Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2021-42574 — Demonstrates the Trojan Source vulnerability (CVE-2021-42574) by generating source code with invisible Unicode control characters that alter compiler logic, enabling supply-chain attacks. | Kitploit
Tools/GitHubGitHub/waseeld/cve-2021-42574
Static AnalysisVulnerability AnalysisCode AnalysisSupply Chain SecurityPapers & ResearchLearning & Education
GitHubwaseeld/cve-2021-42574

CVE-2021-42574

Demonstrates the Trojan Source vulnerability (CVE-2021-42574) by generating source code with invisible Unicode control characters that alter compiler logic, enabling supply-chain attacks.

View Repository
114 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Trojan Source:Invisible Vulnerabilities - (Code generator)

alt text

— In simple terms, the vulnerability is that the code looks different from what it will be when compiled (: The attack consists of using embedded control characters in comments and strings to reorder source code characters in a way that changes its logic.

Example, suppose the code is like this:

if (isAdmin) { */ begin admins only */

By exploiting this vulnerability, we can make it after compilation:

/* if (isAdmin) { begin admins only */

Note: Most languages are affected, but among them is Rust versions below 1.56.0 for rustc.

Good sources for reading:

https://blog.rust-lang.org/2021/11/01/cve-2021-42574.html

https://trojansource.codes/trojan-source.pdf

Download Tool