1216 matches found
Cronos
Cronos This project was co-authored by Description PoC for a new sleep obfuscation technique based on Ekko leveraging waitable timers to RC4 encrypt the current process and change the permissions from RW to RX to evade memory scanners. A more detailed explanation will be available in the blog pos...
kavanoz
🫙 kavanoz 🫙 Kavanoz jar in turkish is a tool to statically unpack common android banker malware. Do you ever wanted to get payload from packed malware without running android emulator ? Me neither : But here is a tool anyway. 👀 Installation pip install kavanoz To install from source, clone the...
Christmas
Maldev Academy Maldev Academy Home Maldev Academy Syllabus Christmas Implementing an injection method mentioned by @Hexacorn. This PoC creates multiple processes, where each process performs a specific task as part of the injection operation. Each child process will spawn another process and pass...
ThunderShell
ThunderShell ThunderShell is a C RAT that communicates via HTTP requests. All the network traffic is encrypted using a second layer of RC4 to avoid SSL interception and defeat network detection on the target system. RC4 is a weak cipher and is used to help obfuscate the traffic. HTTPS options...
Ivy
THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of Ivy or to submit an issue, reference https://github.com/Tylous/Ivy. More Information If you want to learn more about the techniques utilized in this framework as well as the defensive measure to help defend against it, please take a...
cve-2026-20833-rc4-kerberos
CVE-2026-20833 — Усиление безопасности Kerberos RC4 Этот репозиторий объединяет техническую документацию , PowerShell-скрипты , панели мониторинга Power BI и официальные ссылки на Microsoft , связанные с поэтапным отказом от RC4 в Kerberos для сред Active Directory , в рамках изменений безопаснос...
cart
CaRT Compressed and RC4 Transport The CaRT file format is used to store/transfer malware and its associated metadata. It neuters the malware so it cannot be executed and encrypts it so anti-virus software cannot flag the CaRT file as malware. Advantages FAST: CaRT is just as fast as zipping a fil...
CVE-2014-0224
Демонстрация MITM-эксплойта для OPENSSL CVE-2014-0224. Автор : @bluerust Блог : http://hi.baidu.com/bluerust/item/bf2ab031bbadcf09cfb9fe41 Версия : 1.1 Описание : Только для openssl 1.0.1, протестировано только для шифра RC4-SHA. a. сервер openssl sserver -debug -accept 443 -cert server.crt...
Rocky Linux 9 [CIQ] Security Update: krb5-debuginfo / krb5-debugsource / krb5-devel / krb5-libs / etc (crlsa-2025_9430)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20259430 advisory. krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions CVE-2025-3576 Tenable has extracted the preceding description block...
Rocky Linux 8 [CIQ] Security Update: krb5-debuginfo / krb5-debugsource / krb5-devel / etc (crlsa-2025_8411)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20258411 advisory. krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions CVE-2025-3576 Tenable has extracted the preceding description block...
Rocky Linux 9 [CIQ] Security Update: ctdb / ctdb-debuginfo / libsmbclient / libsmbclient-debuginfo / etc (crlsa-2023_2127)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20232127 advisory. samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided CVE-2022-38023 Tenable has extracted the preceding description block directly from the CIQ...
CentOS Linux 8.5 [TuxCare] Security Update: krb5-devel / krb5-libs / krb5-pkinit / krb5-server / libkadm5 (CENTOS8.5:CLSA-2025:1751895517)
The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2025:1751895517 advisory. - A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in t...
Rocky Linux 10.0 [CIQ] Security Update: krb5-debuginfo / krb5-debugsource / krb5-devel / krb5-libs / etc (crlsa-2025_9418)
The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20259418 advisory. krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions CVE-2025-3576 Tenable has extracted the preceding description blo...
Rocky Linux 8 [CIQ] Security Update: ctdb / ctdb-debuginfo / libsmbclient / libsmbclient-debuginfo / etc (crlsa-2023_0838)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20230838 advisory. samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided CVE-2022-38023 Tenable has extracted the preceding description block directly from the CIQ...
AlmaLinux 9.2 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl (ALMALINUX9.2:CLSA-2024:1709548308)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1709548308 advisory. - Issue summary: A bug has been identified in the processing of key and initialisation vector IV lengths. This can lead to potential truncati...
Malicious code in contoso-login-sim-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062ce76699c91a883d24e3ad609bb04faa3f52cbeaecfb24c1c3bcde8b496a5c Package ships a single 138 KB browser script whose entire body is an RC4-encrypted base64 blob decoded at runtime by an inline RC4 routine zc with a...
AlmaLinux 9.2 [TuxCare] Security Update: krb5-devel / krb5-libs / krb5-pkinit / krb5-server / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1756110212)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1756110212 advisory. - In MIT Kerberos 5 aka krb5 before 1.22 with incremental propagation, there is an integer overflow for a large update size to resiz...
CentOS Linux 8.4 [TuxCare] Security Update: krb5-devel / krb5-libs / krb5-pkinit / krb5-server / libkadm5 (CENTOS8.4:CLSA-2025:1751892444)
The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2025:1751892444 advisory. - A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in t...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: c-ares (UTSA-2023-002302)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002302 advisory. c-ares is an asynchronous resolver library. When /dev/urandom or RtlGenRandom are unavailable, c-ares uses rand to generate random numbers used for DNS query ids. Th...
