go-pkcs12

package pkcs12 root@kitploit: import "software.sslmate.com/src/go-pkcs12" Package pkcs12 implements some of PKCS12 also known as P12 or PFX. It is intended for decoding DER-encoded P12/PFX files for use with the crypto/tls package, and for encoding P12/PFX files for use by legacy applications whi...

smb

SMB SMBを介して通信するためのGoパッケージです。現在、クライアント側の機能のみが最小限実装されています。 以下は、サーバーとのセッションを確立するサンプルクライアントです： root@kitploit: package main import "log" "github.com/stacktitan/smb/smb" func main host := "172.16.248.192" options := smb.Options Host: host, Port: 445, User: "alice", Domain: "corp", Workstation: "",...

PoC-CVE-2019-10743

Zip Slip 데모 이 프로젝트는 취약한 버전의 mholt/archiver 패키지를 사용하여 Zip Slip 취약점CVE-2019-10743을 시연합니다. Zip Slip이란 무엇인가? Zip Slip은 Snyk의 보안 연구원들이 발견한 취약점입니다. 이 취약점은 실제 환경에서 사용되는 여러 패키지에 영향을 미치는 것으로 밝혀졌습니다. 이 취약점은 다음과 같은 문제를 초래할 수 있습니다: 원격 코드 실행 시스템에 대한 임의 쓰기는 시스템을 충돌시키는 데 사용될 수 있습니다 웹사이트 훼손 및 평판 손상 웹사이트의 다양한 페이지...

jsteg

jsteg root@kitploit: go get lukechampine.com/jsteg jsteg는 JPEG 파일 내부에 데이터를 숨기는 패키지로, 이 기법을 스테가노그래피라고 합니다. 데이터의 각 비트를 이미지의 최하위 비트에 복사하여 숨깁니다. 숨길 수 있는 데이터의 양은 JPEG 파일 크기에 따라 달라지며, 숨겨진 데이터 1바이트당 약 1014바이트의 JPEG 저장 공간이 필요합니다. 예제 root@kitploit: // 기존 JPEG 열기 f, := os.Openfilename img, := jpeg.Decodef ...

sploit

sploit Sploit은 바이너리 분석 및 익스플로잇에 도움이 되는 Go 패키지입니다. Sploit 개발의 동기는 보다 일반적인 Python 익스플로잇 개발 프레임워크와 견줄 만한 기능을 갖춘 잘 설계된 API를 제공하면서 Go 프로그래밍 언어의 장점을 활용하는 데 있습니다. 뛰어난 크로스 컴파일러 지원, 고루틴, 강력한 암호화 라이브러리, 정적 타이핑은 Go를 선택하는 몇 가지 이유에 불과합니다. 이 프로젝트는 pwntools 및 다른 멋진 프로젝트에서 영감을 받았습니다. 아직 개발 초기 단계입니다. 이 프로젝트는 셸코딩,...

sploit

sploit Sploit is a Go package that aids in binary analysis and exploitation. The motivating factor behind the development of sploit is to be able to have a well designed API with functionality that rivals some of the more common Python exploit development frameworks while taking advantage of the ...

Photon OS 5.0: Go PHSA-2026-5.0-91-0960

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0960. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2025-30153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kin-openapi is a Go project for handling OpenAPI files. Prior to 0.131.0, when validating a request with a multipart/form-data schema, if the OpenAPI schema...

GO-2022-0619 vulnerabilities

Vulnerabilities for packages: kubeflow...

GO-2022-0784 vulnerabilities

Vulnerabilities for packages: ctop...

OPENSUSE-SU-2026:21432-1 Security update for gh

This update for gh fixes the following issues: Changes in gh: - CVE-2026-39821: reject all-ASCII xn-- Punycode labels in the vendored golang.org/x/net/idna package regardless of Go's unicode.Version boo1266618...

Photon OS 5.0: Go PHSA-2026-5.0-0855

An update of the go package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0855. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid328957...

golang.org/x/crypto is vulnerable to invoking server panic during CheckHostKey/Authenticate flow

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil...

GO-2026-5259 Ech0 has Server-Side Request Forgery (SSRF) via Connect Handler fetchPeerConnectInfo in github.com/lin-snow/ech0

Ech0 has Server-Side Request Forgery SSRF via Connect Handler fetchPeerConnectInfo in github.com/lin-snow/ech0...

ROOT-APP-GOBINARY-CVE-2026-33246 CVE-2026-33246 in rootio-github.com/nats-io/nats-server/v2 - Patched by Root

Root has patched CVE-2026-33246 in the rootio-github.com/nats-io/nats-server/v2 package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-33248 CVE-2026-33248 in rootio-github.com/nats-io/nats-server/v2 - Patched by Root

Root has patched CVE-2026-33248 in the rootio-github.com/nats-io/nats-server/v2 package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-42294 CVE-2026-42294 in rootio-github.com/argoproj/argo-workflows/v3 - Patched by Root

Root has patched CVE-2026-42294 in the rootio-github.com/argoproj/argo-workflows/v3 package for Root:Go. Multiple fixed versions available...

MAL-2026-3629 Malicious code in github.com/BufferZoneCorp/net-helper (Go)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security a4e4f74e90479d472a307d311d48214827e21cf93ecf9b0b62ff2cb72adb2c9e This package is a malicious packages part of the Go BufferZoneCorp and RubyGems knot-theory clusters. The packages in this cluster steal...

MAL-2026-3625 Malicious code in github.com/BufferZoneCorp/go-stdlog (Go)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security a4e4f74e90479d472a307d311d48214827e21cf93ecf9b0b62ff2cb72adb2c9e This package is a malicious packages part of the Go BufferZoneCorp and RubyGems knot-theory clusters. The packages in this cluster steal...

Malicious code in github.com/BufferZoneCorp/net-helper (Go)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security a4e4f74e90479d472a307d311d48214827e21cf93ecf9b0b62ff2cb72adb2c9e This package is a malicious packages part of the Go BufferZoneCorp and RubyGems knot-theory clusters. The packages in this cluster steal...