495 matches found
Shelter
Shelter Shelter — это полностью вооруженная техника обфускации сна, которая позволяет полностью зашифровать вашу полезную нагрузку в памяти с широким использованием ROP. Этот крейт обладает следующими характеристиками: Шифрование AES-128. Возможность шифрования всего PE. Удаление прав на выполнен...
goblin
libgoblin Документация https://docs.rs/goblin/ список изменений Использование Goblin требует rustc 1.85.0 редакция Rust 2024. Добавьте в ваш Cargo.toml dependencies goblin = "0.10" Возможности отличное название крейта zero-copy, кроссплатформенная, с учётом порядка байт реализация ELF64/32 — вау!...
boha
@agntn/puzzles Public crypto puzzles and bounties, as typed records. You ask for a puzzle, you get its address, its key material and what happened on chain. Why? Every puzzle thread has the same three things: the addresses, the prizes, and who solved what. Every scanner and tracker re-types them...
rustdllproxy
rustdllproxy Windows 애플리케이션용 프록시 DLL을 쉽게 생성하고 개발할 수 있는 Rust 크레이트 유틸리티입니다. 설치 cargo install rustdllproxy 호환성 이 크레이트는 현재 표준 DLL PE 형식만 지원합니다. 현재 제한 사항 사용자 지정 코드로 함수를 후킹할 때 함수 시그니처를 알아야 합니다 이는 Ghidra와 같은 디스어셈블러 및 리버스 엔지니어링 도구를 사용하여 확인할 수 있습니다. 명령어 Rustdllproxy는 두 가지 하위 명령어를 제공합니다: 명령어| 용도 ---|---...
lacuna-rs
lacuna-rs Спуфинг стека вызовов через ghost-frame + runtime indirect syscalls для Windows x64 — портировано на Rust. Портировано из LACUNA Chain lacunachain.c авторства Mohamed Alzhrani 0xmaz. lacuna-rs — это переиспользуемый крейт Rust, предоставляющий те же примитивы, что и оригинальный C TTP,...
vuke
vuke Research tool for analyzing and reproducing vulnerable Bitcoin key generation. Features Modular architecture - pluggable sources and transforms Multiple input sources Numeric ranges test weak seeds Wordlists brainwallet analysis Timestamps time-based PRNG exploitation Stdin streaming pipelin...
checkout-index
checkout-index - Воспроизведение CVE-2025-22620 Это код доказательства концепции для RUSTSEC-2025-0001 CVE-2025-22620, GHSA-fqmf-w4xh-33rh. Это тот же код, что и в уведомлении, но в виде Rust-проекта, включающего Cargo.toml и Cargo.lock. Этот репозиторий был полезен при написании уведомления, и я...
Fedora 43 : rust-lru / rust-lru0.16 (2026-332a62112c)
The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-332a62112c advisory. Update lru crate to version 0.18.4 and add a compat package for version 0.16. This fixes an obscure potential use-after-free issue: Rebuild tracker: Tenable...
[SECURITY] Fedora 43 Update: rust-hickory-net-0.26.2-1.fc43
Hickory-net is a safe and secure low-level DNS library. This is the foundational DNS protocol library used by the other higher-level Hickory DNS crates...
rustsec platforms/v4.2.0
RustSec Crates 🦀🛡️📦 The RustSec Advisory Database is a repository of security advisories filed against Rust crates published via crates.io. The advisory database itself can be found at: https://github.com/RustSec/advisory-db About this repository This repository contains a Cargo Workspace with all...
OPENSUSE-SU-2026:21782-1 Security update for aws-nitro-enclaves-cli
This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes bsc1274300. - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion...
rscrypto v0.9.0
rscrypto rscrypto is a Rust library of cryptographic primitives, hashes, password hashing, and checksums. One feature model controls all of them. Portable Rust is the reference implementation. SIMD and assembly backends make it faster on supported targets. Production builds do not depend on C, FF...
CVE-2026-78422
Subject::newforowner in the zbuspolkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer D-Bus type u, whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer D-Bus type i. Because of this type mismatch, polkit silently...
Linux Distros Unpatched Vulnerability : CVE-2026-77650
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency...
kas (>=0.3.0, <=0.10.1), kas-core (>=0.10.0, <=0.10.1) +3 more potentially affected by unknown CVE via stack_dst (0.6.1)
stackdst CARGO version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on stackdst and may be impacted: - kas =0.3.0, =0.10.0, =0.3.0, =0.3.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0272...
[SECURITY] Fedora 44 Update: rust-crates-io-0.41.0-1.fc44
Helpers for interacting with crates.io...
CVE-2026-77651
The arrayref crate 0.3.10 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution...
CVE-2026-77650
The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution...
CVE-2026-77650
The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution...
UBUNTU-CVE-2026-77650
The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution...