwn $ sudo docker run -it -v $PWD:/mount --security-opt="apparmor=unconfined" --cap-add=SYS_PTRACE bannsec/autoPwn In the Docker build, everything should live on gear upwardly to go. You tin but start upwardly the tool with: $ autoPwn ./file Compiling source for fuz...