SafeText

SafeText 用于净化文本的工具，通过移除零宽字符和同形异义字，确保来自匿名来源的文档能够安全分发。 试图泄露电子邮件或其他文本文件的个人，面临通过指纹识别被鉴别的风险。指纹识别通常发生在原始文档分发者嵌入了某种形式的“金丝雀”时。例如，埃隆·马斯克在2008年针对泄密事件的邮件中，为每位员工提供了略有不同的措辞。这一策略被员工识破并失败。另一种同样被使用的更简单策略，是在文本中嵌入几乎不可见的修改。SafeText旨在识别并移除这些修改。 具体来说，该工具将移除同形异义字、零宽字符以及其他隐蔽字符。该工具还会尝试识别可能暴露个人所在位置的独特单词拼写。 用法...

catphish

CATPHISH Generate similar-looking domains for phishing attacks. Check expired domains and their categorized domain status to evade proxy categorization. Whitelisted domains are perfect for your C2 servers. Perfect for Red Team engagements. Installation root@kitploit: bundle install Current...

catphish

CATPHISH 生成用于钓鱼攻击的相似域名。检查过期域名及其分类状态以规避代理分类。白名单域名非常适合您的C2服务器。完美适用于红队演练。 安装 root@kitploit: bundle install 当前算法 SingularOrPluralise prependOrAppend doubleExtensions mirrorization homoglyphs dashOmission Punycode 版本 1.1.0: root@kitploit: The parser for command line options is modified to compensate...

experiments

实验 各种实验 / PoC 的仓库。 debugging-secure-kernel: PoC：在 QEMU KVM 之上使用 gdb 调试 Windows 10 安全内核 dns: 有关 DNS / 证书透明度 / 同形字（Homoglyphs）的实验 Attack Surface Reduction: 揭秘 Windows 攻击面减少（Attack Surface Reduction）的内部机制 VDM: Windows Defender 的 VDM 格式（签名数据库） Primary Group ID: 分析对 primaryGroupID AD 属性更改执行的安全检查...

homoglyphs

プロジェクトはアーカイブされました フォーク: https://github.com/orsinium/forks Homoglyphs Homoglyphs -- ホモグリフを取得しASCIIに変換するためのPythonライブラリ。 特徴 これは、confusablehomoglyphs のよりスマートなバージョンです： カテゴリの自動検出または手動選択（ISO 15924のエイリアス）。 必要なアルファベットのみをメモリに自動または手動で読み込み。 ASCIIへの変換。 より設定可能。 より安定。 インストール root@kitploit: sudo pip install...

CVE-2026-70470

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise validatePythonCodeForDataFrame in packages/components/src/pythonCodeValidator.ts can be bypassed with Unicode homoglyph identifiers, allowing arbitrary Python execution inside Pyodide...

CVE-2026-70470

Flowise CVE-2026-70470: Before version 3.1.3, the validatePythonCodeForDataFrame checker in Flowise allows bypass via Unicode homoglyphs in identifiers, circumventing the ASCII word-boundary blacklist and enabling arbitrary Python execution inside Pyodide with potential full OS command execution ...

EUVD-2026-52811

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise validatePythonCodeForDataFrame in packages/components/src/pythonCodeValidator.ts can be bypassed with Unicode homoglyph identifiers, allowing arbitrary Python execution inside Pyodide...

Incorrect Behavior Order: Validate Before Canonicalize

Overview @auth/core is an Authentication for the Web. Affected versions of this package are vulnerable to Incorrect Behavior Order: Validate Before Canonicalize in the email/magic-link sign-in process. An attacker can gain unauthorized access to a victim's account by submitting an email address...

Incorrect Behavior Order: Validate Before Canonicalize

Overview next-auth is an Authentication for Next.js Affected versions of this package are vulnerable to Incorrect Behavior Order: Validate Before Canonicalize in the email/magic-link sign-in process. An attacker can gain unauthorized access to a victim's account by submitting an email address...

CVE-2022-26843

Insufficient visual distinction of homoglyphs presented to user in the IntelR oneAPI DPC++/C++ Compiler before version 2022.1 for IntelR oneAPI Toolkits before version 2022.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

14 Malicious NuGet Packages Found Stealing Crypto Wallets and Ad Data

ReversingLabs discovers 14 malicious NuGet packages, including Netherеum.All, using homoglyphs and fake downloads to steal crypto wallets and Google Ads data...

CVE-2025-55129

HackerOne community member Kassem S.kassems94 has reported that username handling in Revive Adserver was still vulnerable to impersonation attacks after the fix for CVE-2025-52672, via several alternate techniques. Homoglyphs based impersonation has been independently reported by other HackerOne...

EUVD-2025-200129

HackerOne community member Kassem S.kassems94 has reported that username handling in Revive Adserver was still vulnerable to impersonation attacks after the fix for CVE-2025-52672, via several alternate techniques. Homoglyphs based impersonation has been independently reported by other HackerOne...

EUVD-2019-16353

Malware in sbrugna...

EUVD-2012-0616

Malware in sbrugna...

EUVD-2022-31393

Malicious code in bioql PyPI...

Malicious code in homoglyphs (npm)

The package homoglyphs was found to contain malicious code...

MAL-2025-22519 Malicious code in homoglyphs (npm)

The package homoglyphs was found to contain malicious code...

Mozilla: Bypass of Restricted Keyword "Mozilla" in Display Name Field via Unicode Homoglyphs on addons.allizom.org

A restricted keyword bypass vulnerability was discovered on the Firefox Add-ons platform that allowed an attacker to register a display name visually identical to "Mozilla" by using a Unicode homoglyph character. This circumvented the intended restriction and could have been used to impersonate...