hi, this is my new research repo, support pls

Hey all,

If you ever used SourceTrail or Understand to audit a large code base (C/C++) you’ll find this tool to be an impressive successor. It’s specifically tailored for Vulnerability Research.

Its core features include:

1. Visualization of code flow, and data structures.

2. Vulnerability detection via exist static analysis tools like semgrep which SrcWranglr will generate semgrep rules specific to your code base.

3. Semantic function code matching.

4. Automatically identify functions worth fuzzing and generate the harness.

5. Reaching analysis and path finding (source/sink) checking.

6. Triage all IPC components in use.

7. Query git repo for security related comments

8. See any currently existing CVEs for the project. For variant analysis.

9. Awesome UI with Ctrl+p commands

10. A TODO and Journal so you can keep track of what you did each session. Mark what needs triaging and prioritizing; analyze the components you find most interesting.

Just yesterday using my latest release, I found and generated PoC for two projects in just a couple of hours. I let the maintainers know (privately) I don’t disclose publicly as my employers generally forbid it. I don’t agree with CVE system either (that a rant for another day)

Anyhow the tool is free, easy to install.. For best results install the static analyzers: semgrep, flawfinder, cppcheck.

Please any feedback or if you’d like to contribute, let me know!

Coming soon:

* I am working on integrating an AI like GLM with an MCP. It would be a super nice harness for it.

* Provide auto-install for the static analyzer utilities that are compatible.

AI Disclosure Statement

I wrote this tool quite some time ago because I found SourceTrail Lacking . It was prototyped in Python over the years (circa 2016) and painfully slow so I thought porting it to Rust would be a good idea to help me finally learn Rust despite my hate for it… Core code is hand written; though checked and improved with in chat mode . AI was heavily used for the GUI development however, as it’s something I despise doing and my UX/UI are always ugly as hell…

Wrote up part 4 of my shellcode series. This one focuses on the ABI mechanics that cause the most silent crashes in practice.

The interesting part is the stack alignment problem specific to shellcode: and rsp, 0xFFFFFFFFFFFFFFF0 is the standard first instruction, but if you don't save RSP to RBP first, the ret in your epilogue loads zero into RIP. The fix is straightforward once you understand what's happening, but the failure mode is subtle enough that it's worth a dedicated section.

Covers:

- Microsoft x64 calling convention and shadow space mechanics

- Why the callee owns shadow space (and what breaks when you forget)

- Stack alignment in shellcode vs. regular PE code

- Full calc.exe shellcode via WinExec with PEB traversal + ROR13

- WinDbg walkthrough of PEB -> Ldr -> export directory -> stack layout

Do you own a TP-Link Archer A20 ? There was a cve assigned in 2023 on this EOL device because the country parm was passed to exec function and allowed cmd injection. These routers run httpd as root... for successful exploitation..the result? a root shell.

The other day I rooted this router via UART port and used nc to dump the bins from the router onto my laptop and started to analyze them with ghidra. I started to see system() and noticed the country was in the system field, I said hmmmmmm .. it wasnt until I was half way done that I realized this exact trace was discovered a few years back. I still continued with the exploit because I learned while I did it and it was fun. I taught myself all of this... Im looking for work. Thanks for reading. https://github.com/b1nv0id/iothacking/blob/main/archv0id.py

SCTP is not the transport most engineers meet every day. It sits beside TCP and UDP at the transport layer, but its natural habitat is signalling infrastructure: Diameter, SIGTRAN/M3UA, LTE S1AP, 5G NGAP, and a smaller population of industrial and carrier gateways. It is message-oriented, supports multiple streams within one association, and can use multiple network paths. Those properties are exactly why it appears in systems where availability matters.

hey there guys iam learning assembly form the pwn.college and iam in the 39 percent . recently i bought the course from the maldev academy right so iam confused should i first finish pwn.college and go to the maldev or should i just leave assembly and go to the maldev first iam confused . i guess i should be finish pwn.college first then go to maldev . what do you guys think?

BadCharHunter automates the bad-character detection process for Windows exploit development — from sending byte sets and detecting corruption to restarting the target and re-attaching the debugger.

Hello everyone, I hope your days are going well!

I'm currently learning C via "C Programming: A Modern Approach". The book itself is very informative, however I feel as if I am spending a lot of time on the exercises and programming projects. For example, I'm on the "Arrays" chapter, and it's taking me closer to 2 weeks to try and do every exercise and project. Would it be wise to continue doing this? Is this even the right way to go about it? I'm wanting to get into reverse engineering, and ethical Linux exploit development/vulnerability analysis. Basically red-team stuff, so I figured that doing this would be very beneficial in the long run.

One friend of mine told me it is worth it to take it slow, so that you can really understand how software works, and all the quirks/vulnerabilities that might be present. He said this will be useful once I get into writing and understanding how doubly linked lists work, since the Windows kernel uses a lot of them. Another said that I should only do a few projects so I can get to writing projects as soon as I can.

Which lane should I be prioritizing?

Hi,

I am little lazy, as I am a researcher for my professor.

