COM-Code-Helper

COM-Code-Helper Dos scripts IDAPython te ayudan a reconstruir código Microsoft COM Component Object Model Especialmente los reversers de malware encontrarán esto útil, ya que el código COM se sigue encontrando regularmente en malware. ClassAndInterfaceToNames.py Este script IDAPython escanea un...

CVE-2023-36900

CVE-2023-36900 Acerca de esta vulnerabilidad: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36900. Informe Patrón Imhex para extensión .blf Encabezado con declaración de estructuras CLFS Prueba de concepto de denegación de servicio Patrón Imhex para extensión blf Antes: Después: ...

DCVD

root@kitploit: project/ ├── train.py ├── dataloader.py ├── README.md ├── requirements.txt ├── models/ │ ├── controlpathway.py │ ├── semanticpathway.py │ ├── featurefusionmodule.py │ ├── transformerllmmodule.py │ └── multitaskpredictor.py Data and Model Sources Dataset We use the LineVul dataset f...

pbtk

pbtk - Reverse engineering Protobuf apps Protobuf is a serialization format developed by Google and used in an increasing number of Android, web, desktop and more applications. It consists of a language for declaring data structures , which is then compiled to code or another kind of structure...

social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

allthingsida

Operating system MS Windows PEB/LDRDATATABLEENTRY enumeration scripts PEB/TEB structures x64 PEB/TEB structures x86...

Crystal-Loaders

Crystal Loaders Este repositorio contiene un par de cargadores PIC y un sleepmask COFF personalizado para usar con Cobalt Strike. Son implementaciones básicas en las que se debe integrar el tradecraft de evasión personalizado mediante Crystal Palace. Uso 1. Descargue la Release de Crystal Palace...

CVE-2026-20805-PoC

CVE-2026-20805 PoC Proof of Concept demonstrating an information disclosure vulnerability in Microsoft Desktop Window Manager dwm.exe. Overview This repository contains a custom Proof of Concept PoC developed to reproduce CVE-2026-20805, an information disclosure vulnerability affecting the Windo...

CLPSTNet

CLPSTNet: Un modelo de esteganografía convolucional de múltiples escalas progresivo que integra aprendizaje curricular Fengchun Liu; Tong Zhang; Chunying Zhang Este repositorio contiene la implementación oficial del artículo "CLPSTNet: A Progressive Multi-Scale Convolutional Steganography Model...

Linux-Kernel-Copy-Fail-CVE-2026-31431-

Copy Fail CVE-2026-31431 Vulnerability Analysis and Response Practice This project analyzes the operational principle of the Linux Kernel Copy Fail CVE-2026-31431 vulnerability and compares the pre-patch and post-patch state using the non-destructive checker from the public PoC repository. It doe...

Astra Linux – Vulnerability in pyasn1

pyasn1 is a generic ASN.1 library for Python. Prior to version 0.6.3, the pyasn1 library was vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion during the decoding of ASN.1 data with deeply nested structures. An attacker could provide a crafted payload containing...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Updated the intermediate power state for SI. Updated the current state to the boot state during dpm initialization. During subsequent initialization, setpowerstate is called to transition to the final power state...

DEBIAN-CVE-2026-89636

In the Linux kernel, the following vulnerability has been resolved: smb: client: clear ce-tgthint in freetgts When freetgts frees all structures in ce-tlist, ce-tgthint is left pointing to one of the freed cachedfstgt structures. If ce-tgthint is not reset before it is used later, it results in a...

DEBIAN-CVE-2026-45766

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certain NFS parser state structures were insufficiently bounded. Crafted NFS traffic may cause Suricata to consume excessive memory, potentiall...

UBUNTU-CVE-2026-45766

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certain NFS parser state structures were insufficiently bounded. Crafted NFS traffic may cause Suricata to consume excessive memory, potentiall...

CVE-2026-45766 Suricata nfs: unbounded stateful structures can lead to resource exhaustion

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certain NFS parser state structures were insufficiently bounded. Crafted NFS traffic may cause Suricata to consume excessive memory, potentiall...

CVE-2026-45766 Suricata nfs: unbounded stateful structures can lead to resource exhaustion

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certain NFS parser state structures were insufficiently bounded. Crafted NFS traffic may cause Suricata to consume excessive memory, potentiall...

CVE-2026-45766 Suricata nfs: unbounded stateful structures can lead to resource exhaustion

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certain NFS parser state structures were insufficiently bounded. Crafted NFS traffic may cause Suricata to consume excessive memory, potentiall...

DriverBuddy

Inicio rápido Instrucciones de instalación de DriverBuddy 1. Copia la carpeta DriverBuddy y el archivo DriverBuddy.py en la carpeta de plugins de IDA C:\Program Files x86\IDA 6.8\plugins o donde hayas instalado IDA Instrucciones de uso de DriverBuddy 1. Inicia IDA y abre un controlador de kernel ...

EUVD-2026-75627

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/ccutil/genericvector.h reads the independent int32 fields reserved and sizeused from a .traineddata model without a cap or an invariant check. reservereserved allocates the backin...