10 matches found
sorry-ransomware-analysis
Análisis del Ransomware Sorry Campaña CVE-2026-41940 cPanel Paquete público de IOCs, reglas YARA, scripts forenses y metodología de análisis para la familia del ransomware "Sorry" extensión .sorry que surgió a finales de abril de 2026, propagado mediante la omisión de autenticación cPanel/WHM...
java-remote-class-loader
此工具允许您以类文件的形式将 Java 字节码发送给客户端（或潜在目标），通过 Java ClassLoader 和 Reflect API 加载并执行。客户端接收来自服务器的类文件，并返回相应的执行输出。载荷必须用 Java 编写，并在启动服务器前编译完成。 功能特性 客户端-服务器架构 Java 类文件的远程加载 传输中加密（使用 ChaCha20 密码） 通过参数进行设置 保活机制：服务器重启后重新建立通信 安装 该工具已在 Windows 和 Linux（zip 便携版）上使用 OpenJDK 11 及 JRE Java 包进行了测试。 由于依赖关系，Java 版本应为 11...
Tourmaline
Tourmaline Recientemente me topé con una pieza de malware ingeniosamente diseñada que se hace llamar "Torumaline". Este README fue escrito muy amablemente por Claude, ya que estaba súper ocupado con exámenes en el momento del inicio de este repositorio. ¡Explotar y descifrar este malware me quitó...
pingtunnel master-d7cd0d6ab5f18e7d8d050385e8d240b3b2f41e6c
Pingtunnel Pingtunnel is a tool that sends TCP/UDP traffic over ICMP. Note: This tool is only to be used for study and research, do not use it for illegal purposes Usage & Detailed Documentation 📖 For detailed documentation, seeUSAGE.md: includes complete command-line parameters, configuration fi...
EUVD-2022-0545
Malicious code in bioql PyPI...
GHSA-PMCV-MGCF-RVXG Non-aligned u32 read in Chacha20 encryption and decryption
The implementation does not enforce alignment requirements on input slices while incorrectly assuming 4-byte alignment through an unsafe call to std::slice::fromrawpartsmut, which breaks the contract and introduces undefined behavior. This affects Chacha20 encryption and decryption in crypto2...
Use of a Broken or Risky Cryptographic Algorithm in crypto2
The implementation does not enforce alignment requirements on input slices while incorrectly assuming 4-byte alignment through an unsafe call to std::slice::fromrawpartsmut, which breaks the contract and introduces undefined behavior. This affects Chacha20 encryption and decryption in crypto2...
Mozilla Rust has an unspecified vulnerability (CNVD-2022-03129)
Rust is a general-purpose, compiled programming language from the Mozilla Foundation.A security vulnerability exists in versions of Rust crypto2 crate prior to 2021-10-08, which stems from a possible unaligned read of u32 during Chacha20 encryption and decryption. No details of the vulnerability...
