libhtp

LibHTP End-of-Life Announcement July 7, 2026 Following the End of Life of Suricata 7, the libhtp project will no longer be maintained and updated by OISF. Suricata 8 and beyond use a fork of the libhtp code that has been converted and rewritten to Rust. It is available under the same license from...

cve-2020-1054

CVE-2020-1054 CVE-2020-1054 LPE for Windows 7x64 Usage Install Rust if you need it https://www.rust-lang.org/learn/get-started Compile the code: cargo build --release Copy the .exe from target/release/ to target and execute. Windows KB If a specific Windows KB is not installed slight changes to t...

blackpill

BlackPill BlackPill is a stealthy Linux rootkit made in Rust. Features The rootkit is composed of multiple modules talking about Rust modules, not kernel modules: defense evasion : hide files, processes, network connections, etc. hooking : hook syscalls and IDT hypervisor : create a virtual machi...

pmanager

Pmanager Demo Descrizione Archivia e recupera le tue password da un database offline sicuro. Verifica se le tue password sono state precedentemente esposte per prevenire attacchi mirati di riutilizzo delle password. Perché sviluppare un altro gestore di password? Questo progetto è nato inizialmen...

CVE-2026-108269

Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-TLS challenge verifiers accepted quote ReportData that was bound to the certificate public key and client nonce but not to the active TLS session before...

VISION-ProcMon

About VISION-ProcMon is a tool dedicated for malware analysis and specifically when performing behavioral analysis. VISION-ProcMon is using a combination of the rust and web technologies in order to provide a fast and better visualization of the behavior of a malware after capturing its activity...

CVE-2012-2982

This PoC exploit for CVE-2012-2982 was written as an exercise for the "Intro to PoC scripting" Room on TryHackMe. The room can be found here: https://tryhackme.com/room/intropocscripting I was originally going to use Python to follow along, but decided to practice my Rust skills instead. I also s...

clroxide

ClrOxide ClrOxide is a rust library that allows you to host the CLR and dynamically execute dotnet binaries. I wanted to call it Kepler for no particular reason, but there's already a package named kepler in cargo. : I have been working on hosting CLR with rust on and off for 2 years now, and...

qscan

Quick Network Scanner Quick Network Scanner project includes: qscan: a rust library for asynchronous network ports scanning see README. qsc: a command line utility built on top of qscan library for quick network scanning activities see README. NOTE: in order to properly use the library and the...

IDARustDemangler

IDA Rust Demangler This project provides a script that demangles Rust function names and normalize it for IDA, making it easier to read and understand the code. Requirements Python 3.x IDA Pro 7.x or later Dependencies The demangling algorithm used in this script is based on rs-dml binary so make...

matrix-rs

Windows Kernel Blue Pill Type-2 Hypervisor in Rust Codename: Matrix Blog: https://memn0ps.github.io/hypervisors-for-memory-introspection-and-reverse-engineering/ A lightweight, memory-safe, and blazingly fast Rust-based type-2 research hypervisor with hooks for Intel VT-x, focused on studying the...

cve-2018-16763-rust

Rust exploit implementation for cve-2018-16763...

EUVD-2026-96019

Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-TLS challenge verifiers accepted quote ReportData that was bound to the certificate public key and client nonce but not to the active TLS session before...

CVE-2026-108269

Prior to version 0.5.0 , the Rust and Go challenge verifiers in Remote Attestation TLS Clients are vulnerable to an Origin Validation Error (CWE-346). The flaw exists because the verifiers accepted quote ReportData bound only to the certificate public key and client nonce, rather than the active ...

Roxy

Roxy Minimal terminal-based HTTP/HTTPS intercepting proxy. https://github.com/user-attachments/assets/94f9c9ae-5842-4b19-9f5b-84dedb9430e6 Features · Installation · HTTPS support · Usage · How it works Overview Roxy is a lightweight intercepting proxy for HTTP and HTTPS with a terminal user...

REC2

:shipit: Information: REC2 is an old personal project early 2023 that I didn't continue development on. It's part of a list of projects that helped me to learn Rust. The code is probably considered obsolete and not in its best form. Maybe I'll pick up where I left off roadmap. However, REC2 is...

waybend

Waybend Self-hosted SSRF infrastructure for redirect chains, exact protocol payloads, callbacks, DNS rebinding, and request evidence. One Rust binary provides the web workbench, JSON API, authoritative DNS responder, and stdio MCP interface. Install Install with Homebrew: brew install...

macos-UnifiedLogs

macos-unifiedlogs A simple Rust library that can help parse the macOS Unified Log files. Unified Logs were introduced in macOS version 10.12 Sierra, 2016. Part of Apple's goal to create a unified log format for all Apple products. They exist on macOS, iOS, watchOS, tvOS. The Unified Logs replace...

rust-reversing-workshop-recon-2024

Reversing Rust Binaries: One step beyond strings - REcon 2024 Workshop This repository contains the supplementary files for the Reversing Rust Binaries: One step beyond strings workshop at REcon 2024, presented on June 28, 2024. During the presentation, we will be building and reversing a very...

radar

Radar Radar is a small but efficient network scanner written in Rust heavily inspired by masscan. These are the main features: Userspace TCP, UDP, DHCP and ARP implementations, thanks to pnet Being asynchronous Randomized IP/ports scanning with no pre-allocation/shuffling Rate limiting Monitor mo...