Rust Search
Find the best content on Rust, curated by the community; a
search engine for Rustaceans.
Last month we saw how to encrypt large files that don't fit in memory using a streaming cipher. The article presupposes that you already have a secure key generation mechanism. Today, we are going to see how to securely encrypt data using a...
"But, it works on my machine" "If I install this NPM package, is it going to rm -rf / or infect me with a cryptominner?" "I spent the whole day trying to install $DATABASE on my laptop but it still doesn't work!" As we saw 2 months ago, sup...
December 22, 2021Iām happy to announce that you can now purchase Black Hat Rust with PayPal, Apple Pay and Google Pay thanks to Paddle which handles invoicing with VAT (if applicable) š Go here to buy Black Hat Rust with any of these paymen...
Choosing the right encryption algorithm When you want to encrypt data, you may face a problem: how to encrypt files or data streams that don't fit in memory? You could simply split them into small chunks and encrypt each fragment individual...
Black Hat Rust is out of beta :) v2021.40 It's now official, as of v2021.40, Black Hat Rust is considered out of beta and complete! Hundreds of typos have been corrected, layout issues have been fixed, and there is no more "coming soon" rem...
Shellcoding in Rust We previously saw how to craft an HelloWorld shellcode in Rust. This time, we are going to create a shellcode that... actually launches a shell, using the execve syscall. A C equivalent would be something like: #include...
Supply chains attacks are all the rage these days, whether to deliver RATs, cryptocurrencies miners, or credential stealers. In Rust, packages are called crates and are (most of the time) hosted on a central repository: https://crates.io fo...
As we saw last week, when performing symmetric encryption you should use Authenticated Encryption with Additional Data (AEAD) which provides stronger guarantees than block ciphers. The main contenders for authenticated encryption in Rust (a...
Just kidding, after a short pause of deep work and flu recovery, I'm extremely happy to announce that Black Hat Rust is reaching completion and that I just uploaded the version 2021.21 š¾ 100% of the code is available on GitHub ~90% of the w...
And by that, I mean exactly 100 lines (excluding templates), with hot reload and an embedded web server š Conceptually, a static site generator is straightforward. It takes some files as input, often markdown, render them, merge them with p...
Error: Toolchain / Library XX not found. Aborting compilation. How many times did you get this kind of message when trying to follow the build instructions of a project, or cross compile it? This problem can be solved with immutable toolcha...
I recently got my hands on an ESP32 microcontroller for hacking purpose and successfully ran Rust code on it š¦ Installing the tools First, you need to download and install the prebuilt binaries of the Rust and LLVM compiler forks by Espress...
ESP32 is a series of microcontrollers that has the particularity to have both integrated Bluetooth and Wi-Fi. It makes it the perfect microcontroller when you need low-power, networked, and smart hardware that doesn't require an OS. I had t...
A few months ago, we saw how to execute a shellcode from memory in Rust. What if we could write the actual shellcode in Rust? Writing shellcodes is usually done directly in assembly. It gives you absolute control over what you are crafting,...
We will use the new web framework developed by tokio's team: axum. Its performance and simplicity are unparalleled in the Rust world. Also, please note that porting this code to another web framework is easy. We will implement a simple chat...
Imagine: all the tanks of your army are made of cardboard. Now imagine that not only your tanks but also all your airforce is composed of paper planes and your navy of paper vessels. It would be a pretty bad situation, don't you think? Whil...
37.2% of vulnerabilities in cryptographic libraries are memory safety issues, while only 27.2% are cryptographic issues, according to an empirical Study of Vulnerabilities in Cryptographic Libraries (Jenny Blessing, Michael A. Specter, Dani...
(or in any other language such as Go, Node.js or python) Job queues are a central piece of any web application. It enables background jobs, buffering to handle surges in traffic, async messaging, batching and many other great things. Thus,...
37.2% of vulnerabilities in cryptographic libraries are memory safety issues, while only 27.2% are cryptographic issues, according to an empirical Study of Vulnerabilities in Cryptographic Libraries (Jenny Blessing, Michael A. Specter, Dani...
I'm a big fan of monoliths, but when Rust projects become larger and larger, we have to use Cargo workspaces. First to benefit from incremental compilation to speed up compile times, second to improve code organization. Then a big problem a...
"When picking up a lentil (Result) a pigeon (?) must consider two options. If the lentil is a good one (Ok), the pigeon simply puts it into the pot (ev..."