
CVE-2019-5420
Python exploit script for CVE-2019-5420, targeting Ruby on Rails signed-session AES GCM key brute-forcing to achieve remote code execution in…

Python exploit script for CVE-2019-5420, targeting Ruby on Rails signed-session AES GCM key brute-forcing to achieve remote code execution in…

Resources and PoCs

Automated data flow platform for processing and distributing data with built-in provenance tracking, secure configuration, and scalable pipeline…

Java SDK for integrating with Amazon Web Services, providing secure API access to S3, DynamoDB, EC2, and more, with built-in authentication,…

Automated data flow processing and distribution system with secure configuration, provenance tracking, and extensible plugin architecture for…

Decrypts Hikvision IP camera configuration files extracted via CVE-2017-7921 authentication bypass, revealing user credentials and device settings.

Ninja Framework sensitive information leak due to weak encryption

Proof-of-concept for CVE-2018-0114, demonstrating unauthenticated remote token re-signing vulnerability in versions before 0.11.0.

KeePass 2.53.1 with removed ECAS Trigger System Remediating CVE-2023-24055

Comprehensive Java utility library providing modules for cryptography, HTTP client, caching, JSON, scripting, and captcha generation, simplifying…

RFC6265-compliant cookie parsing and CookieJar management library for Node.js, with CVE-2023-26136 security patch. Supports cookie creation,…

JSON sanitizer that converts malformed JSON-like content into valid, safe JSON, preventing code injection and ensuring standards compliance for web…

General-purpose data compression library implementing the zlib, deflate, and gzip formats, providing compression and decompression routines for…

Portable zipfile extraction utility with broad OS support, decryption, and security fixes for path traversal and symlink vulnerabilities.

Configurable Rust HTTP MITM proxy with TLS , HTTP/2 and TCP fingerprint spoofing.

Multi-language cryptographic library providing AEAD, MAC, digital signature, and hybrid encryption APIs designed to reduce common cryptographic…