ghostport

Ghostport Ghostport es una herramienta sofisticada de suplantación de puertos diseñada para confundir y engañar a los escáneres de puertos. Es una implementación en Rust inspirada en el concepto de portspoof, que ofrece un mayor rendimiento y flexibilidad. Características Emulación dinámica de...

IronPE

IronPE - 用 Rust 编写的最小 Windows PE 手动加载器。 Rust PE 加载器 / 手动映射实现 IronPE 是一个用 Rust 编写的最小 Windows PE 手动加载器，支持 x86 和 x64 PE 文件。 该项目是我之前项目 dotNetPELoader 的 Rust 重实现 ，该项目用 C 实现了一个手动 PE 加载器。 IronPE 的目标是探索 Windows 内部如何加载可移植可执行文件 PE，并演示如何用 Rust 实现这一过程。 Waaaahhhhhhh! 如果您觉得这个项目有用或有趣，欢迎点个 ⭐！ 免责声明 本项目仅用于 教育和研究目的...

l4srs

l4srs Implementación en Rust de Log 4 Shell log4j - CVE-2021-44228 para compilar ejecuta cargo +nightly build Esta versión te permitirá construir clases de comando, servir dinámicamente un mini meterpreter que se ejecuta en un hilo de la aplicación Java explotada, y ejecutar los servidores LDAP y...

fusee-gelee

fusee-gelee Implementación en Rust del exploitFusée Gelée CVE-2018-6242 para procesadores Tegra. Plataformas actualmente compatibles: Linux mediante libusb. Instrucciones 1. Obtén la versión ejecutable del lanzador del exploit. 2. Obtén un payload adecuado para usar en el dispositivo objetivo. 3...

SPiCa

SPiCa 系统进程完整性 & 跨视图分析 "我要歌唱，所以闪耀吧，SPiCa……" SPiCa 是一款基于 eBPF 的 Linux 内核级恶意软件检测器，用 Rust 编写。其名称来源于初音未来的歌曲《SPiCa》及其所指的恒星——角宿一（室女座α星），即室女座中最亮的那颗星。肉眼看似一颗星的它，实际上是一对分光双星：两颗恒星相互绕转，如果不测量它们的光谱，就无法区分它们是独立的天体。SPiCa 将相同的原理应用于内核观测：通过物理上不同的机制，多个独立通道测量相同的内核状态，抑制其中一条通道的内核级恶意软件会在其他通道中暴露无遗。 免责声明： 本代码库中有相当一部分代码是借助 GL...

6cy

sixcy — .6cy 容器格式 一个 Rust 实现的 .6cy 归档格式，具有以下特性： 自描述块 ：每个块自带魔法字、版本、编解码器 UUID、大小和完整性校验和 强制完整性验证 ：每个块上 CRC32 头部校验 + BLAKE3 内容哈希 多种编解码器 ：Zstd（默认）、LZ4、Brotli、LZMA 和直通（none） AES-256-GCM 加密 ，使用 Argon2id 密钥派生 基于内容的分块 （Gear64 CDC），提升去重效果 Reed-Solomon 前向纠错 ，用于从丢失/损坏的块中恢复 Merkle 证明 ，用于高效的完整性验证 Shamir 秘密共享...

fips203

NCC Group: Estándar de Mecanismo de Encapsulación de Claves Basado en Retículos Modulares FIPS 203 El FIPS 203 Borrador Público Inicial Estándar de Mecanismo de Encapsulación de Claves Basado en Retículos Modulares está escrito en Rust puro para aplicaciones de servidor, escritorio, navegador y...

pairing

Optimizaciones para la criptografía basada en emparejamientos Este repositorio contiene el código Rust funcional que corresponde a una serie en curso de publicaciones de blog que cubren optimizaciones en criptografía basada en emparejamientos utilizando BLS12-381 como curva de referencia. Tenga e...

CVE-2021-4034-Rust

CVE-2021-4034-Rust Escalada de privilegios local LPE en Linux usando polkit-1 escrita en Rust. Instrucciones de compilación Instala Rust si aún no lo has hecho git clone https://github.com/deoxykev/CVE-2021-4034-Rust cd CVE-2021-4034-Rust rustup target add x8664-unknown-linux-musl cargo build...

openvas-scanner v23.50.24

OpenVAS Scanner This is the OpenVAS Scanner of the Greenbone Community Edition. It is used for the Greenbone Enterprise appliances and is a full-featured scan engine that executes a continuously updated and extended feed of Vulnerability Tests VTs. Releases All release files are signed with the...

CVE-2026-54496 Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness

ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad 5.0.0, halo2gadgets 0.5.0, orchard 0.14.0, zcashprimitives 0.28.0, and zcashd 6.20.0, the variable-base scalar multiplication gadget in halo2gadgets/src/ecc/chip/mul/incomplete.rs used assignadvice for the base point without a copy...

PT-2026-60502

Name of the Vulnerable Software and Affected Versions Buffa versions prior to 0.7.0 Description A soundness bug in the OwnedView type allows safe Rust code to trigger a use-after-free. The OwnedView::decode constructor transmutes a borrowed slice to &'static u8, and the Deref implementation expos...

CVE-2026-46543

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.5.0, a remote peer can crash any full node by sending a RequestBatchSet message containing the genesis block's hash. The handler calls getepochchunks which iterates...

PT-2026-49122

This crate provides Rust bindings to ML-KEM FIPS 203 via C implementations from PQClean. The PQClean project is being archived in or after July 2026 see PQClean/PQClean604, after which no further security patches or bug fixes will be applied to the upstream implementations. As a result, this crat...

[SECURITY] Fedora 44 Update: uv-0.11.15-1.fc44

An extremely fast Python package and project manager, written in Rust. Highlights: =E2=80=A2 A single tool to replace pip, pip-tools, pipx, poetry, pyenv, twi ne, virtualenv, and more. =E2=80=A2 10-100x faster than pip. =E2=80=A2 Provides comprehensive project management, with a universal lockf...

[SECURITY] Fedora 43 Update: rust-astral-tokio-tar-0.6.2-1.fc43

A Rust implementation of an async TAR file reader and writer. This library does not currently handle compression, but it is abstract over all I/O readers and writers. Additionally, great lengths are taken to ensure that the entire contents are never required to be entirely resident in memory all ...

zebra 数据伪造问题漏洞

Zebra is an open-source Zcash implementation built with Rust by the Zcash Foundation. Versions of Zebra prior to 4.4.0 had a data forgery vulnerability, which stemmed from insufficient error handling when sighash types were invalid, potentially leading to consensus splits...

BIT-THRIFT-2026-43868 Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

CVE-2026-43868 Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

CVE-2026-43868

A Memory Allocation with Excessive Size Value vulnerability (CWE-789) exists in Apache Thrift versions prior to 0.23.0 . This flaw is caused by the software handling excessive size values during memory allocation. Impact and specific exploit details are not provided in the documents. Users are re...