6cy

sixcy — .6cy Container Format A Rust implementation of the .6cy archive format featuring: Self-describing blocks : Every block carries its own magic, version, codec UUID, sizes, and integrity checksums Mandatory integrity verification : CRC32 header checks + BLAKE3 content hashes on every block...

SPiCa

SPiCa System Process Integrity & Cross-view Analysis "I'm going to sing, so shine bright, SPiCa..." SPiCa is an eBPF-based Linux rootkit detector written in Rust. The name comes from the Hatsune Miku song SPiCa and the star it references — Spica Alpha Virginis, the brightest point in Virgo. What...

IronPE

IronPE - Minimal Windows PE manual loader written in Rust. Rust PE Loader / Manual Mapping Implementation IronPE is a minimal Windows PE manual loader written in Rust for both x86 and x64 PE files. This project is a Rust reimplementation of my previous project dotNetPELoader , which implemented a...

fusee-gelee

fusee-gelee Rust implementation of theFusée Gelée exploit CVE-2018-6242 for Tegra processors. Currently supported platforms: Linux via libusb. Instructions 1. Obtain executable version of the exploit launcher. 2. Obtain a payload suitable for use on the target device. 3. Execute the launcher,...

l4srs

l4srs Rust implementation of the Log 4 Shell log 4 j - CVE-2021-44228 to build run cargo +nightly build This version will let you build command classes, dynamically serve a mini meterpreter that runs in a thread of the exploited Java app, and runs the LDAP and HTTP servers. This version servers...

ghostport

Ghostport Ghostport는 포트 스캐너를 혼란시키고 오도하도록 설계된 정교한 포트 스푸핑 도구입니다. portspoof의 개념에서 영감을 받은 Rust 구현체로, 향상된 성능과 유연성을 제공합니다. 기능 동적 포트 에뮬레이션 : 다양한 신뢰성 있는 서비스 시그니처로 포트 스캔에 응답합니다. 사용자 정의 시그니처 : 간단한 텍스트 파일을 통해 서비스 시그니처를 쉽게 추가하거나 수정할 수 있습니다. 고성능 : Rust와 Tokio로 구축되어 효율적인 비동기 연결 처리를 제공합니다. 유연한 로깅 : 다양한 사용 사례를 위...

fips203

NCC Group: FIPS 203 모듈 격자 기반 키 캡슐화 메커니즘 표준 FIPS 203 초기 공개 초안 서버, 데스크톱, 브라우저 및 임베디드 애플리케이션을 위해 순수 Rust로 작성된 모듈 격자 기반 키 캡슐화 메커니즘 표준입니다. 소스 저장소에는 벤치마킹, 임베디드 타깃, 상수 시간 통계 측정, 퍼징, WASM 실행, C FFI 및 Python 바인딩을 보여주는 예제가 포함되어 있습니다. 이 크레이트는 최소한의 일반적인 의존성만을 사용하며, unsafe 코드 없이 순수 Rust로 FIPS 203 초안 표준을 구현합니다...

pairing

페어링 기반 암호화를 위한 최적화 이 저장소는 BLS12-381을 참조 곡선으로 사용하는 페어링 기반 암호화의 최적화를 다루는 연재 중인 블로그 포스트 시리즈에 해당하는 작동하는 Rust 코드를 포함합니다. 참고: 이 코드는 교육 목적으로 작성되었으며, 보안 감사를 거치지 않았고 프로덕션에 적합하지 않습니다. 사용에 따른 책임은 본인에게 있습니다. Montgomery 산술 1/2 이 포스트는 맥락, 대안, 이론, 그리고 일반적인 Big Integer 구현보다 9배 더 빠른 Rust의 실용적인 작동 코드를 포함하여...

CVE-2021-4034-Rust

CVE-2021-4034-Rust Rust로 작성된 polkit-1을 이용한 Linux LPELocal Privilege Escalation 도구입니다. 빌드 방법 아직 Rust를 설치하지 않았다면 설치하세요 root@kitploit: git clone https://github.com/deoxykev/CVE-2021-4034-Rust cd CVE-2021-4034-Rust rustup target add x8664-unknown-linux-musl cargo build --release 취약점 확인 root@kitploit:...

openvas-scanner v23.50.24

OpenVAS Scanner This is the OpenVAS Scanner of the Greenbone Community Edition. It is used for the Greenbone Enterprise appliances and is a full-featured scan engine that executes a continuously updated and extended feed of Vulnerability Tests VTs. Releases All release files are signed with the...

PT-2026-60502

Name of the Vulnerable Software and Affected Versions Buffa versions prior to 0.7.0 Description A soundness bug in the OwnedView type allows safe Rust code to trigger a use-after-free. The OwnedView::decode constructor transmutes a borrowed slice to &'static u8, and the Deref implementation expos...

CVE-2026-46543

Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to version 1.5.0, a remote peer can crash any full node by sending a RequestBatchSet message containing the genesis block's hash. The handler calls getepochchunks which iterates...

PT-2026-49122

This crate provides Rust bindings to ML-KEM FIPS 203 via C implementations from PQClean. The PQClean project is being archived in or after July 2026 see PQClean/PQClean604, after which no further security patches or bug fixes will be applied to the upstream implementations. As a result, this crat...

[SECURITY] Fedora 44 Update: uv-0.11.15-1.fc44

An extremely fast Python package and project manager, written in Rust. Highlights: =E2=80=A2 A single tool to replace pip, pip-tools, pipx, poetry, pyenv, twi ne, virtualenv, and more. =E2=80=A2 10-100x faster than pip. =E2=80=A2 Provides comprehensive project management, with a universal lockf...

[SECURITY] Fedora 43 Update: rust-astral-tokio-tar-0.6.2-1.fc43

A Rust implementation of an async TAR file reader and writer. This library does not currently handle compression, but it is abstract over all I/O readers and writers. Additionally, great lengths are taken to ensure that the entire contents are never required to be entirely resident in memory all ...

zebra 数据伪造问题漏洞

Zebra is an open-source Zcash implementation built with Rust by the Zcash Foundation. Versions of Zebra prior to 4.4.0 had a data forgery vulnerability, which stemmed from insufficient error handling when sighash types were invalid, potentially leading to consensus splits...

BIT-THRIFT-2026-43868 Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

CVE-2026-43868 Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

CVE-2026-43868

CVE-2026-43868 concerns a memory allocation with an excessive size value in Apache Thrift. Affected: Thrift versions prior to 0.23.0 (per initial description). Exploitation could cause high memory usage and denial of service; no in-wild exploit details provided. Remediation: upgrade to Apache Thr...

CVE-2026-43868 Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern

Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...