OffensiveNim

OffensiveNim My experiments in weaponizing Nim for implant development and general offensive operations. Table of Contents OffensiveNim Table of Contents Why Nim? Examples in this repo that work Examples that are a WIP Compiling the examples in this repo Easy Way Recommended Hard way For the bold...

RustTLSX

RustTLSX 🦀 . An advanced stealth HTTP client for Rust. Built for privacy-conscious developers who need complete control over their network fingerprint. Looks like a browser. Acts like a browser. Written in Rust. Credits & Foundation Built onbogdanfinn/tls-client - the industry-leading TLS...

Argos

Argos — Blockchain Asset Tracing Platform Argos is a multi-language blockchain investigation platform for tracing, analyzing, and visualizing fund flows on Ethereum and Bitcoin. Built with Rust, OCaml, and TypeScript/React. Architecture +-----------------------+ | Frontend React 19 | | Vite +...

OffensiveLua

Offensive Lua Offensive Lua is a comprehensive collection of offensive security and red team scripts written in Lua with FFI Foreign Function Interface. These scripts leverage the power and flexibility of LuaJIT on Microsoft Windows to perform advanced penetration testing and red teaming...

CVE-2026-118769

Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botanblockcipherblocksize converted a sizet block size to int without a bounds check. In an application that accepts external algorithm parameter strings and uses the FFI raw ECB mode, an attacker can select th...

EUVD-2026-113278

Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botanblockcipherblocksize converted a sizet block size to int without a bounds check. In an application that accepts external algorithm parameter strings and uses the FFI raw ECB mode, an attacker can select th...

CVE-2026-118769

The Botan C++ cryptography library (versions 2.1.0 through 3.13.0 ) contains an integer overflow vulnerability in the botan_block_cipher_block_size C API function. The function converts a size_t block size to an int without a bounds check. If an application accepts external algorithm parameters a...

CVE-2026-118769 Botan: Integer overflow when reporting block size in FFI can cause memory corruption

Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botanblockcipherblocksize converted a sizet block size to int without a bounds check. In an application that accepts external algorithm parameter strings and uses the FFI raw ECB mode, an attacker can select th...

CVE-2026-118769 Botan: Integer overflow when reporting block size in FFI can cause memory corruption

Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botanblockcipherblocksize converted a sizet block size to int without a bounds check. In an application that accepts external algorithm parameter strings and uses the FFI raw ECB mode, an attacker can select th...

lua-ffi-libinjection

Name lua-resty-libinjection - LuaJIT FFI bindings for libinjection Status This library is in active development and is production ready Description This library provides FFI bindings for libinjection, a SQL/SQLi and XSS tokenizer and analyzer. Installation Install this library as you would any...

bochscpu-python

bochscpu-python Python bindings for @yrp's BochsCPU using FFI to easily and accurately emulate x86 code. Install bochscpu-python requires a Python environment of 3.8 or more recent only. Via PyPI preferred By far the simplest way to get things up and running is using the stable packaged version o...

Use-after-free of caller-owned server name in client connection constructors

In rustls-ffi 0.12.0 through 0.15.6, rustlsclientconnectionnew and rustlsclientconnectionnewalpn retained a reference to the caller's servername buffer after returning, rather than copying it. The API documentation did not require the buffer to outlive the call and as a result if the caller freed...

rustls-ffi -- Read after free

The RusTLS project reports: functions retained a reference to the caller's servername buffer after returning, rather than copying it. The API documentation did not require the buffer to outlive the call and as a result if the caller freed or reused the buffer, later TLS processing read freed...

agnostik (>=0.2.0, <=0.2.3), aprun (0.2.0) +80 more potentially affected by unknown CVE via tokio (>=0.3.7, <=1.50.0)

tokio CARGO version =0.3.7, =0.2.0, =0.11.0, =0.5.0, =1.0.0, =0.4.0-beta.1, =0.2.0, =0.6.0, =0.4.0, =0.5.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0386...

lua-ffi-libinjection

Nome lua-resty-libinjection - Binding LuaJIT FFI per libinjection Stato Questa libreria è in sviluppo attivo ed è pronta per la produzione Descrizione Questa libreria fornisce binding FFI per libinjection, un tokenizer e analizzatore SQL/SQLi e XSS. Installazione Installa questa libreria come...

FreeBSD : RusTLS FFI -- plaintext TLS handshake vulnerability (ff969b25-b97b-11f1-b09d-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ff969b25-b97b-11f1-b09d-8447094a420f advisory. The RusTLS project reports: TLS 1.3 handshake message processing could allow a broken peer to send...

RusTLS FFI -- plaintext TLS handshake vulnerability

The RusTLS project reports: TLS 1.3 handshake message processing could allow a broken peer to send plaintext handshake messages where an encrypted one is expected without rustls rejecting the connection...

GO-2025-3678 vulnerabilities

Vulnerabilities for packages: ntpd-rs, tealdeer, zed, cargo-audit, wasmtime, linkerd-extension-init, nushell, xh, deno, lychee, pixi, sccache, uv, rustup, samply, wash, qdrant, buck2, zola, wasmcloud, wadm, sdp-k8s-injector, shadowsocks-rust, sqlx, parseable, oranda, kdash, rustls-ffi, wasm-pack,...

rscrypto v0.8.0

rscrypto rscrypto provides pure Rust cryptographic primitives, cryptographic and fast hashes, password hashing, and checksums behind one feature model. It has no production C/FFI, OpenSSL, or system-library dependency. Leaf features support narrow builds; umbrella features compose larger surfaces...

rscrypto v0.7.8

rscrypto rscrypto provides pure Rust cryptographic primitives, cryptographic and fast hashes, password hashing, and checksums behind one feature model. It has no production C/FFI, OpenSSL, or system-library dependency. Leaf features support narrow builds; umbrella features compose larger surfaces...