DriverBuddy

クイックスタート DriverBuddy のインストール手順 1. DriverBuddy フォルダと DriverBuddy.py ファイルを IDA のプラグインフォルダ（C:\Program Files x86\IDA 6.8\plugins など、IDA をインストールした場所）にコピーします DriverBuddy の使用手順 1. IDA を起動し、Windows カーネルドライバを開きます 2. Edit-Plugins に移動して Driver Buddy を選択するか、ctrl-alt-d を押します 3. Output ウィンドウで DriverBuddy...

Linux-Kernel-Copy-Fail-CVE-2026-31431-

تحليل ثغرة Copy Fail CVE-2026-31431 وممارسة الاستجابة لها هذا المشروع عبارة عن مشروع مصغّر لتحليل مبدأ عمل ثغرة Copy Fail CVE-2026-31431 في نواة Linux، ومقارنة الحالة قبل وبعد الترقيع باستخدام أداة الفحص غير المدمرة من مستودع PoC العام. لم يتم تنفيذ أي استغلال فعلي لتعديل ثنائيات setuid أو تعديل...

COM-Code-Helper

COM-Code-Helper Zwei IDAPython-Skripte helfen Ihnen, Microsoft COM Component Object Model Code zu rekonstruieren. Insbesondere Malware-Reverser werden dies nützlich finden, da COM-Code immer noch regelmäßig in Malware vorkommt. ClassAndInterfaceToNames.py Dieses IDAPython-Skript durchsucht eine...

pbtk

pbtk - Reverse engineering Protobuf apps Protobuf is a serialization format developed by Google and used in an increasing number of Android, web, desktop and more applications. It consists of a language for declaring data structures , which is then compiled to code or another kind of structure...

social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

allthingsida

Sistema operativo MS Windows script di enumerazione di PEB/LDRDATATABLEENTRY strutture PEB/TEB x64 strutture PEB/TEB x86...

DCVD

root@kitploit: project/ ├── train.py ├── dataloader.py ├── README.md ├── requirements.txt ├── models/ │ ├── controlpathway.py │ ├── semanticpathway.py │ ├── featurefusionmodule.py │ ├── transformerllmmodule.py │ └── multitaskpredictor.py Fonti dei Dati e dei Modelli Dataset Utilizziamo il dataset...

CLPSTNet

CLPSTNet: Un Modello di Steganografia Convoluzionale Multi-Scala Progressiva che Integra l'Apprendimento Curriculare Fengchun Liu; Tong Zhang; Chunying Zhang Questa repository contiene l'implementazione ufficiale dell'articolo "CLPSTNet: A Progressive Multi-Scale Convolutional Steganography Model...

CVE-2023-36900

CVE-2023-36900 Informazioni su questa vulnerabilità: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36900. Relazione Pattern Imhex per estensione .blf Header con dichiarazione delle strutture CLFS Prova di concetto di Denial-of-Service Pattern Imhex per estensione .blf Prima: Dopo...

Crystal-Loaders

Crystal Loaders В этом репозитории содержатся несколько PIC-загрузчиков и кастомный sleepmask COFF для использования с Cobalt Strike. Это базовые реализации, в которые необходимо вплести собственную обходную тактику evasion tradecraft с помощью Crystal Palace. Использование 1. Загрузите релиз...

EUVD-2026-58508

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...

Linux Distros Unpatched Vulnerability : CVE-2026-33818

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. CVE-2026-33818 Note that Nessus relies on t...

CVE-2026-54183 Apache Airflow: Airflow Variables were not masked in the UI for authenticated users

Apache Airflow's secrets masker hides values stored under sensitive key names when they are displayed in the UI. The masker's recursion-depth limit did not descend into values nested inside a list, tuple, or set beyond that limit, so an Airflow Variable holding such a deeply-nested value was show...

CVE-2026-72785

Craft CMS 5.0.0-RC1 through 5.10.5 contains an incorrect authorization vulnerability. A control-panel user holding only the viewCategories permission without saveCategories for a category group can permanently modify that group's category structure — reordering and re-parenting categories — via t...

CVE-2026-72785

Craft CMS 5.0.0-RC1 through 5.10.5 contains an incorrect authorization vulnerability. A control-panel user holding only the viewCategories permission without saveCategories for a category group can permanently modify that group's category structure — reordering and re-parenting categories — via t...

CVE-2026-72785

Summary (CVE-2026-72785) Craft CMS 5.0.0-RC1 through 5.10.5 contains an incorrect authorization vulnerability in the category structure controls. A control-panel user with only the viewCategories permission (no saveCategories ) for a category group can permanently reorder or re-parent categories ...

PT-2026-70203

Craft CMS 5.0.0-RC1 through 5.10.5 contains an incorrect authorization vulnerability. A control-panel user holding only the viewCategories permission without saveCategories for a category group can permanently modify that group's category structure — reordering and re-parenting categories — via t...

Astra Linux – Vulnerability in pyasn1

pyasn1 is a generic ASN.1 library for Python. Prior to version 0.6.3, the pyasn1 library was vulnerable to a Denial of Service DoS attack caused by uncontrolled recursion during the decoding of ASN.1 data with deeply nested structures. An attacker could provide a crafted payload containing...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the IETFUtils.valueToString method, reached through X500Name.toString, equals, and hashCode via AbstractX500NameStyle, which escapes each special character with vBuf.insertindex, "\" on the same...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in JcePKCSPBEInputDecryptorProviderBuilder and JceOpenSSLPKCS8DecryptorProviderBuilder, which parse PBES2Parameters from attacker-supplied EncryptedPrivateKeyInfo, PKCS12, or CMS...