All Projects → guitmz → gocave

guitmz / gocave

Licence: GPL-3.0 license
Finding code caves in ELF files with GoLang

Programming Languages

go
31211 projects - #10 most used programming language

Projects that are alternatives of or similar to gocave

Automated-Malware-Analysis-List
My personal Automated Malware Analysis Sandboxes and Services
Stars: ✭ 20 (-9.09%)
Mutual labels:  malware, elf
HatVenom
HatVenom is a HatSploit native powerful payload generation tool that provides support for all common platforms and architectures.
Stars: ✭ 84 (+281.82%)
Mutual labels:  malware, elf
Fe2O3
Simple prepender virus written in Rust
Stars: ✭ 84 (+281.82%)
Mutual labels:  malware, elf
Elfparser
Cross Platform ELF analysis
Stars: ✭ 228 (+936.36%)
Mutual labels:  malware, elf
ftrace
Simple Function calls tracer
Stars: ✭ 65 (+195.45%)
Mutual labels:  elf
memscrimper
Code for the DIMVA 2018 paper: "MemScrimper: Time- and Space-Efficient Storage of Malware Sandbox Memory Dumps"
Stars: ✭ 25 (+13.64%)
Mutual labels:  malware
macOS-Security-Updates
Notifies the user when macOS Security components like Gatekeeper and XProtect have been updated
Stars: ✭ 53 (+140.91%)
Mutual labels:  malware
Python-Keylogger
Python Tutorial - || Advanced Keylogger || Code Walk-through || Hacking/Info-Sec ||
Stars: ✭ 55 (+150%)
Mutual labels:  malware
golang-debugger-book
From a debugger's view, Let's explore the computer world! How does compiler, linker and debugger coordinate with each other around the program written in specific programming language? How does a debugger work? If we develop a debugger for go programming language, we must master go type system, runtime... and some Operating System internals. OK,…
Stars: ✭ 49 (+122.73%)
Mutual labels:  elf
cdetect
🔬 Detect which compiler and compiler version a Linux executable (in the ELF format) was compiled with
Stars: ✭ 23 (+4.55%)
Mutual labels:  elf
nsec-badge
Software from the NorthSec badge
Stars: ✭ 34 (+54.55%)
Mutual labels:  elf
The-MALWARE-Repo
A repository full of malware samples.
Stars: ✭ 380 (+1627.27%)
Mutual labels:  malware
ThreadBoat
Program Uses Thread Execution Hijacking To Inject Native Shell-code Into a Standard Win32 Application
Stars: ✭ 162 (+636.36%)
Mutual labels:  malware
cerberus research
Research tools for analysing Cerberus banking trojan.
Stars: ✭ 110 (+400%)
Mutual labels:  malware
hacking-resources
Hacking resources and cheat sheets. References, tools, scripts, tutorials, and other resources that help offensive and defensive security professionals.
Stars: ✭ 1,386 (+6200%)
Mutual labels:  malware
Quiescis
Quescis is a powerful Remote Access Trojan for windows 💻 on C++
Stars: ✭ 56 (+154.55%)
Mutual labels:  malware
Reverse-Engineering
A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit ARM & 64-bit ARM architectures.
Stars: ✭ 7,234 (+32781.82%)
Mutual labels:  malware
dynlib
IDA Pro plugin to aid PS4 user mode ELF reverse engineering.
Stars: ✭ 51 (+131.82%)
Mutual labels:  elf
OLEPackagerFormat
OLE Package Format Documentation
Stars: ✭ 18 (-18.18%)
Mutual labels:  malware
r2yara
r2yara - Module for Yara using radare2 information
Stars: ✭ 30 (+36.36%)
Mutual labels:  malware

Build Status

Go Report Card

gocave

Utility to find code caves in ELF files, written in Go.

Installation

You can either run go get -u github.com/guitmz/gocave or clone this repository and build with go build.

Usage

$ gocave elf_file cave_size

Or with Docker:

$ docker pull guitmz/gocave
$ docker run --rm -v elf_file:/elf_file guitmz/gocave /elf_file cave_size

Todo

  • Add payload injection and execution;
  • Add more binary types like Mach and PE.
  • ?

References

https://www.codeproject.com/Articles/20240/The-Beginners-Guide-to-Codecaves

https://github.com/Antonin-Deniau/cave_miner

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].