Dropbear_CVE-2013-4434

DropbearCVE-2013-4434 dropbearCVE-2013-4434.sh Этот скрипт проверяет наличие CVE-2013-4434 https://vulners.com/cve/CVE-2013-4434. Dropbear SSH Server до версии 2013.59 генерирует сообщения об ошибках при неудачной попытке входа с разными временными задержками в зависимости от того, существует ли...

wp_drupal_timing_attack

wpdrupaltimingattack CVE-2014-9016 और CVE-2014-9034 का शोषण करने के लिए Python स्क्रिप्ट। केवल कानूनी उद्देश्यों के लिए।...

CVE-2019-0708

CVE-2019-0708 Cria primeiro um, espera o chefão chegar e eu atualizo depois...

lucky13

LUCKY13 शोषण इस रिपॉजिटरी में LUCKY13 भेद्यता CVE-2013-0169 के लिए एक प्रमाण-अवधारणा POC शोषण शामिल है, जो क्रिप्टोग्राफिक सिस्टम में CBC सिफर ब्लॉक चेनिंग मोड के कुछ कार्यान्वयनों के विरुद्ध एक समय-आधारित हमला है। शोषण का उद्देश्य पैडिंग सत्यापन के आधार पर प्रतिक्रियाओं में समय के अंतर का लाभ...

CVE-2023-1206-CVE-2025-40040-CVE-2024-49882

Canale Nascosto Combinato: CVE-2023-1206 + CVE-2024-49882 Panoramica Questo progetto dimostra un canale di comunicazione nascosto che utilizza due vulnerabilità del kernel Linux: Componente| CVE| Scopo ---|---|--- Canale di Sincronizzazione| CVE-2023-1206| Sincronizzazione dell'orologio tramite...

cve-2018-15473

CVE-2018-15473 OpenSSH bis Version 7.7 ist anfällig für eine Benutzeraufzählungsschwachstelle, da die Verzögerung des Abbruchs für einen ungültigen authentifizierenden Benutzer nicht erst nach vollständigem Parsen des Pakets mit der Anfrage erfolgt. Dies betrifft auth2-gss.c, auth2-hostbased.c un...

rootkit-detection-ebpf-time-trace

Rilevamento di Rootkit con eBPF Time Tracing Questo repository contiene codice per raccogliere misurazioni temporali di funzioni del kernel manipolate dai rootkit quando nascondono file, nonché un metodo di rilevamento semi-supervisionato che analizza gli spostamenti dei tempi di esecuzione delle...

CVE-2026-25050

CVE-2026-25050 – Ataque de Timing na Autenticação Este repositório contém uma Prova de Conceito demonstrando um ataque de timing que afeta o método NativeAuthenticationStrategy.authenticate. Esta PoC é fornecida como uma demonstração técnica para fins de blog / pesquisa. Vulnerabilidade A lógica ...

AVX-Side-Channel

AVX 기반 타이밍 부채널 — ASLR 탐지 저자: Byte Reaper 설명 AVX 메모리 로드 + RDTSCP 타이밍 및 선택적 SIGSEGV 탐지를 사용하여 ASLR 탐지를 시연하는 스크립트입니다. 요구 사항 : Linux x8664 -mavx2를 지원하는 GCC AVX2 및 RDTSCP를 지원하는 CPU 빌드 : root@kitploit: gcc -mavx2 -O2 file.c -o AVX-Side-Channel ./AVX-Side-Channel 빠른 출력 예시 빠른 접근 → ASLR not detected 느린 접근 ...

ShadowNet

Un grande grazie a Gesù per aver dato visibilità a questo strumento! Rivolgiti a Gesù prima che sia troppo tardi. : Lui ti ama 🛡️ ShadowNet: Protocollo di Anonimato Flow-Invariant Tecniche Tor + Mixnet Non affidarti più al mimetizzarti nella folla per essere anonimo come la normale Tor, ORA ESSERE...

poc-CVE-2025-38352

Detalhes do Exploit Este repositório contém apenas a prova de conceito que aciona a vulnerabilidade. Desde então, escrevi um exploit completo para esta vulnerabilidade. Você pode encontrar os detalhes no link abaixo. https://github.com/farazsth98/chronomaly Postagens de Análise no Blog Parte 1 -...

CVE-2016-6210

CVE-2016-6210 Énumération de noms d'utilisateur contre les démons SSH affectés par CVE-2016-6210. Utilisez uniquement contre vos propres hôtes ! Attaquer des choses que vous n'êtes pas autorisé à faire peut vous causer de gros ennuis ! INSTALATION Cloner le dépôt : root@kitploit: git clone...

ssh-enum

ssh-enum Studio di convalida statistica di CVE-2016-6210 Una ri-indagine riproducibile dell'enumerazione degli username OpenSSH utilizzando l'analisi statistica. Questo progetto riesamina CVE-2016-6210 , un side-channel temporale documentato di OpenSSH, per determinare se rimane osservabile su un...

CVE-2023-30458

CVE-2023-30458 عنوان الاستغلال: نظام تتبع الأدوية 1.0 - تفاوت ملحوظ: تعداد اسم المستخدم عبر توقيت الاستجابة التاريخ: 22 أبريل 2023 مؤلف الاستغلال: William David Mathisen d34dun1c02n الصفحة الرئيسية للبائع:...

nextpnr

nextpnr -- uno strumento portatile di place and route per FPGA nextpnr mira ad essere uno strumento di place and route per FPGA FOSS, neutrale rispetto al fornitore e guidato dal timing. Attualmente nextpnr supporta: Dispositivi Lattice iCE40 supportati da Project IceStorm Dispositivi Lattice ECP...

mmiotic

mmiotic Uno strumento esplorativo per il timing di MMIO — cronometra qualsiasi indirizzo fisico e disseziona l' hardware dalla latenza. Sorprendentemente utile per il reverse engineering dell'hardware, il fingerprinting degli hypervisor, l'analisi dell'attività dei dispositivi tramite canali...

Moderate: Red Hat Security Advisory: pam security update

An update for pam is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

A flaw was found in Linux-PAM's pamuserdb module. This vulnerability, categorized as an Observable Timing Discrepancy CWE-208, allows a local or network-adjacent attacker to recover plaintext passwords. By repeatedly attempting authentication and measuring response-timing differences during...

pam security update

An update is available for pam. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Pluggable Authentication Modules PAM provide a system to set up authentication...

RLSA-2026:59379 Moderate: pam security update

Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle authentication. Security Fixes: linux-pam: Plaintext password recovery via timing discrepancy in pamuserdb module CVE-2026-54411 For more details about the...