sandsifter

s a n d s i f t e r : the x86 processor fuzzer Overview The sandsifter audits x86 processors for hidden instructions and hardware bugs, by systematically generating machine code to search through a processor's instruction set, and monitoring execution for anomalies. Sandsifter has uncovered secre...

CVE-2024-38828

CVE-2024-38828 Vulnerability Description The test checks behavior/reaction in Spring Framework with and without the CVE-2024-38828 vulnerability. In ByteArrayHttpMessageConverter, memory is allocated in ByteArrayOutputStream based on the Content-Length request header, which may not match reality ...

CVE-2026-42945-POC

CVE-2026-42945 NGINX Rift - HTB-Ready Exploit Standalone exploit for the NGINX heap buffer overflow vulnerability discovered in 2024. This version is optimized for HackTheBox and CTF environments where you can't set up Docker containers. Vulnerability Details CVE-2026-42945 is a critical heap...

CVE-2025-40019-POC

proof of concept for CVE-2025-40019 CVE-2025-40019 is the Encrypted Salt-Sector Initialization Vector mechanism crypto/essiv.c which has insufficient validation of Associated Authentication Data AAD length relative to the Initialization Vector IV size, leading to out-of-bounds memory access. The...

CVE-2022-20474

CVE-2022-20474 Analysis — Self-changed Bundle under LazyValue Preface A friendly reminder: before reading this article, you should have a basic understanding of Bundle Mismatch vulnerabilities. If you haven't read the following references, it is recommended to read them first: 1. Bundle Feng Shui...

openssl

Welcome to the OpenSSL Project !openssl logowww.openssl.org !github actions ci badgegithub actions ci OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations ar...

citrixmash_scanner

CVE-2019-19781 citrixmash scanner A multithreaded scanner for Citrix appliances that are vulnerable to CVE-2019-19781. The scanner does not attempt to compromise/exploit hosts and avoids downloading any sensitive content. A HEAD request is used to determine if a target is vulnerable. False...

duplicut

Duplicut :scissors: Quickly dedupe massive wordlists, without changing the order Created by nil0x42 and contributors 📖 Overview Nowadays, password wordlist creation usually implies concatenating multiple data sources. Ideally, most probable passwords should stand at start of the wordlist, so most...

CVE-2011-4862

CVE-2011-4862 Final Project for Security and Privacy CS 600.443 | Fall 2018 I originally tried to use diff to make a patch. I patched it the way I thought it would be, before looking at the real patch. encrypt.patch is this original patch that I made with teh diff. However, when we tried applying...

rbuster

Rbuster yet another dirbuster Common Command line options -a - specify a user agent string to send in the request -c - use this to specify any cookies that you might need simulating auth. header. -f - force processing of a domain with wildcard results. -l - show the length of the response. -r...

CVE-2020-16898-Bad-Neighbor

Politique simple pour détecter CVE-2020-16898 : Bad Neighbor Les fonctionnalités suivantes sont fournies par le script :: 1 Le script vérifie selon l'heuristique décrite ici : https://www.mcafee.com/blogs/other-blogs/mcafee-labs/cve-2020-16898-bad-neighbor/ Installation zeek-pkg install...

cve-2011-4862

cve-2011-4862 J'ai d'abord essayé d'utiliser diff pour créer un patch. Je l'ai patché comme je pensais qu'il devrait l'être, avant de regarder le vrai patch. encrypt.patch est ce patch original que j'ai fait avec le diff. Cependant, quand nous avons essayé d'appliquer ce patch à FreeBSD, il ne l'...

CVE-2019-11043-Docker

A docker image with a vulnerable version of PHP-FPM CVE-2019-11043 and nginx. Run docker run --rm -p8080:80 akamajoris/cve-2019-11043 You should be able to access the web application at http://your-ip:8080/. Exploitation Build a binary from https://github.com/neex/phuip-fpizdam, then...

CVE-2004-0558

Ceci est un exploit de preuve de concept pour CVE-2004-0558 Des versions spécifiques de CUPs 1.1.x sont vulnérables à une attaque par déni de service lorsqu'un paquet UDP de longueur nulle est envoyé https://www.exploit-db.com/exploits/24599/ Il est important de noter que cela peut être réalisé...

CRIME-poc

CRIME-poc Attaque CRIME : une attaque par oracle de compression CVE-2012-4929 découverte par Juliano Rizzo et Thai Duong ; Dans une attaque par oracle de compression, l'utilisation d'une compression de données adaptative sur un mélange de texte clair choisi et de texte clair inconnu peut entraîne...

CLZero

CLZero A project for fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors. About Thank you to @albinowax, @defparam and @d3d else this tool would not exist. Inspired by the tool Smuggler all attack gadgets adapted from Smuggler and...

CVE-2024-42461

Solution for ECDSA and EDDSA Signature Verification Problems Description Problems have been identified in the verification of ECDSA and EDDSA signatures in the Wycheproof project. Missing checks during the signature decoding stage allow adding or removing zero bytes, which affects the ability to...

killasa

killasa Test de vulnérabilité pour CVE-2016-1287 longueur de fragment IKE invalide dans Cisco ASA Négocie une SA IKEv2 avec la fragmentation Cisco activée, puis envoie deux fragments IKE, dont l'un a une longueur invalide de 1 octet...

xortool

xortool.py Un outil pour faire des analyses xor : deviner la longueur de la clé basée sur le nombre de caractères identiques deviner la clé basée sur la connaissance du caractère le plus fréquent Avis : xortool fonctionne désormais uniquement sur Python 3. L'ancienne version Python 2 est accessib...

Linux Distros Unpatched Vulnerability : CVE-2026-94633

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Dart bindings. This issue affect...