Cryptography

ahmadhassan-bted/nasuno

AI audio watermark removal & forensic anti-attribution toolkit. Neutralizes Suno, Udio, and neural fingerprints with ISO 226 perceptual masking.

abraxas/openmeetings-remember-me-password

Apache OpenMeetings 9.1.0 - High - Remote - ATO - remember-me cookie replay authenticates without password

kamalx06/tornadoc2

Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, ECDSA-signed tasking, and a multi-operator team server with…

abraxas/pfsense-api-enroll-autoadd

pfSense Plus MIM API toolkit b4acd7ca - High - Remote - Privilege leftover - Paramiko AutoAddPolicy enroll

p3ng0s/archlive

Physical access red team live ISO built on Arch Linux

nawaralseelawi/pvbrf-id

Simulation code and results for a private, verifiable, Byzantine-robust federated intrusion detection protocol using secret sharing, Merkle audits…

tegal1337/pocketpentester

Offline-first Android offensive security toolkit with 21 modules for recon, port scanning, subdomain enumeration, SQLi/XSS/JWT exploitation, payload…

abraxas/mysql-mysqldump-show-tables-overflow

MySQL Community Server 26.7.0 - High - mysqldump SHOW TABLES stack overflow - crash dump UID

abraxas/sqlite-cli-go

SQLite 3.53.4 CLI - High - Local - Command injection - go and slash terminators then dot-command

abraxas/litebox-snp-fixed-crng

High local crypto: LiteBox v0.1.0 SNP CrngProvider is public-seed FastRng 0x4d595df4d0f33173

abraxas/vsftpd-ssl-data-any-ticket

vsftpd 3.0.5 - High - Remote - Privilege leftover - FTPS data accepts any resumed ticket

cohesity/secadvisory

Vendor security advisory repository documenting Cohesity product vulnerabilities, including CVE-2019-11242 vCenter TLS certificate validation flaw,…

rdelasierra-uy/portfolio

Vitrina profesional: writeups de Hack The Box, informes, casos de estudio GRC (ISO 27001/27002/27005/27035, ISO 31000 + MAGERIT), scripts de…

darkcodelabs/darkroute

Anti-ALPR-surveillance PWA. The camera archive lives on the device.

kolmteistov/gobalance-patch

Security patch and proof-of-concept for GoBalance onion load balancer, covering master key recovery via blindedSign and forged descriptor acceptance,…

jihoonjang98/hqc-x86-simd

Optimized HQC post-quantum KEM implementations for AVX2 and AVX-512 with GFNI, plus a unified benchmarking and NIST KAT suite for x86 IoT gateways.

cyrusimap/cyrus-sasl

Cyrus SASL API implementation providing client- and server-side authentication and authorization services via pluggable SASL mechanisms per RFC 4422.