2078 matches found
grubcrawler
Crawler web agentique avec anti-détection, repli vision et maillage pair-à-pair. Points de terminaison · Maillage · Anti-Détection · Ghost Protocol · Flux en direct · Outils MCP · Démarrage rapide · Benchmarks · Architecture Moteur de crawling web full-stack avec rendu JavaScript, navigateur...
rebindMultiA
rebindMultiA rebindMultiA est un outil pour effectuer une attaque de rebind à enregistrements A multiples. rebindmultia.com est un domaine que j'ai configuré pour aider avec ces attaques. Il fait de chaque IP son propre serveur de noms faisant autorité pour le domaine IP.ns.rebindmultia.com. Par...
openssl
Welcome to the OpenSSL Project !openssl logowww.openssl.org !github actions ci badgegithub actions ci OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations ar...
pycdc-studio
pycdc-studio 中文说明 Une interface utilisateur de bureau basée sur Qt Widgets pour explorer le bytecode Python avec pycdc / pycdas, inspecter les résultats natifs de décompilation, importer la sortie « oneshot » de Pyarmor, et réessayer les objets code non pris en charge avec un repli IA...
printerbugnew
Déclencheur de spouleur d'impression RPC pur sur TCP Pour Windows 11 22H2+ / Windows Server 2025 Utilisation printerbugnew.py username password domain attackerhost tcpport Exemples Connexion anonyme printerbugnew.py 192.168.1.100 Avec identifiants printerbugnew.py 192.168.1.100 admin Password123...
poodle-PoC
Poodle PoC 🐩 🐩 🐩 Une preuve de concept de l'attaque Poodle Padding Oracle On Downgraded Legacy Encryption : une attaque de l'homme du milieu qui profite de la rétrogradation des clients Internet et des logiciels de sécurité vers SSL 3.0 L'attaque Poodle vous permet de récupérer les données...
FakeDns
FakeDns Mise à jour 4/14/2020 - Support de Python 2 supprimé et code basculé vers Python3 Maintenant avec round-robin & options améliorées ! Bugs : @crypt0s - Twitter [email protected] - Email Un serveur DNS basé sur les expressions régulières Python ! UTILISATION : ./fakedns.py -h -c Config...
POC-CVE-2026-54121-Certighost
CertiGhost CVE-2026-54121 — набор эксплойтов для AD CS Chase Fallback Обзор CertiGhost — это критическая уязвимость CVSS 8.8 в службах сертификации Active Directory AD CS, которая позволяет непривилегированному пользователю домена выдать себя за контроллер домена и получить полный контроль над...
CVE-2026-39324
CVE-2026-39324 Эксплойт PoC Сбой расшифровки Rack::Session::Cookie приводит к приёму незашифрованных cookie | ---|--- Консультация| GHSA-33qg-7wpp-89cq Пакет| rack-session RubyGems Затронутые версии| = 2.1.1 Исправлено в| 2.1.2 Краткое описание Rack::Session::Cookie с параметром secrets: должен...
CVE-2026-19478
-b91c1c?style=flat-square CVE-2026-19478 — шаблон Nuclei Неразрушающий шаблон обнаружения Nuclei для CVE-2026-19478 — критической CVSS 9.4 неаутентифицированной уязвимости произвольного вызова методов в GraphQL API GitLab, исправленной GitLab 17 августа 2026 года. TL;DR Схема GraphQL в GitLab...
noise-java
Библиотека Noise-Java Noise-Java — это реализация протокола Noise на чистой Java, предназначенная в качестве эталонной реализации. Код распространяется на условиях лицензии MIT. Эта библиотека написана на чистой Java и использует Java Cryptography Extension JCE для предоставления криптографически...
Linux Distros Unpatched Vulnerability : CVE-2026-102414
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pbkdf2 through 3.1.6 re-hashes passwords longer than the digest's block size on every iteration in its JavaScript fallback lib/sync.js. A password longer than t...
CVE-2026-102824
Russh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 implementation in russh/src/kex/hybridmlkem.rs accepts an all-zero 32-byte peer X25519 public key in both serverdh and computesharedsecret, forcing the X25519 contribution to the combined shared secre...
Metasploit-CVE-2026-54121-Certighost
Metasploit-CVE-2026-54121-Certighost Certighost изначально обнаружен и эксплуатируется h0j3n и Aniq Fakhrul. Этот репозиторий содержит вспомогательный модуль Metasploit, который повышает привилегии от любого доменного пользователя с низкими привилегиями до полной компрометации домена, злоупотребл...
CVE-2026-102414
The pbkdf2 library (versions through 3.1.6 ) contains a vulnerability where passwords exceeding the digest's block size (64 bytes, or 128 bytes for sha384/sha512) are re-hashed on every iteration within the JavaScript fallback (lib/sync.js ). This results in a computational cost of O(iterations ×...
CVE-2026-102414 pbkdf2 rehashes long passwords on every iteration, enabling denial of service
pbkdf2 through 3.1.6 re-hashes passwords longer than the digest's block size on every iteration in its JavaScript fallback lib/sync.js. A password longer than the block size 64 bytes, or 128 bytes for sha384 and sha512 is passed to HMAC as the key on every iteration, and HMAC hashes such keys in...
CVE-2026-102414 pbkdf2 rehashes long passwords on every iteration, enabling denial of service
pbkdf2 through 3.1.6 re-hashes passwords longer than the digest's block size on every iteration in its JavaScript fallback lib/sync.js. A password longer than the block size 64 bytes, or 128 bytes for sha384 and sha512 is passed to HMAC as the key on every iteration, and HMAC hashes such keys in...
CVE-2026-102414
pbkdf2 through 3.1.6 re-hashes passwords longer than the digest's block size on every iteration in its JavaScript fallback lib/sync.js. A password longer than the block size 64 bytes, or 128 bytes for sha384 and sha512 is passed to HMAC as the key on every iteration, and HMAC hashes such keys in...
CVE-2026-1111-Smart-Contract-Cross-Function-Reentrancy
CVE-2026-1111 – 스마트 계약 교차 함수 재진입 프로그램 코드 Solidity + Python // VulnerableBank.sol - Simplified reentrancy example with cross-function bypass pragma solidity ^0.8.0; contract VulnerableBank mappingaddress = uint256 public balances; function deposit public payable balancesmsg.sender += msg.value;...
