DriverJack

DriverJack Introduction DriverJack is a tool designed to load a vulnerable driver by abusing lesser-known NTFS techniques. These method bypass the registration of a Driver Service on the system by hijacking an existing service, and also spoof the image path presented in the Driver Load event. To...

longfellow-zk

Longfellow ZK Overview The Longfellow library enables the construction of zero-knowledge protocols concerning legacy identity verification standards such as the ISO MDOC standard, the JWT standard, and W3 Verifiable Credentials. This implementation is described in: Anonymous credentials from ECDS...

cheat-engine

Cheat Engine Cheat Engine is a development environment focused on modding games and applications for personal use. Download Latest Version Older versions Links Website Forum Forum alternate Forum alternate Wiki Social Media Reddit Twitter Donate Patreon PayPal Basic Build Instructions 1. Download...

frostbyte

FrostByte Progolue: In the past few days I've been experimenting with the AppDomain manager injection technique had a decent success with it in my previous Red Team engagements against certain EDRs. Although, this is really good for initial access vector, I wanted to release a POC which will help...

Ventoy

Ventoy Ventoy is an open source tool to create bootable USB drive for ISO/WIM/IMG/VHDx/EFI files. With Ventoy, you don't need to format the disk over and over, just copy the image files to the USB drive and boot them. You can copy many image files at a time and Ventoy will give you a boot menu to...

usbsas

usbsas is a free and open source GPLv3 tool and framework for securely reading untrusted USB mass storage devices. Overview Following the concept of defense in depth and the principle of least privilege, usbsas's goal is to reduce the attack surface of the USB stack. To achieve this, most of the...

Claude-Skills-Governance-Risk-and-Compliance

Claude Skills for Governance, Risk & Compliance GRC Expert-level compliance guidance for ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF, PCI DSS, TSA Cybersecurity, ISO 42001 AI Management System, ISO 27701 Privacy Information Management, DORA Digital Operational Resilience, India's Digital...

kali-installer

Kali-Installer Build-Script Kali Linux installer ISO builder, viasimple-cdd with debian-cd. These are the same build-scripts that the Kali team uses to generate the official Kali Linux base images, found on kali.org/get-kali/. These images can be used to install Kali with various customization...

CVE-2024-2961

CVE-2024-2961 CVE-2024–2961 Security Issue Mitigation Script Description This repository contains a Bash script to check and mitigate the buffer overflow vulnerability identified in GNU libc glibc versions 2.39 and older, known as CVE-2024-2961. This vulnerability affects PHP when the iconv...

C-Game-Modding-Utility

C/C++ Game Modding Utility This utility aims to make writing mods for 5th/6th generation console games in C/C++ easier. It handles all the tedious setup, letting you focus on actually writing code. No manual cross-compiler setup. No manual ISO rebuilding. No complicated testing workflows. Feature...

CLEANSTART-2026-FM38692 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

Security vulnerability affects the solr package. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes...

CVE-2021-34600

Original README below Proof of Concept for CVE-2021-34600 A detailed explanation of how this PoC works can be found within our blog post. On the user facing side we only added two new commands: hf 14a getchallenge and hf 14a opendoor . To make those work, we had to mix some code from the iceman...

homoglyphs

THE PROJECT IS ARCHIVED Forks: https://github.com/orsinium/forks Homoglyphs Homoglyphs -- python library for getting homoglyphs and converting to ASCII. Features It's smarter version of confusablehomoglyphs: Autodect or manual choosing category aliases from ISO 15924. Auto or manual load only...

CLEANSTART-2026-OX74657 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

Security vulnerability affects the trino package. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes...

Exploit for CVE-2026-80914

CVE-2026-80914: Bluetooth ISO listener use-after-free unprivi...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix use-after-free of listener socket in isoconnready isoconnready looks up the BIS listener socket using isogetsock, which takes a reference, and then, without re-checking its state, creates a child socket from i...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix malformed ISOEND/CONT handling The Core specification Part C vol 4 sec 5.4.5 does not exclude empty ISOCONT or ISOEND packets. Currently, we reject them if they are the last packet. If the controller sends a...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: ISO: Proper handling of “hold” state in “isoconnready”. The dereferencing of “sk” in “isoconnready” must be done either under “conn-lock” or while holding the reference count, to avoid concurrent closure. Currently,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: ISO: avoiding deadlocks in isosocktimeout The isosocktimeout function takes locksock, so disabling the timer while holding that lock may lead to a deadlock. isosocktimeout may also run concurrently with isoconndel,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: lock sock in isoconnectind Accessing iso.pisock-conn requires locksock, which is not set in the "ev3" part of isoconnectind. It may also be NULL if the socket has transitioned away from the LISTEN/CONNECT states...