All Projects → bnbdr → swisscheese

bnbdr / swisscheese

Licence: other
Exploits for YARA 3.7.1 & 3.8.1

Programming Languages

python
139335 projects - #7 most used programming language

Projects that are alternatives of or similar to swisscheese

DNS-Fender
A Proof-of-Concept tool utilizing open DNS resolvers to produce an amplification attack against web servers. Using Shodan APIs and native Linux commands, this tool is in development to cripple web servers using spoofed DNS recursive queries.
Stars: ✭ 47 (+80.77%)
Mutual labels:  poc
corona-sniffer
Contact Tracing BLE sniffer PoC
Stars: ✭ 75 (+188.46%)
Mutual labels:  poc
YaraSharp
C# wrapper around the Yara pattern matching library
Stars: ✭ 29 (+11.54%)
Mutual labels:  yara
CVE-2020-8597
CVE-2020-8597 pppd buffer overflow poc
Stars: ✭ 48 (+84.62%)
Mutual labels:  poc
foxy-miner
A scavenger / conqueror wrapper for collision free multi mining of PoC coins
Stars: ✭ 17 (-34.62%)
Mutual labels:  poc
ARL-NPoC
集漏洞验证和任务运行的一个框架
Stars: ✭ 73 (+180.77%)
Mutual labels:  poc
CVE-2020-0796-POC
CVE-2020-0796 Pre-Auth POC
Stars: ✭ 86 (+230.77%)
Mutual labels:  poc
PhishingKit-Yara-Search
Yara scan Phishing Kit's Zip archive(s)
Stars: ✭ 24 (-7.69%)
Mutual labels:  yara
CVE-2020-1611
Juniper Junos Space (CVE-2020-1611) (PoC)
Stars: ✭ 25 (-3.85%)
Mutual labels:  poc
detection
Detection in the form of Yara, Snort and ClamAV signatures.
Stars: ✭ 70 (+169.23%)
Mutual labels:  yara
1earn
ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup
Stars: ✭ 3,715 (+14188.46%)
Mutual labels:  poc
Hamster
Hamster是基于mitmproxy开发的异步被动扫描框架,基于http代理进行被动扫描,主要功能为重写数据包、签名、漏洞扫描、敏感参数收集等功能(开发中)。
Stars: ✭ 27 (+3.85%)
Mutual labels:  poc
Scripts-Sploits
A number of scripts POC's and problems solved as pentests move along.
Stars: ✭ 37 (+42.31%)
Mutual labels:  poc
Blueborne-CVE-2017-1000251
Blueborne CVE-2017-1000251 PoC for linux machines
Stars: ✭ 14 (-46.15%)
Mutual labels:  poc
fake-web-events
Creates a Simulation of Fake Web Events
Stars: ✭ 48 (+84.62%)
Mutual labels:  poc
exploits
Some personal exploits/pocs
Stars: ✭ 52 (+100%)
Mutual labels:  poc
mole
Yara powered NIDS with high speed packet capture powered by PF_RING
Stars: ✭ 51 (+96.15%)
Mutual labels:  yara
front-end-visual-comparison-tool
🔮🔬Front-End testing tool which can be used to create a side by side visual comparison between your live site and local site.
Stars: ✭ 16 (-38.46%)
Mutual labels:  poc
yara-validator
Validates yara rules and tries to repair the broken ones.
Stars: ✭ 37 (+42.31%)
Mutual labels:  yara
Exploits
A personal collection of Windows CVE I have turned in to exploit source, as well as a collection of payloads I've written to be used in conjunction with these exploits.
Stars: ✭ 75 (+188.46%)
Mutual labels:  poc

PoC YARA Exploits

  • 3.7.1 32 bit using CVE-2018-12034 and CVE-2018-12035 (write-up).
  • 3.8.1 32 bit using CVE-2018-19974, CVE-2018-19975 and CVE-2018-19976 (write-up)

YARASM Syntax Highlighting for VSCode

Install by copying yarasm-syntax folder to %USERPROFILE%\.vscode\extensions\

Usage

usage: build.py [-h] [-y YARA_ASM] [-v {3.8.1,3.7.1}] [-o OUTPUT]

optional arguments:
  -h, --help            show this help message and exit
  -y YARA_ASM, --yara-asm YARA_ASM
                        yara asm file, defaults to "extracheese.yarasm"
  -v {3.8.1,3.7.1}, --target-version {3.8.1,3.7.1}
                        yara version
  -o OUTPUT, --output OUTPUT
                        defaults to "extracheese.rule"
Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].