69 matches found
privacy-first-network
Privacy Router Stack Домашний VPN-маршрутизатор с сетевым аварийным выключателем — защитите каждое устройство в вашей сети с помощью OpenWrt, WireGuard и AmneziaWG. Приложения не требуются. 🤖 Используете AI-агент кодирования? Дайте ему доступ ко всему репозиторию и прочитайте AGENTS.md для...
ssl-kill-switch3
SSL Kill Switch 3 훨씬 더 많은 기능을 갖춘 iOS 트윅 SSLKillSwitch https://github.com/nabla-c0d3/ssl-kill-switch2의 차세대 버전! 새로운 기능 수정됨 Fishhook 지원 iOS 15+, ARM64/ARM64e — 탈옥이 아닌 환경에서도 훅을 걸 수 있습니다. 수정됨 루트리스Rootless 지원 iOS 15+, ARM64/ARM64e, 루트리스 파이팅 : 추가됨 SecIsInternalRelease를 훅하여...
jiopc-architecture-whitepaper
JioPC 클라우드 가상 데스크톱의 아키텍처, 성능 및 보안 분석 종합 기술 백서 및 엔지니어링 평가 문서 버전 : 2.0 대상 플랫폼 : JioPC 클라우드 가상 데스크톱Accops HyWorks / Microsoft Azure 분류 : 기술 평가 및 리버스 엔지니어링 보고서 저자 : 엔지니어링 시스템 분석 날짜 : 2026년 9월 경영 요약 JioPC는 인도 소비자와 기업을 대상으로 하는 상용 클라우드 가상 데스크톱 인프라VDI 솔루션으로, 웹 브라우저와 씬 클라이언트를 통해 접근 가능한 그래픽 데스크톱 환경을 제공합니다...
usbkill
« usbkill » is an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer. To run: root@kitploit: sudo python usbkill.py or root@kitploit: sudo python3 usbkill.py Related project; same idea, but implemented as a Linux driver:...
ssl-kill-switch2
SSL Kill Switch 2 iOS 및 macOS 애플리케이션 내에서 SSL/TLS 인증서 검증인증서 핀닝 포함을 비활성화하는 블랙박스 도구입니다. https://github.com/iSECPartners/ios-ssl-kill-switch 의 두 번째 버전입니다. 설명 iOS 또는 macOS 애플리케이션에 로드되면 SSL Kill Switch 2는 SSL/TLS 연결 처리를 담당하는 저수준 함수들을 패치하여 시스템의 기본 인증서 검증과 인증서 핀닝과 같은 모든 종류의 사용자 정의 인증서 검증을 재정의하고 비활성화합니다...
Malicious code in @crysnovax/baileys (npm)
@crysnovax/baileys is a renamed fork of the Baileys WhatsApp Web library. On every successful connection connection.update with connection === 'open', wired in lib/Socket/socket.js it silently makes the user's own authenticated WhatsApp account follow two channels controlled by the publisher,...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: net: nfc: Fixed a deadlock between nfcunregisterdevice and rfkillfopwrite. A deadlock can occur between nfcunregisterdevice and rfkillfopwrite due to the inverted lock order between devicelock and rfkillglobalmutex. The problemat...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: NFC: NULLed the dev-rfkill to prevent UAF The commit 3e3b5dfcd16a “NFC: reordered the logic in nfcun,registerdevice” assumes that the deviceisregistered function in the nfcdevup function will help to check when the rfkill is...
Malicious code in nordpass (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9df6f21fababcd99ba522d380a0729d35aa4ff44ee2f6612fe75b906da844aee Package name impersonates the NordPass password-manager product while presenting itself as 'A simple authentication module.' The package.json...
Malicious code in @my_name_is_khn/express-security-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7e17fc1e874d13547ace24c7b21593ce1eb13337d0d877a89c7a372974ee42 On npm install, the package's postinstall hook scripts/inject.js locates the installer's host project root, identifies the main entry file index.js,...
MAL-2026-5553 Malicious code in express-self-destruct (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0097503a7ecd7b5e3b97213de29b36d5e957a305f7829cc45f43aa5aa3da817 On npm install, the package's postinstall hook node scripts/inject.js walks up from the install directory to locate the consumer's project root and...
Malicious code in express-self-destruct (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0097503a7ecd7b5e3b97213de29b36d5e957a305f7829cc45f43aa5aa3da817 On npm install, the package's postinstall hook node scripts/inject.js walks up from the install directory to locate the consumer's project root and...
Malicious code in @emcd-vue/auth (npm)
Part of a coordinated multi-package supply-chain attack impersonating EMCD emcd.io, a legitimate Russian cryptocurrency exchange and mining pool. The attacker registered the @emcd-vue npm scope to pose as an internal Vue.js front-end tooling package from "EMCD Platform Engineering." The package...
Malicious code in @t-in-one/form_product_token (npm)
Wave 2 of a dependency confusion attack campaign C2: oob.moika.tech targeting internal npm scopes. The attacker npm user t-in-one, email [email protected] published packages at inflated versions that resolve ahead of private registry versions via npm's default version resolution. The campaign...
MAL-2026-5039 Malicious code in @t-in-one/get_application_hid (npm)
Wave 2 of a dependency confusion attack campaign C2: oob.moika.tech targeting internal npm scopes. The attacker npm user t-in-one, email [email protected] published packages at inflated versions that resolve ahead of private registry versions via npm's default version resolution. The campaign...
MAL-2026-5044 Malicious code in @t-in-one/restore_application_hid_from_storage (npm)
Wave 2 of a dependency confusion attack campaign C2: oob.moika.tech targeting internal npm scopes. The attacker npm user t-in-one, email [email protected] published packages at inflated versions that resolve ahead of private registry versions via npm's default version resolution. The campaign...
Malicious code in @t-in-one/application_id_storage_key_token (npm)
Wave 2 of a dependency confusion attack campaign C2: oob.moika.tech targeting internal npm scopes. The attacker npm user t-in-one, email [email protected] published packages at inflated versions that resolve ahead of private registry versions via npm's default version resolution. The campaign...
Malicious code in @t-in-one/safe_local_storage_token (npm)
Wave 2 of a dependency confusion attack campaign C2: oob.moika.tech targeting internal npm scopes. The attacker npm user t-in-one, email [email protected] published packages at inflated versions that resolve ahead of private registry versions via npm's default version resolution. The campaign...
Malicious code in pywingui (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db77876bf3b13e55750748761841f7ab77f17bd951bdc1c749e1e56d4416d7e pywingui 6.0.1 advertises itself as a Win32 UI automation framework but ships only Nuitka-compiled cp311-win32.pyd binaries the 4.py files are trivia...
