pbtk

pbtk - Reverse engineering Protobuf apps Protobuf is a serialization format developed by Google and used in an increasing number of Android, web, desktop and more applications. It consists of a language for declaring data structures , which is then compiled to code or another kind of structure...

social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

allthingsida

Sistema operacional MS Windows Scripts de enumeração de PEB/LDRDATATABLEENTRY Estruturas PEB/TEB x64 Estruturas PEB/TEB x86...

Crystal-Loaders

Crystal Loaders Este repositório contém alguns loaders PIC e um COFF sleepmask personalizado para uso com o Cobalt Strike. São implementações básicas onde tradecraft de evasão personalizada deve ser incorporada usando o Crystal Palace. Uso 1. Baixe a distribuição do Release do Crystal Palace. 2...

COM-Code-Helper

COM-Code-Helper Dois Scripts IDAPython ajudam você a reconstruir código do Microsoft COM Component Object Model Especialmente reversores de malware acharão isso útil, já que código COM ainda é encontrado regularmente em malwares. ClassAndInterfaceToNames.py Este script IDAPython escaneia um arqui...

CVE-2023-36900

CVE-2023-36900 Über diese Schwachstelle: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36900. Bericht Imhex-Muster für die .blf-Erweiterung Header mit Deklaration der CLFS-Strukturen Proof-of-Concept für Denial-of-Service Imhex pattern for blf extension Before: After: Das Muster...

CLPSTNet

CLPSTNet: Um modelo progressivo de esteganografia convolucional multi-escala que integra aprendizado curricular Fengchun Liu; Tong Zhang; Chunying Zhang Este repositório contém a implementação oficial do artigo "CLPSTNet: Um modelo progressivo de esteganografia convolucional multi-escala que...

CVE-2026-107678

A flaw was found in FFmpeg. This vulnerability allows an attacker to cause a Denial of Service DoS by providing a specially crafted MP4 media file containing an excessive number of encryption metadata structures. When the application recursively frees these structures, it exhausts available stack...

DriverBuddy

Quickstart Instruções de Instalação do DriverBuddy 1. Copie a pasta DriverBuddy e o arquivo DriverBuddy.py para a pasta de plugins do IDA C:\Program Files x86\IDA 6.8\plugins ou onde você instalou o IDA Instruções de Uso do DriverBuddy 1. Inicie o IDA e abra um driver de kernel do Windows 2. Vá e...

cve-2024-23113-poc

CVE-2024-23113-poc CVE-2024-23113 é uma vulnerabilidade encontrada no Linux Kernel , classificada como vulnerabilidade de execução arbitrária de código , que afeta o subsistema bpf Berkeley Packet Filter. Especificamente, essa vulnerabilidade afeta objetos do tipo bpfprog de programas bpf e pode...

CVE-2026-20805-PoC

CVE-2026-20805 PoC Prova de Conceito demonstrando uma vulnerabilidade de divulgação de informações no Gerenciador de Janelas da Área de Trabalho da Microsoft dwm.exe. Visão Geral Este repositório contém uma Prova de Conceito PoC personalizada desenvolvida para reproduzir a CVE-2026-20805, uma...

DCVD

project/ ├── train.py ├── dataloader.py ├── README.md ├── requirements.txt ├── models/ │ ├── controlpathway.py │ ├── semanticpathway.py │ ├── featurefusionmodule.py │ ├── transformerllmmodule.py │ └── multitaskpredictor.py Fontes de Dados e Modelos Conjunto de Dados Usamos o conjunto de dados...

HDI-GraphRAG-Attack

Influência Decaída por Saltos: Novas Vulnerabilidades da Indexação Auxiliar Estrutural em Pipelines GraphRAG com LLM Jisung Park, John Le, Heath Cooper Institute of Cybersecurity and Cryptology iC², University of Wollongong IFIP SEC 2026 jspacific0307/HDI-graphragpipeline...

Linux-Kernel-Copy-Fail-CVE-2026-31431-

Analyse und Übung zur Sicherheitslücke Copy Fail CVE-2026-31431 Dieses Projekt analysiert die Funktionsweise der Linux-Kernel-Sicherheitslücke Copy Fail CVE-2026-31431 und vergleicht den Zustand vor und nach dem Patch mit Hilfe des nicht-destruktiven Checkers aus dem öffentlichen PoC-Repository. ...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Updated the intermediate power state for SI. Updated the current state to the boot state during dpm initialization. During subsequent initialization, setpowerstate is called to transition to the final power state...

Astra Linux – Vulnerability in pyasn1

pyasn1 is a generic ASN.1 library for Python. Prior to version 0.6.3, the pyasn1 library was vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion during the decoding of ASN.1 data with deeply nested structures. An attacker could provide a crafted payload containing...

CVE-2026-97876

A flaw was found in GRUB2. The bootloader insufficiently validates memory addresses passed to the serial configuration command, allowing arbitrary system memory to be targeted instead of a legitimate serial communication device. A local attacker with control over GRUB's boot configuration can...

ROS-20261002-73-0031

The vulnerability of the EXTRACT function in the PostgreSQL database management system is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

ROS-20261002-73-0033

The vulnerability of the EXTRACT function in the PostgreSQL database management system is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

CentOS Linux 7 [TuxCare] Security Update: freetype / freetype-demos / freetype-devel (CENTOS7:CLSA-2025:1742926404)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1742926404 advisory. - An out of bounds write exists in FreeType versions 2.13.0 and below newer versions of FreeType are not vulnerable when attempting to parse font...