mongobleed

mongobleed CVE-2025-14847 - MongoDB Unauthenticated Memory Leak Exploit A proof-of-concept exploit for the MongoDB zlib decompression vulnerability that allows unauthenticated attackers to leak sensitive server memory. Vulnerability A flaw in MongoDB's zlib message decompression returns the...

unblob

unblob Accurate, fast, and easy-to-use extraction suite for binary blobs. unblob parses unknown binary blobs for 78+ archive, compression, and file-system formats , extracts their content recursively, and carves out unknown chunks. It is the perfect companion for extracting, analyzing, and revers...

zipdefrag

This Dump Is A Puzzle or Advanced Shotgun Parsing for Fools and Rebels il était une fois Once upon a time, dear reader, on a dark and stormy night, your faithful author stumbled upon a perplexing and mysterious situation - a system where the only thing preventing chip off memory analysis and...

awesome-game-security

awesome-game-security If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. Show respect to all the projects below, perfect works of art 🫡 NeverC & NeverD — Your Compiler & Decoder for the AI Era As AI agents increasingly...

stegcloak

StegCloak The Cloak of Invisibility for your texts StegCloak is a pure JavaScript steganography module designed in functional programming style, to hide secrets inside text by compressing and encrypting the secret before cloaking it with special unicode invisible characters. It can be used to...

bkcrack

bkcrack Crack legacy zip encryption with Biham and Kocher's known plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypted with a password-based symmetric encryption algorithm referred to as...

libfsntfs

libfsntfs is a library to access the New Technology File System NTFS format. Project information: Status: experimental Licence: LGPL-3.0-or-later Read-only supported NTFS formats: NTFS version 3.0 NTFS version 3.1 Supported NTFS format features: LZNT1 compression Windows Overlay Filter WOF...

malduck

🦆 Malduck Installation ⚙️ | Docs 📚 Malduck is your ducky companion in malware analysis journeys. It is mostly based on Roach project, which derives many concepts from mlib library created by Maciej Kotowicz. The purpose of fork was to make Roach independent from Cuckoo Sandbox project, but still...

CVE-2026-96405

NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each individual domain-name operation but has no aggregate inbound decompression-work budget. Many chained compression pointers in a message results in a lot of CPU usage following them. A malicious act...

ScreenshotBOF

ScreenshotBOF An alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a fork & run. Screenshot downloaded in memory. Features JPEG compression In memory download as screenshot or as file Supports capturing of minimized windows Grayscale, JPEG quality and...

CVE-2026-96405 Aggregate DNS name chained pointer decompression work leads to degradation of service.

NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each individual domain-name operation but has no aggregate inbound decompression-work budget. Many chained compression pointers in a message results in a lot of CPU usage following them. A malicious act...

CVE-2026-96405

NLnet Labs Unbound versions up to and including 1.26.1 are vulnerable to a resource exhaustion issue. While the software limits compression-pointer traversal for individual domain-name operations, it lacks an aggregate inbound decompression-work budget . An attacker with recursive-query access an...

EUVD-2026-107153

NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each individual domain-name operation but has no aggregate inbound decompression-work budget. Many chained compression pointers in a message results in a lot of CPU usage following them. A malicious act...

rupture

Rupture Rupture is a framework for easily conducting BREACH and other compression-based attacks. Authors Rupture is developed by: Dimitris Karakostas [email protected] Dionysis Zindros [email protected] Eva Sarafianou [email protected] Dimitris Grigoriou [email protected] This...

libqcow

libqcow is a library to access the QEMU Copy-On-Write QCOW image file format. Project information: Status: alpha Licence: LGPL-3.0-or-later Read-only supported QCOW formats: version 1 version 2 version 3 Supported QCOW format features: zlib DEFLATE compression AES-CBC 128-bit encryption backing...

CVE-2020-0796-BOF

This is Raphael's tinkering around with the SMBGhost LPE. I started with the source code from the Metasploit Framework: cve-2020-0796: SMBv3 Compression Buffer Overflow SMBGhost CVE 2020-0796 https://github.com/rapid7/metasploit-framework/tree/master/external/source/exploits/CVE-2020-0796 BSD...

SMBGhost_RCE_PoC

SMBGhostRCEPoC RCE PoC for CVE-2020-0796 "SMBGhost" For demonstration purposes only! Only use this a reference. Seriously. This has not been tested outside of my lab environment. It was written quickly and needs some work to be more reliable. Sometimes you BSOD. Using this for any purpose other...

wBlock

wBlock The end of Safari ad-blocking B.S. A free, open-source ad blocker for Safari on Mac, iPhone, iPad, and Apple Vision Pro. Features · Screenshots · Install · How it works · FAQ · Support Features Blocking Up to 750,000 Safari rules across five content blockers, with recommended lists, region...

Microsoft-Windows-SMBGhost-Vulnerability-Checker---CVE-2020-0796---SMBv3-RCE

Microsoft Windows SMBGhost Vulnerability Checker - CVE-2020-0796 - SMBv3-RCE The scanner is for meant only for testing whether a server is vulnerable. It is not meant for research or development, hence the fixed payload. It checks for SMB dialect 3.1.1 and compression capability through a negotia...

Clematis

Clematis 中文 | English 🛠️ A powerful tool for converting PE files EXE/DLL into position-independent shellcode. ✨ Key Features Support for converting PE files EXE/DLL to shellcode Compatible with both x86 and x64 architectures Command-line argument support Built-in LZNT1 compression algorithm for...