PRINT
PRINT
SEND MAIL
SEND MAIL

Category: Reverse Engineering

Windows10

Black Window 10 v2

  Black Window Enterprise 10 Codename : Polemos Black Window 10 Enterprise is the first windows based penetration testing distribution with Linux integrated ! The system comes activated with a digital license for Windows enterprise! It supports windows apps and Linux apps, GUI and terminal apps! It comes with a tone off hacking tools plus all the tools that are included with the latest release of Cerberus Linux! It has managed to implement Cerberus os within windows. Offers the stability of a windows system…

Binary AnalysisBinary TranslationInstruction SemanticsNEW TOOLSProgram AnalysisReverse EngineeringSymbolic ExecutionTaint Analysisx86

Triton – Dynamic Binary Analysis (DBA) Framework

Triton is a dynamic binary analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a Taint engine, AST representations of the x86 and the x86-64 instructions set semantics, SMT simplification passes, an SMT Solver Interface and, the last but not least, Python bindings.Based on these components, you are able to build program analysis tools, automate reverse engineering and perform software verification. As Triton is still a young project, please, don't blame us if it is not yet reliable. Open…

Cloud pentestingComputer ForensicCryptographyDistroNEW TOOLSParrot Security OSPrivacy/AnonimityReverse Engineering

Parrot Security 4.4 – Security GNU/Linux Distribution Designed with Cloud Pentesting and IoT Security in Mind

Parrot 4.4 is now available for download. This release provides security and stability updates and is the starting point for the plan to develop an LTS edition of Parrot. Parrot 4.4 Development GoalsThe Parrot 4.4 development process involved the ideas of many people in the community, and the goal of this new update was mainly to target software developers and increase average system stability.Upgrade from a previous versionsudo parrot-upgradeorsudo apt updatesudo apt full-upgradeDebian Testing stability statusParrot is based on Debian Testing, which is now entering…

ARMAssemblerDisassemblerELFEmulatorIntermediate RepresentationMiasmMIPSNEW TOOLSReverse EngineeringShellcodesSymbolic Execution

Miasm – Reverse Engineering Framework In Python

Miasm is a free and open source (GPLv2) reverse engineering framework. Miasm aims to analyze / modify / generate binary programs. Here is a non exhaustive list of features:Opening / modifying / generating PE / ELF 32 / 64 LE / BE using ElfesteemAssembling / Disassembling X86 / ARM / MIPS / SH4 / MSP430Representing assembly semantic using intermediate languageEmulating using JIT (dynamic code analysis, unpacking, ...)Expression simplification for automatic de-obfuscation...See the official blog for more examples and demos.Basic examplesAssembling / DisassemblingImport Miasm x86…

Cloud pentestingComputer ForensicCryptographyDistroNEW TOOLSParrot Security OSPrivacy/AnonimityReverse Engineering

Parrot Security 4.3 – Security GNU/Linux Distribution Designed with Cloud Pentesting and IoT Security in Mind

Parrot 4.3 is now available for download. This release provides security and stability updates and is the starting point for the plan to develop an LTS edition of Parrot.Linux 4.18Linux was updated to the 4.18.10 version, and linux 4.19 will be released soon.Firefox 63Firefox 63 provides noticeable security and privacy features, but it is no longer available to 32bit systems, so has been switched to firefox-esr on all the unsupported architectures.Wine menuHas been fixed a bug in the parrot menu configuration that prevented several menu…

Cloud pentestingComputer ForensicCryptographyDistroNEW TOOLSParrot Security OSPrivacy/AnonimityReverse Engineering

Parrot Security 4.2.2 – Security GNU/Linux Distribution Designed with Cloud Pentesting and IoT Security in Mind

Updated kernel and core packagesParrot 4.2 is powered by the latest Linux 4.18 debianized kernel with all the usual wireless patches.A new version of the Debian-Installer now powers our netinstall images and the standard Parrot images.Firmware packages were updated to add broader hardware support, including wireless devices and AMD vega graphics.AppArmor and Firejail profiles were adjusted to offer a good compromise of security and usability for most of the desktop and CLI applications and services.Important destkop updatesParrot 4.2 now provides the latest libreoffice 6.1…

Anti-DebuggingAPI TraceBSDC++DrltraceMalware AnalysisMalware DetectionNEW TOOLSPackersProcessesReverse EngineeringYara

Drltrace – A Library Calls Tracer For Windows And Linux Applications

Drltrace is a dynamic API calls tracer for Windows and Linux applications designed primarily for malware analysis. Drltrace is built on top of DynamoRIO dynamic binary instrumentation framework. The release build can be downloaded here.UsageThe usage of drltrace is very simple. A user needs to specify a log directory and a name of a target process in the following way:drltrace -logdir . -- calc.exeThat’s all, the tool will inject required DLLs in the target process, starts instrumentation and in parallel will log information about…

Apk filesCommon VulnerabilitiesjavaNEW TOOLSReverse EngineerReverse EngineeringReverseAPK

ReverseAPK – Quickly Analyze And Reverse Engineer Android Packages

Quickly analyze and reverse engineer Android applications.FEATURES:Displays all extracted files for easy referenceAutomatically decompile APK files to Java and Smali formatAnalyze AndroidManifest.xml for common vulnerabilities and behaviorStatic source code analysis for common vulnerabilities and behaviorDevice infoIntentsCommand executionSQLite referencesLogging referencesContent providersBroadcast recieversService referencesFile referencesCrypto referencesHardcoded secretsURL'sNetwork connectionsSSL referencesWebView referencesINSTALL:./installUSAGE:reverse-apk <apk_name>Download ReverseAPK

Cloud pentestingComputer ForensicCryptographyDistroNEW TOOLSParrot Security OSPrivacy/AnonimityReverse Engineering

Parrot Security 4.0 – Security GNU/Linux Distribution Designed with Cloud Pentesting and IoT Security in Mind

Parrot 4.0 is now available for download. The development process of this version required a lot of time, and many important updates make this release an important milestone in the history of our project.This release includes all the updated packages and bug fixes released since the last version (3.11), and it marks the end of the development and testing process of many new features experimented in the previous releases since Parrot 3.9.Experimental Netinstall ImagesNetinstall images are a powerful tool to install only the bare…

Binary ExploitationCapstoneDisassembly FrameworkELFMach-oMIPSNEW TOOLSPEReverse EngineeringROPRop ExploitationRop GadgetsROPgadget

ROPgadget – This Tool Lets You Search Your Gadgets On Your Binaries To Facilitate Your ROP Exploitation

This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF/PE/Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC and MIPS architectures. Since the version 5, ROPgadget has a new core which is written in Python using Capstone disassembly framework for the gadgets search engine - The older version can be found in the Archives directory but it will not be maintained.InstallIf you want to use ROPgadget, you have to install Capstone first.For the Capstone's installation on…