ME2-Writeup

Reverse Engineering ME2's USB with a Heat Gun and a Knife Background In 2024, bjiru uploaded a video about the ME2 handheld device, a toy produced around 2008 that featured the ability to use USB to synchronize points and gems between your device and an online world. The game was extremely niche,...

ipmi — Updated!

I wrote some software to explore IPMI; here are some of results. I thought I'd do the usual detect, get data, and audit sort of cycle. Each of these turned out to be fairly interesting problem on its own, at least to me. BTW/FYI - I released a new tool to explore IPMI -...

Grav: Twig sandbox config exfiltration via grav.offsetGet + dump filter (CVE-2026-44738 bypass)

Summary The Twig content sandbox replaces config with the redacted SandboxConfig facade and strips Config::get/toArray from the method allowlist GHSA-j274-39qw-32c9, so editor content can't read config secrets via config. That's bypassable: grav is the raw container, offsetget is allow-listed on...

GHSA-MC5Q-6HPJ-RP7J Grav: Twig sandbox config exfiltration via grav.offsetGet + dump filter (CVE-2026-44738 bypass)

Summary The Twig content sandbox replaces config with the redacted SandboxConfig facade and strips Config::get/toArray from the method allowlist GHSA-j274-39qw-32c9, so editor content can't read config secrets via config. That's bypassable: grav is the raw container, offsetget is allow-listed on...

Grav: Decompression Bomb via ZipArchiver - Missing Extraction Limits

Summary ZipArchiver::extract lacks limits on uncompressed size, file count, and nesting depth, creating a distinct, unpatched variant of the GHSA-2vcx-h8p2-9pg9 zip bomb vulnerability. While the parallel method Installer::unZip received comprehensive limits, ZipArchiver::extract remains...

GHSA-928X-9MPW-8H56 Grav: Decompression Bomb via ZipArchiver - Missing Extraction Limits

Summary ZipArchiver::extract lacks limits on uncompressed size, file count, and nesting depth, creating a distinct, unpatched variant of the GHSA-2vcx-h8p2-9pg9 zip bomb vulnerability. While the parallel method Installer::unZip received comprehensive limits, ZipArchiver::extract remains...

nimux v1.0.5

Pure-Nim network enumeration and remote execution toolkit nimux - Native Operator Toolkit nimux is a native command surface for authorized security assessments. It combines network enumeration, lightweight web discovery, credential validation, Active Directory operations, Kerberos workflows, remo...

burp-intruder-payloads

Burp Intruder Payloads You're welcome, hacker! About T...

netsentryx — Updated!

NetSentryx PRO 🛡️ AI-Driven, High-Performance Real-Time Network Observability & Threat Detection Engine NetSentryx PRO is a next-generation, event-driven network monitoring and threat intelligence platform. Combining rule-based signatures with a PyTorch Deep Autoencoder, it provides sub-10ms packe...

AMBER-ICI v5.0.0

AMBER ICI v5 AMBER ICI AMBER Investigative Command Interface is a local-first browser interface for investigative and analytical workflows powered by a local Ollama server. It includes: A single-model Analyst Console and multi-model Parallel execution A user-defined agent chain driven from the ma...

jdvrif — Updated!

jdvrif jdvrif is a fast, easy-to-use steganography command-line tool for concealing and extracting any file type via a JPG image. There is also a Web edition, which you can use immediately, as a convenient alternative to downloading and compiling the CLI source code. Web file uploads are limited ...

RedTeam_toolkit

RedTeam Toolkit Note: Only legal activities should be conducted with this project. Red Team Toolkit is an Open-Source Django Offensive Web-App containing useful offensive tools used in the red-teaming together for the security specialist to identify vulnerabilities. The cybersecurity open-source...

credential-attacks-toolkit — Updated!

CredAttack — Credential Attacks Toolkit ⚠️ LEGAL NOTICE — Authorised security testing ONLY. Using this tool against systems you do not own or have explicit written permission to test is illegal under the Computer Fraud and Abuse Act US, Computer Misuse Act UK, and equivalent laws worldwide. See...

PQCrypto-LWEKE

FrodoKEM : Encapsulation de clé basée sur le problème Learning with Errors Cette bibliothèque C implémente FrodoKEM , un protocole d'encapsulation de clé KEM sécurisé IND-CCA basé sur le problème bien étudié Learning with Errors LWE 1,3, qui lui-même est étroitement lié à des problèmes conjecturé...

CVE-2026-22679

CVE-2026-22679 : Exécution de code à distance non authentifiée dans Weaver E-cology via le point de terminaison de débogage dubboApi -critical TL;DR Weaver E-cology 10.0 antérieur au build 20260312 contient une vulnérabilité critique d'exécution de code à distance non authentifiée dans le point d...

Security Bulletin: The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities in axios

Summary The IBM SPSS Collaboration and Deployment Services impacted by multiple vulnerabilities in axios. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-67312 DESCRIPTION: axios versions from 0.28.0 before 0.33.0 and from 1.0.0 before 1.18.0 contain...

trufflehog v3.97.2

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

USTP-Secure

USTP USTP means UDP Speedy Transmission Protocol. USTP keeps the same authenticated transport model, but the project name is now simply USTP again. By default, USTP uses AEAD for DATA. It also supports an optional negotiated cleartext + HMAC mode for DATA, where payload bytes are visible on the...

http2-security-lab

🦣 TuskMads HTTP/2 Security Lab A from-scratch HTTP/2 attack simulation and defense lab built in pure Python. What This Does Simulates 3 real-world HTTP/2 attacks against a vulnerable server, then demonstrates 5 defense layers blocking all 3 on a hardened server. Attacks Implemented Attack|...

cve-2026-31431

CVE-2026-31431 — Dépôt de recherche « Copy Fail » Une élévation de privilèges locale Linux fiable à 100 % affectant toutes les distributions grand public depuis 2017. Un bug logique dans authencesn, enchaîné via AFALG et splice en une écriture de 4 octets dans le cache de pages — exploitable...