
gobalance-patch
Security patch and proof-of-concept for GoBalance onion load balancer, covering master key recovery via blindedSign and forged descriptor acceptance,…

Security patch and proof-of-concept for GoBalance onion load balancer, covering master key recovery via blindedSign and forged descriptor acceptance,…

DeepSeek v4.1 flash 逆向工具(无限五代) 求 Star 收藏 ⭐欢迎大家提交项目的改进

Educational study of Bitcoin key entropy: weak-RNG wallet enumeration (Milk Sad / CVE-2023-39910 class) vs. the infeasibility of brute-forcing a good…

Weak-RNG stream-sweep research (CVE-2026-71851 class): PRNG schemes x seeds -> BIP39 -> victim set membership

Reverse-engineering notes and Python tooling for JBL Wave Buds 2 (BES1306) firmware: OTA container format, flash layout, BLE/GATT protocol, and…

Minimal CVE-2025-69421 reproducer demonstrating a NULL pointer dereference in OpenSSL PKCS#12 processing via a malformed PFX file with absent…

Cryptographically secure messaging and social networking service.

CVE-2025-14847 explaination and lab

POC for CVE-2025-24132 (AirBourne). Currently just triggers the overflow and causes a crash

Monitor Certificate Transparency logs for certificates with trivially small EC private keys (the eMudhra weak-key class). P-256/384/521.

Crash-only PoC for CVE-2025-69420 demonstrating a type-confusion vulnerability in OpenSSL's TimeStamp Response verification via malformed ESS…

SQLite 3.53.4 CLI - High - Local - Command injection - go and slash terminators then dot-command

MySQL Community Server 26.7.0 - High - mysqldump SHOW TABLES stack overflow - crash dump UID