He gave me a task, to analyse several .py and .go files from his students and give a report back

Sadly the submissions are getting more and more, now I am at a point, where I need AI to automate the process :(

Is GLM 5.3 really that "uncensored" compared to the US models such as Claude code or codex?

I only tried out a free trial from a random hoster, who offered GLM 5.3 flash and wow. I was astonished how well it worked, but obviously after one prompt I had to wait another 24h lol

If anyone could tell me a lil more would be amazing

I received my degree in Computer Science in 1981 and worked in that profession until retirement a few years ago. I have experience in many programming languages and applications, mostly in the scientific arena. Let me state up from that I have no interest in pursuing “hacking” but I seek on this forum a design discussion for a hypothetical problem which I will now present:

1. Consider the existence of an application running on Windows 10. Let’s call this the target application .

2. This application has two memory resident variables (A and B) which are independently incremented repeatedly over time. Expect that when either variable is incremented then the other is not. The specifications on when and why this action occurs is not relevant.

3. Assume that periodically the value of both variables is written to persistent storage.

4. The increment of variables A and B is independent of the persistent storage action. Both occur repeatedly over time.

5. Assume this application to be written in Java and that prior to your design, you have access to the source code or binary for evaluation as needed.

Given only above information on the target application, propose a “virus” design paradigm and code that accomplishes the following:

1. Attach to the application whenever it enters a run-state.

2. Whenever the application decides to write the two memory values to persistent storage, interject the “virus” to subtract a value of one from variable A and then immediately add one to variable B; then release control back to the target application so that it may complete its persistence action.

3. The virus does not perform any file writing but merely modifies the values of variables A and B as the penultimate action prior to the persistence.

As I have stated, I have no experience in doing this kink of code nor do I intend to do so but my guess is that it could be done if the virus has access to the memory of the target application and also if the virus can interject its control by stealing the file-write interrupt request.

In context of malware dev, I searched about this but to be fair I can't understand so maybe you have some places or something else which would help me with learning this

And I wanted to ask, does it still work on Windows defender home edition?

(I know C, win32api and i can learn assembly if needed)

Guys I’m having a full circle moment now I’ve been passionate for IT or computers in general since I was essentially 7 years old where I was given my own first laptop and a good ol windows vista/7 days. I was a gamer during my childhood playing Roblox etc. I used to mess about with cheat engine IDA pro etc playing around with exploits.

Then essentially life took over with secondary school and college now I’m 24 I’ve done my Bachelors of science obtaining first class honours (highest) grading in computer science. And my fire has returned or was always there especially when it comes to cybersecurity now which I’ve set my sights on.

Now I have two options as my career roles I want to ponder into and it’s either malware analyst or a SOC analyst to eventually become an Incident Responder and I need your help. What would be the best way for someone like me with little experience and only a bachelors cause I know it’s not enough but I’m working on home labs to add to my CV and what certifications would you recommend me doing ?

A few days ago, I posted an early version of my open-source pentest tool. I received some great feedback, so I went back to the drawing board and completely rewrote the architecture.

TànPhá Framework V3 is now live!

I built this specifically for bug hunters and security researchers who are limited to mobile devices (Termux on Android) or lightweight Linux environments. It doesn't require a high-end laptop to run.

🚀 What's New in V3?

Auto Assessment Engine: Migrated to a state-machine architecture to handle Discovery, Fingerprinting, and Validation automatically.

New Modules: Added LFI (with \`php://filter\` support) and PHP2Shell (a stateful RAT with file upload/download).

Auto Login Engine: Automatically detects and bypasses CSRF tokens to scan authenticated pages.

Global Ready: 100% English native codebase, prompts, and outputs.

JSON Reporting: Auto-saves findings to the \`reports/\` directory.

⚠️ Honest Limitations (Let's be real)

WAF Bypass: Currently only supports basic evasion (Level 1). Advanced evasion (Chunked encoding, Origin IP) is planned for V4.

DVWA High: The SQLi engine works perfectly on Low/Medium, but struggles with High (due to stateful session inputs). That's on the V4 roadmap!

🗺️ What's Next? (V4 Roadmap)

This project is actively maintained. Here is what I'm planning to build next:

Advanced WAF Evasion: Level 2 (Chunked Encoding) & Level 3 (Origin IP Discovery).

New Modules: XSS, SSRF, and Subdomain Enumeration.

Headless Mode: CLI arguments (\`python main.py -u target -m sqli\`) for CI/CD automation.

HTML/PDF Reporting: Generate client-ready reports.

Let me know in the comments if you want a specific feature added to the roadmap!

Note: This tool is for educational purposes and authorized testing only. Please use it responsibly.

I'd love to hear your feedback, bug reports, or feature requests. If you find it useful, a star on GitHub would mean a lot! ⭐

GitHub Link: https://github.com/exelumare/T-nPh--framework

hey there everybody i tired the pwn.college computing 101 dojo but the professor there on the youtube video is making no sense to me i mean i cannot understand what he is trying to say so i think i will feed the slide to the ai and will tell the ai to explain me the concepts is this the good approach or you guys suggest something else... iam so frustatred while learning assembly i can't describe it .

Guys please give me the best resources to learn assembly please