lykan

lykan Lykan은 C로 작성된 유출 분석 프로그램으로, 분석된 데이터의 시각적 그래프를 생성합니다. 입력으로 비밀번호가 '\n'으로 구분된 원시 텍스트 덤프를 받아 상위 비밀번호, 문자 인기도 등 덤프에 대한 통계 정보를 추출합니다. Lykan은 일반 사용자의 비밀번호 생성 심리와 트렌드를 이해하는 데 도움을 주기 위해 설계되었으며, 이 정보는 나중에 보안 평가를 위해 방어적 또는 공격적으로 사용될 수 있습니다. 개발 중 설치 lykan을 설치하려면 셸에서 다음 명령을 실행하십시오: root@kitploit: $ git...

cbrutekrag

cbrutekrag Penetration tests on SSH servers using dictionary attacks. Written in C. brute krag means "brute force" in afrikáans Disclaimer This tool is for ethical testing purpose only. cbrutekrag and its owners can't be held responsible for misuse by users. Users have to act as permitted by loca...

YARA_for_config_extraction

YARA モジュール開発と設定抽出ブログ 概要 このリポジトリには、YARA モジュールの開発と設定抽出に関するブログ記事のソースコードとコンテンツが含まれています。このブログでは、設定の抽出に特化した YARA モジュールを作成するプロセスについてのガイドを紹介します。 ブログコンテンツ https://devilinside.me/blogs/configuration-extraction-yara はじめに: 設定抽出用の YARA モジュールを開発する動機の概要。 状況: 専用モジュールなしで YARA ルールを使用した場合の、効率的な設定抽出における限界についての考察。 YA...

linux-insides

Linux insides This repository contains a book-in-progress about the Linux kernel and its insides. The goal of this project is simple – to share knowledge about the Linux kernel internals and related low-level topics. If you're curious about what's under the hood, see the Table of Contents. Chapte...

CVE-2026-64607 vulnerabilities

Vulnerabilities for packages: apache-hop-fips, nacos-docker, druid, akhq, thingsboard, elasticsearch-fips, apache-polaris, apache-hop, dependency-track-apiserver, trino, floci, kayenta, opensearch-fips, cloudwatch-exporter, jbang, wavefront-proxy, camunda-zeebe, commercial-elasticsearch,...

MINI-2XQP-2P4C-J3MM

Bulletin has no description...

CVE-2026-69152

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memo...

[SECURITY] Fedora 44 Update: mbedtls-3.6.7-1.fc44

Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible...

ACPM Transfer Validation and Stress Testing Proof of Concept

This C program is a controlled stress-testing proof of concept designed to evaluate robustness, parameter validation, and stability of the acpmdoxfer interface under repeated high-volume calls and intentionally oversized transfer descriptors...

CVE-2026-41051

CVE-2026-41051 affects csync2 and is due to the use of insecure temporary directories when csync2 is compiled with C99 or later, enabling TOCTOU-style issues in temporary paths. Public records indicate the vulnerability impacts openSUSE Tumbleweed’s csync2 package in the 2.0+git.1600444747.83b364...

编号撤回

R is a statistical computing software from The R Foundation. fe is a lightweight, embeddable ANSI C scripting language developed by rxi. This CVE number has been withdrawn...

GNU Transport Layer Security Library 3.8.13

GnuTLS is a secure communications library implementing the SSL and TLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols, as well as APIs to parse and write X.509, PKCS 12, OpenPGP, and other...

EUVD-2019-15703

Malware in sbrugna...

sslscan

This is a tool for scanning SSL/TLS protocols and ciphers on a target server. The tool is called sslscan and is written in C. It is designed to be a command-line interface for scanning SSL/TLS protocols and ciphers on a target server. The tool can be built on various platforms, including Linux an...

GNU Transport Layer Security Library 3.8.10

GnuTLS is a secure communications library implementing the SSL and TLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols, as well as APIs to parse and write X.509, PKCS 12, OpenPGP, and other...

CVE-2024-38443

C/sorting/binaryinsertionsort.c in The Algorithms - C through e5dad3f has a segmentation fault for deep recursion, which may affect common use cases such as sorting an array of 50 elements...

CVE-2022-49927

CVE-2022-49927: Linux kernel NFSv4 kmemleak when allocating a slot failed. If a slot allocation fails, previously allocated slots must be cleaned up; otherwise, the allocated slots leak (example: unreferenced object 0xffff8881115aa100, size 64). The fix ensures cleanup of all allocated slots on f...

[SECURITY] Fedora 41 Update: expat-2.7.0-1.fc41

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

Open5GS nas_eps_send_emm_to_esm function denial of service vulnerability

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS version 2.6.4 and earlier, which originates from a reachable assertion in the nasepssendemmtoesm function, and can be...

A Bag of RATs: VenomRAT vs. AsyncRAT

Introduction Remote access tools RATs have long been a favorite tool for cyber attackers, since they enable remote control over compromised systems and facilitate data theft, espionage, and continuous monitoring of victims. Among the well-known RATs are VenomRAT and AsyncRAT. These are open-sourc...