Shelter

Shelter Shelter is a completely weaponized sleep obfuscation technique that allows to fully encrypt your in-memory payload making an extensive use of ROP. This crate comes with the following characteristics: AES-128 encryption. Whole PE encryption capability. Removal of execution permission durin...

Python Security Project

🔐 Desktop Cryptographic File Encryption & Decryption Tool A production-grade Python desktop security utility designed to protect local filesystem assets through authenticated symmetric encryption. This application features a responsive graphical user interface GUI built with Tkinter, an independe...

Huan

Huan Huan is an encrypted PE Loader Generator that I developed for learning PE file structure and PE loading processes. It encrypts the PE file to be run with different keys each time and embeds it in a new section of the loader binary. Currently, it works on 64 bit PE files. How It Works? First,...

mellon

OSDP Vulnerabilities this Exploits OSDP attack tool and the Elvish word for friend Attack 1: Encryption is Optional OSDP supports, but doesn't strictly require , encryption. So your connection might not even be encrypted at all. Attack 1 is just to passively listen and see if you can read the car...

sbox

sbox - Compile-time AES string obfuscation for C++ Standard solutions rely on length + "" + string. That is trivial to reverse. sbox utilizes a constexpr AES-128 block cipher to mutate strings into high-entropy noise. The Story During the Neetcode "Encode and Decode Strings" challenge, I ported t...

udp2raw

Udp2raw-tunnel A Tunnel which turns UDP Traffic into Encrypted FakeTCP/UDP/ICMP Traffic by using Raw Socket, helps you Bypass UDP FireWallsor Unstable UDP Environment. When used alone,udp2raw tunnels only UDP traffic. Nevertheless,if you used udp2raw + any UDP-based VPN together,you can tunnel an...

sony-vp-extract

Sony WH-1000XM4 Voice Pack Extractor Decrypt and extract the voice guidance MP3 prompts from Sony WH-1000XM4 encrypted firmware files. The AES-128-CBC key was extracted by dumping the he...

Stealth-Kid-RAT

Stealth Kid RAT Codename: Kiddo Version: 0.01A Stealth Kid RAT is an opensource remote administration tool written in C. Currently delevoped under POC Concept branch. Under development features:- TCP network stream IPv4 & IPv6 support Fast network serialization NetSerializer Compressed QuickLZ &...

CVE-2023-3350

CVE-2023-3349 / CVE-2023-3350 | IBERMATICA RPS 2019 Security research documenting an unauthenticated information disclosure and a cryptographic design flaw in IBERMATICA RPS 2019. The vulnerabilities can be chained to expose application logs containing authentication-related SQL queries and recov...

SHIRO-721

SHIRO-721 RememberMe Padding Oracle Vulnerability RCE 0x00 Introduction: The RememberMe cookie is encrypted using AES-128-CBC mode, which is vulnerable to padding oracle attacks. An attacker can use a valid RememberMe cookie as a prefix for a Padding Oracle Attack, and then craft a malicious...

reyee_decrypt

reyeedecrypt Adaptive decryption of Ruijie ReyeeOS firmware and configuration backups, and recovery of plaintext passwords from configurations. Usage python3 reyeedecrypt.py output directory is auto-detected, supporting the following types: Input| Example ---|--- Firmware tar package|...

scadapack-secure-lock-poc

SCADAPack Secure Lock fixture verifier This repository is a deliberately bounded proof of concept for CVE-2026-81861. It verifies that two controlled fixtures produced with the vendor's shipped Windows DTM can be authenticated and decoded using common key material. It is not an operational exploi...

CVE-2026-102812

A hard-coded cryptographic key vulnerability exists in the user-configuration backup mechanism of TP-Link RE305 V3 and Archer C7 V5. A fixed AES-128 key and initialization vector are embedded in the firmware configuration-management component. An attacker who obtains an affected configuration...

EUVD-2026-111271

A hard-coded cryptographic key vulnerability exists in the user-configuration backup mechanism of TP-Link RE305 V3 and Archer C7 V5. A fixed AES-128 key and initialization vector are embedded in the firmware configuration-management component. An attacker who obtains an affected configuration...

PT-2026-127146

A hard-coded cryptographic key vulnerability exists in the user-configuration backup mechanism of TP-Link RE305 V3 and Archer C7 V5. A fixed AES-128 key and initialization vector are embedded in the firmware configuration-management component. An attacker who obtains an affected configuration...

x64 AES-128 AES-NI Encoder

Encrypts shellcode with AES-128-ECB and prepends an x64 AES-NI decoder stub requires AES-NI on the target CPU. !/usr/bin/env python3 -- coding: utf-8 -- """AES-128 AES-NI encoder for x64 shellcode — same layout as Awesome-EDR 02 style runners.""" from kittysploit import from core.lib.shellcodeaes...

Malicious code in event-bus-lite-testmetest (npm)

Source: amazon-inspector 038b62e6040cef7e651f3cf89c146290f391c28977fe206410408e85ccbe4721 The package ships a binding.gyp whose target has type "none" and no C/C++ source files; its only purpose is a GYP !... command-expansion that runs node index.js during the automatic node-gyp rebuild triggere...

Malicious code in event-bus-lite-testmetest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 038b62e6040cef7e651f3cf89c146290f391c28977fe206410408e85ccbe4721 The package ships a binding.gyp whose target has type "none" and no C/C++ source files; its only purpose is a GYP !... command-expansion that runs no...

MAL-2026-18292 Malicious code in event-bus-lite-testmetest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 038b62e6040cef7e651f3cf89c146290f391c28977fe206410408e85ccbe4721 The package ships a binding.gyp whose target has type "none" and no C/C++ source files; its only purpose is a GYP !... command-expansion that runs no...

Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142519)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142519 advisory. In the Linux kernel, the following vulnerability has been resolved: ieee802154: admin-gate legacy LLSEC dump operations In net/ieee802154/netlink.c, the legacy...