rocacheck

rocacheck rocacheck 패키지는 키 지문 알고리즘의 Go 구현으로, RSA 키가 손상된 Infineon 코드로 생성되었는지, Coppersmith 공격의 귀환 ROCA / CVE-2017-15361을 통한 인수분해에 취약한지 확인합니다...

Infineon-CVE-2017-15361

Infineon-CVE-2017-15361 Простой PowerShell-скрипт для проверки, использует ли компьютер чип Infineon TPM, который уязвим для CVE-2017-15361. ВАЖНО: ЭТО ДОЛЖНО БЫТЬ ЗАПУЩЕНО ОТ ИМЕНИ АДМИНИСТРАТОРА!! Этот скрипт работает только на Windows 8.1 и Windows Server 2012 или более поздних версиях Windows...

ROCA-attack-on-vulnerability-CVE-2017-15361

ROCA-attack-on-vulnerability-CVE-2017-15361 本仓库包含了我在都灵理工大学数学工程专业学士学位期间开发的论文。这是一个基于 Python 和 Sage 的脚本。 该脚本的目标是生成一个 RSA 密钥，评估其是否容易受到 ROCA 攻击，并执行 ROCA 攻击。 脚本中的注释为意大利语。 文件夹结构 root@kitploit: . └── Attacco-ROCA-sulla-vulnerabilita-CVE-2017-15361 包含此仓库的文件夹 └──Program ├── Main.py 主文件 ├── Keygen.py 密钥生成 ├...

zeek-plugin-roca

Johanna::ROCA Ce plugin implémente la détection des clés affectées par CVE-2017-15361 ; il s'agit d'une réimplémentation du code source disponible à l'adresse https://github.com/crocs-muni/roca. Ce plugin fournit deux nouveaux BIFs qui peuvent vérifier les clés publiques : rocavulnerablecert...

Detect-CVE-2017-15361-TPM

CVE-2017-15361에 취약한 신뢰할 수 있는 플랫폼 모듈 탐지 이 저장소는 DoD 관리자가 CVE-2017-15361에 취약한 활성화된 TPM신뢰할 수 있는 플랫폼 모듈이 있는 시스템을 탐지하는 데 도움이 되는 콘텐츠를 제공하며, 정보보증 권고 RSA 키 생성 취약점이 신뢰할 수 있는 플랫폼 모듈에 영향을 미침의 동반 자료입니다. 이 저장소의 파일은 여기에서 zip 파일로 다운로드할 수 있습니다. 저장소의 주요 관심 파일은 다음과 같습니다: windows/Detect-CVE-2017-15361-TPM.audit - Do...

[SECURITY] Fedora 33 Update: roca-detect-1.2.12-15.fc33

This tool is related to the ACM CCS 2017 conference paper 124 Return of the Coppersmith=EF=BF=BD=EF=BF=BD=EF=BF=BDs Attack: Practical Factorization of Widely Used RSA Moduli. https://crocs.fi.muni.cz/public/papers/rsaccs17 Install this to test public RSA keys for the presence of the vulnerability...

Fedora: Security Advisory for roca-detect (FEDORA-2021-724c3aa51b)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

mangaseeonline.us Cross Site Scripting vulnerability OBB-1207280

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Microsoft Releases Security Advisory for Windows Hello for Business

Microsoft has released a Security Advisory to address an issue in Windows Hello for Business WHfB. An attacker could exploit this issue on devices that were affected by CVE-2017-15361, also known as Return of Coppersmith’s Attack ROCA, to take control of an affected system. The Cybersecurity and...

ROCA: Vulnerable RSA key pairs generation (CVE-2017-15361)

An old Infineon RSA library does not properly generate RSA key pairs, therefore enabling an attacker to potentially infer a private key from a public key...

CVE-2017-15361

creationtimestamp| type| source ---|---|--- 2017-10-17 10:59:44+00:00| exploited| https://t.me/informationsecuritychannel/10054 2017-10-17 15:08:08+00:00| exploited| https://t.me/informationsecuritychannel/10060 2018-03-21 13:35:17+00:00| published-proof-of-concept|...

CVE-2017-15361

The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module TPM firmware, such as versions before 0000000000000422 - 4.34, before 000000000000062b - 6.43, and before 0000000000008521 - 133.33, mishandles RSA key generation, which makes it easier for attackers to defeat various...

Infineon RSA library does not properly generate RSA key pairs

Overview The Infineon RSA library version 1.02.013 does not properly generate RSA key pairs, which may allow an attacker to recover the RSA private key corresponding to an RSA public key generated by this library. This vulnerability is often cited as "ROCA" in the media. Description...

KLA11850 Microsoft Advisory for Microsoft Device

This advisory addresses CVE-2017-15361. A security vulnerability exists in certain Trusted Platform Module TPM chipsets. The vulnerability weakens key strength. This is a firmware vulnerability, and not a vulnerability in the operating system or a specific application. Original advisories ADV1700...