Shelter

Shelter Shelter — это полностью вооруженная техника обфускации сна, которая позволяет полностью зашифровать вашу полезную нагрузку в памяти с широким использованием ROP. Этот крейт обладает следующими характеристиками: Шифрование AES-128. Возможность шифрования всего PE. Удаление прав на выполнен...

http-desync-guardian

Обзор HTTP/1.1 прошёл долгую эволюцию с 1991 по 2014 год: HTTP/0.9 — 1991 HTTP/1.0 — 1996 HTTP/1.1 RFC 2068 — 1997 RFC 2616 — 1999 RFC 7230 — 2014 Это означает, что существует множество серверов и клиентов, которые могут по-разному понимать границы запросов, создавая возможности для атак...

goblin

libgoblin Документация https://docs.rs/goblin/ список изменений Использование Goblin требует rustc 1.85.0 редакция Rust 2024. Добавьте в ваш Cargo.toml dependencies goblin = "0.10" Возможности отличное название крейта zero-copy, кроссплатформенная, с учётом порядка байт реализация ELF64/32 — вау!...

boha

@agntn/puzzles Public crypto puzzles and bounties, as typed records. You ask for a puzzle, you get its address, its key material and what happened on chain. Why? Every puzzle thread has the same three things: the addresses, the prizes, and who solved what. Every scanner and tracker re-types them...

rustdllproxy

rustdllproxy Windows 애플리케이션용 프록시 DLL을 쉽게 생성하고 개발할 수 있는 Rust 크레이트 유틸리티입니다. 설치 cargo install rustdllproxy 호환성 이 크레이트는 현재 표준 DLL PE 형식만 지원합니다. 현재 제한 사항 사용자 지정 코드로 함수를 후킹할 때 함수 시그니처를 알아야 합니다 이는 Ghidra와 같은 디스어셈블러 및 리버스 엔지니어링 도구를 사용하여 확인할 수 있습니다. 명령어 Rustdllproxy는 두 가지 하위 명령어를 제공합니다: 명령어| 용도 ---|---...

hashes

RustCrypto: 해시 순수 Rust로 작성된 암호화 해시 함수1 모음입니다. 모든 알고리즘은 별도의 크레이트에 있으며 digest 크레이트의 트레이트를 사용하여 구현됩니다. 사용 예제는 digest 및 해시 구현 크레이트 문서에 제공됩니다. 또한 모든 크레이트는 표준 라이브러리를 요구하지 않으며즉, nostd 지원 기본 크레이트 기능을 비활성화하여 베어메탈 또는 WebAssembly 프로그래밍에 쉽게 사용할 수 있습니다. 확장 가능 출력 함수XOFXOF 모음은 RustCrypto/XOFs 저장소를 참조하세요. 지원 알고리...

lacuna-rs

lacuna-rs Спуфинг стека вызовов через ghost-frame + runtime indirect syscalls для Windows x64 — портировано на Rust. Портировано из LACUNA Chain lacunachain.c авторства Mohamed Alzhrani 0xmaz. lacuna-rs — это переиспользуемый крейт Rust, предоставляющий те же примитивы, что и оригинальный C TTP,...

vuke

vuke Research tool for analyzing and reproducing vulnerable Bitcoin key generation. Features Modular architecture - pluggable sources and transforms Multiple input sources Numeric ranges test weak seeds Wordlists brainwallet analysis Timestamps time-based PRNG exploitation Stdin streaming pipelin...

checkout-index

checkout-index - Воспроизведение CVE-2025-22620 Это код доказательства концепции для RUSTSEC-2025-0001 CVE-2025-22620, GHSA-fqmf-w4xh-33rh. Это тот же код, что и в уведомлении, но в виде Rust-проекта, включающего Cargo.toml и Cargo.lock. Этот репозиторий был полезен при написании уведомления, и я...

Fedora 43 : rust-lru / rust-lru0.16 (2026-332a62112c)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-332a62112c advisory. Update lru crate to version 0.18.4 and add a compat package for version 0.16. This fixes an obscure potential use-after-free issue: Rebuild tracker: Tenable...

[SECURITY] Fedora 43 Update: rust-hickory-net-0.26.2-1.fc43

Hickory-net is a safe and secure low-level DNS library. This is the foundational DNS protocol library used by the other higher-level Hickory DNS crates...

rustsec platforms/v4.2.0

RustSec Crates 🦀🛡️📦 The RustSec Advisory Database is a repository of security advisories filed against Rust crates published via crates.io. The advisory database itself can be found at: https://github.com/RustSec/advisory-db About this repository This repository contains a Cargo Workspace with all...

Fedora 45 : rust-hickory-net / rust-hickory-proto / rust-hickory-resolver (2026-37e598af67)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-37e598af67 advisory. Update hickory-dns crates to version 0.26.2. This includes fixes for a large number of security relevant bugs. Release notes:...

Malicious code in logs_update (crates.io)

logs-update is a malicious crate published to crates.io on 2026-09-10 with zero downloads. It pretends to be a terminal progress-bar library, but renders nothing to a terminal. The whole crate steals files and sets up remote access. The crate has no build script, so it does not run during cargo...

CVE-2026-75811

Improper Restriction of Software Interfaces to Hardware Features in ASUS Armoury Crate allows a local user to modify hardware configuration settings and potentially cause hardware damage by bypassing driver authentication and accessing critical model-specific registers.Refer to the ' Security...

CVE-2026-18023

Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a local user to disclose sensitive information from uninitialized memory via a crafted IOCTL request that bypasses the driver's security verification mechanism. Refer to the ' Security Update for Armour...

CVE-2026-75808

Allocation of Resources Without Limits or Throttling in ASUS Armoury Crate allows a local user to cause a denial-of-service condition through system memory exhaustion by bypassing driver authentication and allocating an unrestricted amount of memory.Refer to the ' Security Update for Armoury Crat...

CVE-2026-75809

Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver authentication and using IOCTLs to read from and write to PCIe configuration space.Refer to the ' Security Update for Armoury...

CVE-2026-75810

Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing driver authentication and sending requests to trigger system management interrupts SMIs. Repeatedly triggering SMI may lead to a denial-of-service DoS condition.Refer to the '...

CVE-2026-16004

Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary PCI/PCIe configuration space via crafted IOCTL requests by bypassing the driver's verification. Refer to the ' Security Update for Armoury Crate App' section on the ASUS Security...