opennhp

OpenNHP: Open Source Zero Trust Security Toolkit OpenNHP is a lightweight, cryptography-powered, open-source toolkit implementing Zero Trust security for infrastructure, applications, and data. It is the reference implementation of the Cloud Security Alliance CSA Network-infrastructure Hiding...

TORQUE-Resource-Manager-2.5.x-2.5.13-stack-based-buffer-overflow-exploit-CVE-2014-8729-CVE-2014-878

TORQUE-Resource-Manager-2.5.x-2.5.13-stack-based-buffer-overflow-exploit-CVE-2014-8729-CVE-2014-878 Exploit Title: TORQUE Resource Manager 2.5.x-2.5.13 stack based buffer overflow Date: 10 Nov 2014 Exploit Author: @inso - Moussajee Thomas, @socks - Laurenceau Gary Vulnerability discovered by:...

marfil

Marfil Marfil 是 Aircrack-ng 套件的扩展，用于评估 WiFi 网络安全。它允许将执行长时间字典攻击的工作分配给多台计算机。 动机 Aircrack-ng 套件提供了 aircrack-ng 工具，这是一个 802.11 WEP 和 WPA/WPA2-PSK 密钥破解程序。在破解后者时，必须使用字典或单词列表。这些字典越长，过程所需的时间就越长。根据您的硬件，甚至可能需要数天或数周。 如果您恰好有一些额外的硬件可供使用，aircrack-ng 不允许您在它们之间分配负载：您必须选择最快的硬件并坚持使用它。这正是 Marfil 发挥作用的地方。 解决方案 Marfi...

ATAboy

If you don't want to build your own, the hardware can be purchased here: https://obsoletetech.us/products/ataboy-an-open-source-legacy-ide-usb-bridge ATAboy is designed for retro computing enthusiasts, data recovery experts, and archivists. Read and write the oldest of IDE hard drives, without th...

usbsas

usbsas is a free and open source GPLv3 tool and framework for securely reading untrusted USB mass storage devices. Overview Following the concept of defense in depth and the principle of least privilege, usbsas's goal is to reduce the attack surface of the USB stack. To achieve this, most of the...

quantumslop

Shor's Algorithm for ECDLP — Q-Day Prize Submission Quantum solver for the Elliptic Curve Discrete Logarithm Problem ECDLP, built for the Q-Day Prize Challenge by Project Eleven. The goal: recover ECC private keys on real quantum hardware using Shor's algorithm. Author : Giancarlo Lelli Contact :...

quantum

Shor's Algorithm for ECDLP — Q-Day Prize Submission Quantum solver for the Elliptic Curve Discrete Logarithm Problem ECDLP, built for the Q-Day Prize Challenge by Project Eleven. The goal: recover ECC private keys on real quantum hardware using Shor's algorithm. Author : Giancarlo Lelli Contact :...

numpy-1.13.1

Travis CI Status --- NumPy is the fundamental package needed for scientific computing with Python. This package contains: a powerful N-dimensional array object sophisticated broadcasting functions tools for integrating C/C++ and Fortran code useful linear algebra, Fourier transform, and random...

vesta

一款集容器扫描，Docker和Kubernetes配置基线检查于一身的工具 English · 简体中文 概述 vesta是一款集容器扫描，Docker和Kubernetes配置基线检查于一身的工具。检查内容包括镜像或容器中包含漏洞版本的组件，同时根据云上实战渗透经验检查Docker以及Kubernetes的危险配置 vesta同时也是一个灵活，方便的工具，能够在各种系统上运行，包括但不限于Windows，Linux以及MacOS Demo 检查项 Scan 支持输入的方式 image container filesystem vm TODO 扫描通过主流安装方法安装程序的漏洞...

cracklord

Cracklord http://jmmcatee.github.io/cracklord/ What Is It? CrackLord is a system designed to provide a scalable, pluggable, and distributed system for both password cracking as well as any other jobs needing lots of computing resources. Better said, CrackLord is a way to load balance the resource...

cmcp

cMCP: Runtime MCP Confidencial Aplica la política de herramientas MCP dentro de un TEE, donde el agente que gobierna no puede alcanzarlo Inicio rápido · Arquitectura · Configuración · CLI · Registro de cambios Vista previa para desarrolladores - lanzado en la Cumbre de Computación Confidencial, 2...

Dragonfly2 < 2.1.0-beta.1 - Hardcoded JWT Secret

Dragonfly is an open source P2P-based file distribution and image acceleration system. It is hosted by the Cloud Native Computing Foundation CNCF as an Incubating Level Project. Dragonfly uses JWT to verify user. However, the secret key for JWT, "Secret Key", is hard coded, which leads to...

Pribado

🔐 Pribado Gestión Privada de Claves API e Infraestructura de Conocimiento Cero Pribado es una plataforma auto-alojable y de conocimiento cero para gestionar claves API, secretos cifrados y comunicaciones privadas. Construido sobre Oasis Sapphire para computación confidencial respaldada por...

JASPER: Special Session on Joint Reliability and Security Assessment of SPlit Computing for Edge Robustness

Split Computing SC enables efficient deployment of Deep Neural Networks DNNs by partitioning inference between edge devices and cloud servers. However, intermediate feature representations are simultaneously exposed to hardware faults and adversarial attacks, which are traditionally evaluated...

Attestable Audit: Property-Based Attestation for Proprietary Workloads without Artifact Disclosure

Trusted Execution Environments TEEs prove the integrity of code and data to a remote peer through remote attestation: the TEE issues an attestation report by signing, with a hardware-bound key, its configuration information, including measurements cryptographic digests of the code loaded inside i...

QUFIG: GNN-Based Prediction of Quantum Fault Injection Vulnerabilities with Gate-Level Precision

The growing scale and accessibility of quantum hardware exposed new reliability and security challenges in the quantum computing workflow, such as the run-time fault injection attacks in cloud-based quantum computing platforms. However, existing works fail to identify vulnerabilities with...

EUVD-2025-211006

Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.4.1, a recovering Coordinator does not verify the seed supplied by the recovering party. An attacker can therefore stand up a rogue Coordinator whose manifest passes validation but whose secret seed is...

CVE-2025-71426: Improper Authorization

Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.4.1, a recovering Coordinator does not verify the seed supplied by the recovering party. An attacker can therefore stand up a rogue Coordinator whose manifest passes validation but whose secret seed is...

CVE-2026-61668

DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, WorkloadManagementSystem/Utilities/PilotWrapper.py pilotWrapperScript uses ssl.createunverifiedcontext to download the second-stage pilot.tar archive without TLS certificat...

CVE-2026-61668 DIRAC: Pilot code downloaded over unverified HTTPS connection

DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, WorkloadManagementSystem/Utilities/PilotWrapper.py pilotWrapperScript uses ssl.createunverifiedcontext to download the second-stage pilot.tar archive without TLS certificat...