3069844 matches found
libsodium
Sodium은 암호화, 복호화, 디지털 서명 및 안전한 비밀번호 해싱을 포함한 다양한 암호화 연산을 제공하는 사용하기 쉬운 소프트웨어 라이브러리입니다. 이는 NaCl의 휴대 가능하고, 크로스 컴파일 가능하며, 설치 및 패키징이 가능한 포크입니다. API 호환성을 유지하면서 libsodium은 기능을 확장하여 사용성을 개선하고 안전한 애플리케이션 개발을 단순화합니다. 주요 기능 암호화 및 복호화: 최신 알고리즘으로 데이터를 안전하게 암호화하고 복호화합니다. 디지털 서명: 서명을 생성하고 검증하여 데이터의 신뢰성을 보장합니다. 크...
cve-2021-24499
This repository does not have a README...
CVE-2026-50131
CVE-2026-50131 Fedify incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allowed special-use IPv4 ranges. Primary advisory: GHSA-xw9q-2mv6-9fr8 Official CVE record: CVE-2026-50131 Researcher credit: @chaitanyagarware At a Glance...
bitlocker-bypass-research
BitLocker Bypass Research Personal security research project — bypassing BitLocker full disk encryption using CVE-2023-21563 BitPixie. What This Is In October 2025, I did a physical laptop recovery assessment on a corporate laptop with BitLocker enabled. The employee forgot their password and the...
CVE-2021-4034
CVE-2021-4034 My research about CVE-2021-4034...
CVE-2020-12800
CVE-2020-12800 POC Script for CVE-2020-12800: RCE through Unrestricted File Type Upload Vulnerable plugin for testing hosted at: https://mega.nz/file/aQUClQKCZYeiTYSrPuRnwwlRavy4cqfEXs34Tkq6KQig2RcOas Pentester Academy lab...
EaST
«EAST» – «Exploits And Security Tools» penetration testing framework. 1. Overview Pentest framework environment is the basis of IT security specialist’s toolkit. This software is essential as for learning and improving of knowledge in IT systems attacks and for inspections and proactive...
CrystalPotato
CrystalPotato Crystal port of GodPotato, a local privilege escalation from accounts with SeImpersonatePrivilege to SYSTEM. It works by abusing the DCOM OXID Resolver and named pipe impersonation. Windows APIs are resolved dynamically and invoked through indirect syscall stubs, all strings are...
CrabCrypt
If you find this GitHub repo useful, please consider giving it a star! ⭐️ CrabCrypt🦀🔐 CrabCrypt is a secure file encryption tool with GUI, designed for effortlessly encrypting and decrypting any file. With AES encryption and a sleek Tkinter interface, CrabCrypt ensures your files remain...
linux-security-audit
Linux Security Audit Tool Linux Security Audit Tool based on the CIS - Red Hat Enterprise Linux 8 Benchmark v3.0.0 If you find this helpful, please the "star" 🌟 to support further improvements. Table of Contents 1. Features 2. Preview 3. Result-Log 4. Supported OS 5. Prerequisites 6. Notes...
NetLlix
NetLlix A project created with an aim to emulate and test exfiltration of data over different network protocols. The emulation is performed w/o the usage of native API's. This will help blue teams write correlation rules to detect any type of C2 communication or data exfiltration. Currently, this...
CVE-2024-24919
Takes in a ip list and you can specify threads with -t python3 exploit.py -i ips.txt -t 15 -o output.txt For educational purposes only...
MinIO_CVE-2023-28432_EXP
This repository does not have a README...
cve-2024-3400
This repository does not have a README...
CVE-2024-24919
This repository does not have a README...
CVE-2022-24342
CVE-2022-24342 JetBrains TeamCity - account takeover via CSRF in GitHub authentication PoC CVE-2022-24342 Requirements Usage How does it work? GitHub OAuth2: query parameters processing order CVE-2022-24342: HTTP requests flow Requirements JetBrains TeamCity If you run the exploit on the local...
squidmagic
Squidmagic is a tool designed to analyze a web-based network traffic to detect central command and control C&C servers and Malicious site, using Squid proxy server and Spamhaus. Install dependencies root@kitploit: pip install -r requirements.txt Usage root@kitploit: python squidmagic.py...
spring-RCE-CVE-2022-22965
Vulnerability Overview Recently, Spring released a major CVE vulnerability. The CVE information states: "A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution RCE via data binding. The specific exploit requires the application to run on Tomcat as ...