cargo-fuzz

cargo fuzz ¡Un subcomando decargo para hacer fuzzing con libFuzzer! ¡Fácil de usar! Instalación root@kitploit: $ cargo install cargo-fuzz Nota: libFuzzer necesita soporte de sanitizers de LLVM, por lo que esto solo funciona en x86-64 y Aarch64, y solo en sistemas operativos tipo Unix no Windows...

dredge-cargo

这不是密码管理器。不是笔记应用。更不是深海海底异常标本分类来源登记册。但前两件事它做得比它们都好。开玩笑的（也不完全是）。 安装 • 快速开始 • 功能特性 • 链接命令 • 命令 • 工作原理 • 安全性 • 为什么 搜索，别整理。 笔记、配置、密钥、秘密 — 从你的终端开始，只需五秒。 “别拿那些琐碎杂事来烦我。” —— 渔夫 root@kitploit: go install github.com/DeprecatedLuar/dredge-cargo/cmd/dredge@latest 其他安装方式 ↓ 你从未见过的炫酷功能 加密存储 —— 克隆仓库，你只会看到一堆绝对的加密...

sniffglue

sniffglue sniffglue is a network sniffer written in rust. Network packets are parsed concurrently using a thread pool to utilize all cpu cores. Project goals are that you can run sniffglue securely on untrusted networks and that it must not crash when processing packets. The output should be as...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

gping

gping 🚀 Ping, but with a graph. Comes with the following super-powers: Graph the ping time for multiple hosts Graph the execution time for commands via the --cmd flag Custom colours Windows, Mac and Linux support Table of Contents Install 💿 Usage 🎷 Install 💿 macOS Homebrew: brew install gping...

bore

bore A modern, simple TCP tunnel in Rust that exposes local ports to a remote server, bypassing standard NAT connection firewalls. That's all it does: no more, and no less. root@kitploit: Installation requires Rust, see alternatives below cargo install bore-cli On your local machine bore local 80...

HiddenSteps

Core crates — implementation status This is the honest, current-state complement to docs/design/02-system-architecture.md's target module map. It says what's actually built, what's verified against a real backend vs. a mock, and what's still genuinely missing — not what's planned that's...

cve-2022-21658

CVE-2022-21658 poc 请确保使用 Rust 1.58.0 版本 。 首先运行： root@kitploit: while :; do mkdir /tmp/legit; rm -r /tmp/legit; ln -s /tmp/sensitive /tmp/legit; done 然后： root@kitploit: cargo run...

gaia

Gaia：全局 API 完整性评估器 依赖项 安装 opam 以构建测试 API。 安装 git、python3、pip 和 .NET 以构建 RESTler 和 Schemathesis。 安装 cargo 以构建 Gaia。 安装 docker v26.0.1 和 docker compose v2.26.1 以使用 ELK Stack 构建 Gaia（如果不使用则为可选）。 安装 node = v18.0.0 和 npm = v8.6.0 要创建一个 opam 本地切换： root@kitploit: make opam-switch 要安装所有依赖项： root@kitploit...

cargo-perm

Descripción Se ha encontrado una nueva vulnerabilidad en cargo versión 1.7.0, como se explica aquí. Paso a paso Primero tienes que asegurarte de que tu versión de cargo es vulnerable. cargo --version Supongamos que tengo un proyecto de cargo con el siguiente archivo src/main.rs: root@kitploit: us...

test-fuzz

test-fuzz test-fuzz is a Cargo subcommand and a collection of Rust macros to automate certain tasks related to fuzzing with afl.rs, including: generating a fuzzing corpus implementing a fuzzing harness test-fuzz accomplishes these in part using Rust's testing facilities. For example, to generate ...

GHSA-2VH6-HW4J-32WW vulnerabilities

Vulnerabilities for packages: cargo-audit...

GHSA-2VH6-HW4J-32WW vulnerabilities

Vulnerabilities for packages: cargo-audit...

CVE-2022-24713-POC

PoC von CVE-2022-24713 auf Ubuntu Installieren Sie das aktuelle rust-regex-Paket auf Ubuntu. Dann klonen Sie dieses Repo. Dann führen Sie cargo build aus. Die Regex-Abhängigkeit ist auf den Ordner /usr/share/cargo/registry gesetzt, daher gibt es keine Abhängigkeitsprobleme. Wenn die Kompilierung...

CVE-2026-74018

Subscriber Arbitrary File Upload in Warehouse Cargo = 2.6.9 versions...

CVE-2026-74018 WordPress Warehouse Cargo theme <= 2.6.9 - Arbitrary File Upload vulnerability

Subscriber Arbitrary File Upload in Warehouse Cargo = 2.6.9 versions...

CVE-2026-74018

CVE-2026-74018 is an Arbitrary File Upload vulnerability in the WordPress Theme Warehouse Cargo (versions ≤ 2.6.9 ). The vulnerability is accessible to users with Subscriber privileges and carries a CVSS 3.1 score of 9.9 (Critical) , with a vector of AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, indicatin...

EUVD-2026-63318

Subscriber Arbitrary File Upload in Warehouse Cargo = 2.6.9 versions...

`aronenao` was removed from crates.io due to malicious code

We identified that aronenao contained malicious code executed through a build script. This crate had 11 versions, with the most recent one being published at 2026-08-18. The crate was removed from crates.io and the user account was locked. This crate was used as part of a malware campaign targete...