social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

pbtk

pbtk - Reverse engineering Protobuf apps Protobuf is a serialization format developed by Google and used in an increasing number of Android, web, desktop and more applications. It consists of a language for declaring data structures , which is then compiled to code or another kind of structure...

HDI-GraphRAG-Attack

Hop-Decayed Influence: New Vulnerabilities of Structural Auxiliary Indexing in GraphRAG Pipelines with LLM Jisung Park, John Le, Heath Cooper Institute of Cybersecurity and Cryptology iC², University of Wollongong IFIP SEC 2026 jspacific0307/HDI-graphragpipeline...

Crystal-Loaders

Crystal Loaders This repo contains a couple of PIC loaders and a custom sleepmask COFF for use with Cobalt Strike. They are basic implementations where custom evasion tradecraft must be weaved in using Crystal Palace. Usage 1. Download the Crystal Palace Release distrubtion. 2. Extract the tar...

allthingsida

Operating system MS Windows PEB/LDRDATATABLEENTRY enumeration scripts PEB/TEB structures x64 PEB/TEB structures x86...

COM-Code-Helper

COM-Code-Helper Two IDAPython Scripts help you to reconstruct Microsoft COM Component Object Model Code Especially malware reversers will find this useful, as COM Code is still regularly found in malware. ClassAndInterfaceToNames.py This IDAPython script scans an idb file for class and interfaces...

CVE-2023-36900

CVE-2023-36900 About this vulnerability: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36900. Writeup Imhex pattern for .blf extension Header with declaration of CLFS structures Denial-of-Service proof of concept Imhex pattern for blf extension Before: After: The pattern is far...

DriverBuddy

Quickstart DriverBuddy Installation Instructions 1. Copy DriverBuddy folder and DriverBuddy.py file into the IDA plugins folder C:\Program Files x86\IDA 6.8\plugins or wherever you installed IDA DriverBuddy Usage Instructions 1. Start IDA and open a Windows kernel driver 2. Go to Edit-Plugins and...

cve-2024-23113-poc

CVE-2024-23113-poc CVE-2024-23113 is a vulnerability discovered in the Linux Kernel , classified as an arbitrary code execution vulnerability that affects the bpf Berkeley Packet Filter subsystem. Specifically, this vulnerability affects objects of the bpfprog type in bpf programs, and can allow ...

CVE-2026-20805-PoC

CVE-2026-20805 PoC Proof of Concept demonstrating an information disclosure vulnerability in Microsoft Desktop Window Manager dwm.exe. Overview This repository contains a custom Proof of Concept PoC developed to reproduce CVE-2026-20805, an information disclosure vulnerability affecting the Windo...

CLPSTNet

CLPSTNet: A Progressive Multi-Scale Convolutional Steganography Model Integrating Curriculum Learning Fengchun Liu; Tong Zhang; Chunying Zhang This repository contains the official implementation of the paper "CLPSTNet: A Progressive Multi-Scale Convolutional Steganography Model Integrating...

pillow: Pillow: Denial of Service via unbounded recursion in PDF parser

A flaw was found in Pillow. The PDF parser fails to limit recursion depth when reading nested PDF data structures such as arrays and dictionaries. A remote attacker could exploit this vulnerability by supplying a specially crafted, deeply nested PDF file to an application processing PDFs in appen...

DCVD

project/ ├── train.py ├── dataloader.py ├── README.md ├── requirements.txt ├── models/ │ ├── controlpathway.py │ ├── semanticpathway.py │ ├── featurefusionmodule.py │ ├── transformerllmmodule.py │ └── multitaskpredictor.py Data and Model Sources Dataset We use the LineVul dataset for vulnerabilit...

Linux-Kernel-Copy-Fail-CVE-2026-31431-

Copy Fail CVE-2026-31431 Vulnerability Analysis and Response Practice This project analyzes the operational principle of the Linux Kernel Copy Fail CVE-2026-31431 vulnerability and compares the pre-patch and post-patch state using the non-destructive checker from the public PoC repository. It doe...

ROS-20261027-73-0043

The vulnerability in rabbitmq-server is related to improper handling of web page structures. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 4.7. It stems from an error path in altredaca10deviceadd and altrportbsetup, where dci structures are released prior to freeing the devres group. This allows access to memory that has been freed between releasing the dci and canceling the IR...

Quantum Secret Sharing from CSS QLDPC Codes: Computable Access Structures, Accessible Logical Dimension, and Topology-Aware Network Cost

Quantum secret sharing QSS schemes can be constructed from quantum error-correcting codes, but characterizing their access structures and implementation costs becomes challenging for finite-length, high-rate quantum low-density parity-check qLDPC codes. We develop an exact computational framework...

CVE-2026-98667

A flaw was found in the Linux kernel's ADF4377 clock driver. Due to uninitialized data structures during device registration, the driver may attempt to access invalid memory pointers under certain kernel memory configurations. A local user could exploit this flaw to cause a kernel crash, leading ...

CVE-2026-113793

A flaw was found in pypdf. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted PDF document containing cyclic tree structures. When an application attempts to remove an object from the cyclic structure, the library enters an infinite loop,...

Linux Distros Unpatched Vulnerability : CVE-2026-98440

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction We free the shadow S2 structures from kvmarchflushshadowall, which is a Bad Ideatm...