LLM4Decompile

📊 Resultados | 🤗 Modelos | 🚀 Inicio rápido | 📚 HumanEval-Decompile | 📎 Citación | 📝 Paper | 🖥️ Colab | ▶️ YouTube Ingeniería inversa: descompilación de código binario con grandes modelos de lenguaje Updates 2025-10-04: Publicación de SK²Decompile: descompilación binaria de dos fases basada en LLM,...

DarkAgent

Esta es una herramienta de administración remota de código abierto, iniciada/escrita originalmente por DragonHunter en http://www.hackforums.net/showthread.php?tid=708624 Desde entonces, él ha seguido adelante y el código fuente y el alojamiento del proyecto han desaparecido, por lo que, al ser d...

krie

KRIe KRIe is a research project that aims to detect Linux Kernel exploits with eBPF. KRIe is far from being a bulletproof strategy: from eBPF related limitations to post exploitation detections that might rely on a compromised kernel to emit security events, it is clear that a motivated attacker...

POC-CVE-2018-0114

CVE-2018-0114 POC Una vulnerabilidad en la librería de código abierto node-jose de Cisco, anterior a la versión 0.11.0, podría permitir a un atacante remoto no autenticado volver a firmar tokens utilizando una clave incrustada dentro del propio token. La vulnerabilidad se debe a que node-jose sig...

POC-CVE-2018-0114

POC-CVE-2018-0114 Este repositorio contiene el PoC de un exploit para node-jose A partir de la última fusión root@kitploit: python lib: base64,urllib,rsa,sys...

CVE-2018-0114

CVE-2018-0114 python2.7 script for JWT generation CVE-2018-0114 A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following...

powersap

PowerSAP PowerSAP is a simple powershell re-implementation of popular & effective techniques of all public tools such as Bizploit, Metasploit auxiliary modules, or python scripts available on the Internet. This re-implementation does not contain any new or undisclosed vulnerability. PowerSAP allo...

nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service

A heap use-after-free vulnerability in the Node.js HTTP/2 component allows a remote attacker to crash the application, causing a denial of service. This is triggered by an unexpected re-entrant call to nghttp2sessionmemsend while nghttp2sessionmemrecv is still executing...

nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service

A heap use-after-free vulnerability in the Node.js HTTP/2 component allows a remote attacker to crash the application, causing a denial of service. This is triggered by an unexpected re-entrant call to nghttp2sessionmemsend while nghttp2sessionmemrecv is still executing...

nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service

A heap use-after-free vulnerability in the Node.js HTTP/2 component allows a remote attacker to crash the application, causing a denial of service. This is triggered by an unexpected re-entrant call to nghttp2sessionmemsend while nghttp2sessionmemrecv is still executing...

TwoMillion-Machine-Writeup

Acerca de la máquina TwoMillion es una máquina Linux de dificultad Easy que fue lanzada para celebrar la llegada de 2 millones de usuarios en HackTheBox. La máquina incluye una versión antigua de la plataforma HackTheBox que contiene el antiguo código de invitación pirateable. Después de hackear ...

CVE-2018-0114

CVE-2018-0114 before 0.11.0 unathenticated remote attacker can re-sign using a key embeded in token. https://www.cvedetails.com/cve/CVE-2018-0114/...

CVE-2026-47423-dompurify-xss-detector

DOMPurify re-clone logic flaw. Instead of relying on easily stripped source comments or version variables, this tool performs logic fingerprinting on minified production JavaScript bundles to identify unpatched allowed-tag layouts. Vulnerability Summary In DOMPurify versions up to 3.4.4, the...

fim-ebpf

FIM-eBPF: File Integrity Monitoring with eBPF A lightweight eBPF program to monitor file creation and modification events on Linux. This tool leverages eBPF Extended Berkeley Packet Filter to trace file operations directly from the kernel, providing high-performance monitoring with minimal...

smt878u-ionstack-poc

smt878u-ionstack-poc Pure-C, host-assisted re-root proof of concept for Samsung Galaxy Tab S7 SM-T878U / gts7l against CVE-2026-43499 IonStack / GhostLock. The runtime chain uses native C/ELF components only. It does not require Python, Java, DEX, appprocess, or a JVM on the Android target. ADB i...

CVE-2026-78693

ash_graphql (ash-project, Elixir/Erlang) is vulnerable to incomplete error-message redaction . In AshGraphql.Errors, the configured error_handler output is merged with the pre-handler path via Map.put_new(handled, :path, path), which re-injects the original path even when a sanitizing handler rem...

CVE-2026-82367

CVE-2026-82367 is a re-entrant data-exposure bug in ash_graphql (ash-project), affecting versions 1.4.0 through before 1.11.0 . The root cause lies in AshGraphql.Subscription.Batcher.do_send/5, which reads and deletes the process-dictionary key :batch_resolved without namespacing it per run. On t...

CVE-2026-82455

RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction root, extracted files that appear to be written under the destination directory can instead be writt...

SoliditySecurity

Что это такое Этот пост задуман как относительно подробное и актуальное вводное руководство, описывающее прошлые ошибки, которые совершали разработчики Solidity, чтобы помочь будущим разработчикам не повторять историю. Содержание 1. Re-Entrancy Уязвимость Методы предотвращения Реальный пример: Th...

CVE-2026-56848

CVE-2026-56848 NVD-Beschreibung Ein Fehler in der HTTP/2-Verarbeitung von Node.js ermöglicht es, nghttp2sessionmemsend reentrant aufzurufen, während nghttp2sessionmemrecv ausgeführt wird, was zu einem Heap-Use-after-Free führt. Diese Schwachstelle betrifft Node.js 26.x, 24.x und 22.x. Hinweis: Di...