lacuna-rs

lacuna-rs Спуфинг стека вызовов через ghost-frame + runtime indirect syscalls для Windows x64 — портировано на Rust. Портировано из LACUNA Chain lacunachain.c авторства Mohamed Alzhrani 0xmaz. lacuna-rs — это переиспользуемый крейт Rust, предоставляющий те же примитивы, что и оригинальный C TTP,...

rustdllproxy

rustdllproxy Windows 애플리케이션용 프록시 DLL을 쉽게 생성하고 개발할 수 있는 Rust 크레이트 유틸리티입니다. 설치 cargo install rustdllproxy 호환성 이 크레이트는 현재 표준 DLL PE 형식만 지원합니다. 현재 제한 사항 사용자 지정 코드로 함수를 후킹할 때 함수 시그니처를 알아야 합니다 이는 Ghidra와 같은 디스어셈블러 및 리버스 엔지니어링 도구를 사용하여 확인할 수 있습니다. 명령어 Rustdllproxy는 두 가지 하위 명령어를 제공합니다: 명령어| 용도 ---|---...

vuke

vuke Research tool for analyzing and reproducing vulnerable Bitcoin key generation. Features Modular architecture - pluggable sources and transforms Multiple input sources Numeric ranges test weak seeds Wordlists brainwallet analysis Timestamps time-based PRNG exploitation Stdin streaming pipelin...

goblin

libgoblin 문서 https://docs.rs/goblin/ 변경 로그 사용법 Goblin은 rustc 1.85.0 Rust 2024 에디션이 필요합니다. Cargo.toml에 추가하세요 dependencies goblin = "0.10" 기능 멋진 크레이트 이름 제로-카피, 크로스-플랫폼, 엔디안 인식, ELF64/32 구현 - 와우! 제로-카피, 크로스-플랫폼, 엔디안 인식, 32/64비트 Mach-o 파서 - 대단해! PE 32/64비트 파서 - 빙! Unix 및 BSD 스타일 아카이브 파서 후자는 @willglyn...

Shelter

Shelter Shelter는 완전한 무장형 수면 난독화 기법으로, ROP를 광범위하게 사용하여 메모리 내 페이로드를 완전히 암호화할 수 있습니다. 이 크레이트는 다음과 같은 특징을 가지고 있습니다: AES-128 암호화. 전체 PE 암호화 기능. 수면 중 실행 권한 제거. APC/HWBP/타이머 미사용, 오직 ROP만을 사용하여 난독화 달성. 호출 스택 스푸핑을 위해 Unwinder 사용 후 ROP 체인 실행. 다양한 상황에 적응할 수 있는 여러 실행 방법. 기타 OPSEC 고려 사항: DInvokers, 간접 시스템 콜,...

boha

@agntn/puzzles Public crypto puzzles and bounties, as typed records. You ask for a puzzle, you get its address, its key material and what happened on chain. Why? Every puzzle thread has the same three things: the addresses, the prizes, and who solved what. Every scanner and tracker re-types them...

checkout-index

checkout-index - CVE-2025-22620 재현기 이것은 RUSTSEC-2025-0001 CVE-2025-22620, GHSA-fqmf-w4xh-33rh에 대한 개념 증명 코드입니다. 이는 권고에 있는 코드와 동일하지만, Cargo.toml과 Cargo.lock이 포함된 Rust 프로젝트 형태입니다. 이 저장소는 권고를 작성하는 동안 유용했으며, 가끔 다른 사람들에게도 유용할 수 있을 것이라고 생각했습니다. 그러나 이것은 권고보다 관심이 훨씬 적을 것으로 예상하며, 또한 권고의 정보를 대체하는 것은 아닙니다. 권...

Fedora 43 : rust-lru / rust-lru0.16 (2026-332a62112c)

The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-332a62112c advisory. Update lru crate to version 0.18.4 and add a compat package for version 0.16. This fixes an obscure potential use-after-free issue: Rebuild tracker: Tenable...

[SECURITY] Fedora 43 Update: rust-hickory-net-0.26.2-1.fc43

Hickory-net is a safe and secure low-level DNS library. This is the foundational DNS protocol library used by the other higher-level Hickory DNS crates...

rustsec platforms/v4.2.0

RustSec Crates 🦀🛡️📦 The RustSec Advisory Database is a repository of security advisories filed against Rust crates published via crates.io. The advisory database itself can be found at: https://github.com/RustSec/advisory-db About this repository This repository contains a Cargo Workspace with all...

OPENSUSE-SU-2026:21782-1 Security update for aws-nitro-enclaves-cli

This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes bsc1274300. - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion...

rscrypto v0.9.0

rscrypto rscrypto is a Rust library of cryptographic primitives, hashes, password hashing, and checksums. One feature model controls all of them. Portable Rust is the reference implementation. SIMD and assembly backends make it faster on supported targets. Production builds do not depend on C, FF...

CVE-2026-78422

Subject::newforowner in the zbuspolkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer D-Bus type u, whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer D-Bus type i. Because of this type mismatch, polkit silently...

Linux Distros Unpatched Vulnerability : CVE-2026-77650

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency...

kas (>=0.3.0, <=0.10.1), kas-core (>=0.10.0, <=0.10.1) +3 more potentially affected by unknown CVE via stack_dst (0.6.1)

stackdst CARGO version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on stackdst and may be impacted: - kas =0.3.0, =0.10.0, =0.3.0, =0.3.0, =0.9.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0272...

[SECURITY] Fedora 44 Update: rust-crates-io-0.41.0-1.fc44

Helpers for interacting with crates.io...

CVE-2026-77651

The arrayref crate 0.3.10 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution...

CVE-2026-77650

The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution...

CVE-2026-77650

The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution...

UBUNTU-CVE-2026-77650

The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution...