980 matches found
awesome-web3-security
awesome-web3-security A curated list of Web3 Security materials and resources for Pentesters and Bug Hunters. If you find that some links are not working, you can simply replace the username with gmh5225. Or you can send an issue for me. Show respect to all the projects below, perfect works of ar...
web3-decoder
Web3 Decoder Web3 Decoder is a Burp Suite Extension that helps to analyze what is going on with the operations involving smart contracts of the web3. This is mainly JSON-RPC calls to Ethereum Nodes, and nodes of other compatible networks like Polygon, Arbitrum, BSC... Download & Install Download...
C2-Blockchain
C2-Blockchain This is a C2 Implemented over Ethereum Smart Contracts based on Ropsten TestNet Server To read more about how we made this poc please refer to the series here. We have Explained everything from introduction of blockchain to Using smart contracts over python Installation Note:- This ...
CVE-2023-6036
CVE-2023-6036 POC about Wordpress plugin Web3 – Crypto wallet Login & NFT token gating 3.0.0 - Authentication Bypass This vulnerability is about authentication bypass due incorrect authentication checking in the ‘handleloginrequest’ function and ‘handleauthrequest' function Vulnerability I have...
CrazyToolBox
CrazyToolBox Table of contents 📢 What is CrazyToolBox? ⚙️ Execution ⭐ Current features 📢 What is CrazyToolBox? CrazyToolBox is a collection of usefult tools relative to Web3. These tools can be accessed through a GUI using the CrazyToolBox application. We will be adding new tools to the...
cve-2026-40072-ssrf-lab
CVE-2026-40072 SSRF Lab Hands-on local lab to demonstrate CVE-2026-40072 in web3.py, show the SSRF impact in Burp Suite, and verify the official fix. Overview This repository contains a safe, local-only proof of concept for CVE-2026-40072, a Server-Side Request Forgery SSRF issue tied to CCIP Rea...
Malware in @web3-common/utils
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in baileys-web3 (npm)
baileys-web3 is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...
web3-decoder
Web3 Decoder Web3 Decoder is a Burp Suite Extension designed for analyzing blockchain operations and smart contract interactions. It processes JSON-RPC calls to Ethereum and compatible networks including Polygon, Arbitrum, BSC, and others Block explorers API Keys Most block explorers supported,...
Malicious code in baileys-web3 (npm)
baileys-web3 is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own WhatsApp account to WhatsApp Channels chosen by the publisher. When the socket connects, code in lib/Socket/newsletter.js sends the WhatsApp w:mex FOLLOW query for the channel IDs...
CLSA-2026-1792162195 TuxCare security update for web3-core-promievent (1 CVE)
TuxCare rebuilt web3-core-promievent to address 1 CVE. Fixed in 1.10.4-tuxcare.1...
CLSA-2026-1792162192 TuxCare security update for web3-utils (1 CVE)
TuxCare rebuilt web3-utils to address 1 CVE. Fixed in 1.10.4-tuxcare.1...
CLSA-2026-1792162172 TuxCare security update for web3-shh (1 CVE)
TuxCare rebuilt web3-shh to address 1 CVE. Fixed in 1.10.4-tuxcare.1...
CLSA-2026-1792162153 TuxCare security update for web3-providers-ws (1 CVE)
TuxCare rebuilt web3-providers-ws to address 1 CVE. Fixed in 1.10.4-tuxcare.1...
CLSA-2026-1792162150 TuxCare security update for web3-eth-personal (1 CVE)
TuxCare rebuilt web3-eth-personal to address 1 CVE. Fixed in 1.10.4-tuxcare.1...
CLSA-2026-1792162129 TuxCare security update for web3-providers-ipc (1 CVE)
TuxCare rebuilt web3-providers-ipc to address 1 CVE. Fixed in 1.10.4-tuxcare.1...
CLSA-2026-1792162107 TuxCare security update for web3-providers-http (1 CVE)
TuxCare rebuilt web3-providers-http to address 1 CVE. Fixed in 1.10.4-tuxcare.1...
CLSA-2026-1792162083 TuxCare security update for web3-net (1 CVE)
TuxCare rebuilt web3-net to address 1 CVE. Fixed in 1.10.4-tuxcare.1...