vuke

vuke Research tool for analyzing and reproducing vulnerable Bitcoin key generation. Features Modular architecture - pluggable sources and transforms Multiple input sources Numeric ranges test weak seeds Wordlists brainwallet analysis Timestamps time-based PRNG exploitation Stdin streaming pipelin...

pip3line

Pip3line Codacy Badge Linux / MacOS Builds Windows Builds Raw bytes manipulation utility, able to apply well known and less well known transformations, quick binary search, network proxy interception and more. Install on Windows: Download the release zip here Remember to install/repair the VS...

signy

signy Signed URLs for small devices. Background signy is a library for generating signed URLs on embedded devices using asymmetric cryptography. Signed URLs are typically utilized to grant time-limited access to private resources, such as those served by a Content Delivery Network CDN. In the...

CVE-2017-13253

CVE-2017-13253 PoC code for CVE-2017-13253. The full write-up is available here. Note that the numbers are a little bit different from the blog post, as I've found that there's a higher chance for a crash with a heap of 0x2000 of course if you run it enough times it should crash anyway. For...

kangaroo

Kangaroo GPU-accelerated Pollard's Kangaroo algorithm for solving the Elliptic Curve Discrete Logarithm Problem ECDLP on secp256k1. Features 🖥️ Cross-platform GPU — Vulkan AMD, NVIDIA, Intel, Metal Apple Silicon, DX12 Windows via wgpu 🦀 Pure Rust + WGSL — no CUDA dependency, compute shaders...

boha

boha 加密赏金、谜题和挑战数据资料库。 安装 CLI Arch Linux（AUR）： root@kitploit: paru -S boha 从 crates.io 安装： root@kitploit: cargo install boha --features cli,balance 库 root@kitploit: dependencies boha = "0.19" 启用余额获取： root@kitploit: dependencies boha = version = "0.19", features = "balance" 用法 CLI root@kitploit: 统计...

DamnVulnerableCryptoApp

¿Por qué? Si intentas aprender un poco más sobre criptografía, ya sea porque quieres saber cómo funcionan los ataques o simplemente porque quieres escribir código seguro, terminas sumergiéndote muy rápido en las matemáticas detrás...

sploit

sploit Sploit is a Go package that aids in binary analysis and exploitation. The motivating factor behind the development of sploit is to be able to have a well designed API with functionality that rivals some of the more common Python exploit development frameworks while taking advantage of the ...

TurkoRat

VERSIÓN TELEGRAM ⚔️ TurkoRat 🛡️ Servidor de Telegram: https://t.me/turcoflex Servidor de Discord: https://discord.gg/xTsJReFG84 únete al nuevo discord 🌐 〢 Contenido 📁 Configuración ⚔️ Características 📸 Capturas de pantalla 📝 Por hacer 📜 Licencia ⚠️ Nota 📁 〢 Configuración Instala Node.js IMPORTANTE:...

grapefruit

Grapefruit: Suite de pruebas de seguridad móvil de código abierto Kit de instrumentación de aplicaciones móviles en tiempo de ejecución impulsado por Frida. Inspecciona, engancha y modifica aplicaciones móviles mediante una interfaz web. ¡Ahora es compatible con iOS y Android! Inicio rápido...

laravel-crypto-killer

Laravel crypto killer Una herramienta diseñada para explotar malas implementaciones de los mecanismos de descifrado en aplicaciones Laravel. Esta herramienta fue diseñada inicialmente para crear payloads dirigidos a la función decrypt de Laravel del paquete Illuminate\Encryption. También puede...

securesystemslib

securesystemslib Securesystemslib is a cryptography interface for signing and verifying digital signatures. It is developed for the TUF and in-toto projects: the key and signature containers are compatible with metadata formats from those projects. Under the hood, Securesystemslib can use various...

cryptodev-linux

cryptodev-linux This is a /dev/crypto device driver, equivalent to those in OpenBSD or FreeBSD. The main idea is to access existing ciphers in kernel space from userspace, thus enabling the re-use of a hardware implementation of a cipher. For questions and suggestions, please use the homepage at...

go-pkcs12

package pkcs12 root@kitploit: import "software.sslmate.com/src/go-pkcs12" Package pkcs12 implements some of PKCS12 also known as P12 or PFX. It is intended for decoding DER-encoded P12/PFX files for use with the crypto/tls package, and for encoding P12/PFX files for use by legacy applications whi...

xortool

xortool.py A tool to do some xor analysis: guess the key length based on count of equal chars guess the key base on knowledge of most frequent char Notice: xortool is now only running on Python 3. The old Python 2 version is accessible at the py2 branch. The pip package has been updated...

foxguard

foxguard Fast local security scanning for code, secrets, dependencies, and crypto risk. root@kitploit: npx foxguard . Why 200+ built-in rules across 12 source languages, plus config and manifest checks Taint tracking for 14 languages, with cross-file analysis for Python, JavaScript, Go, Java, Rub...

mimikatz

mimikatz mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. root@kitploit:...

quantum-security-project

OWASP Quantum Security Project Prepare Today. Protect tomorrow. An official OWASP community project mapping the security risks of the quantum era in a practical, vendor-neutral, and risk-based way - the antidote to hype and fear. Status: Bootstrap phase. The OWASP Top 10 for Quantum Security Risk...

netpwn

netpwn 一个用于自动化渗透测试任务的框架。 使用 Python 2.7 编写 模块 reverseshell - 使用 Python 创建反向 shell，连接到您指定的机器。 sendfile - 允许您向目标服务器发送文件。 phpbackdoor - 生成一个简单的 PHP 后门，上传到 Web 服务器后可通过 ?cmd= 执行命令。 hashcheck - 粘贴哈希值，查看它属于哪种类型的哈希。 base64converter - 粘贴 base64 进行解码，或粘贴 ASCII 进行编码，它能自动识别您的需求。 addressinfo - 根据接口显示您的 IPv4、IP...

CVE-2025-11988

1 Extract the public cryptoajax nonce root@kitploit: UA='Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:127.0 Gecko/20100101 Firefox/127.0' PAGEURL='http://localhost/wordpress//' NONCE=$curl -s "$PAGEURL" -A "$UA" | \ perl -0777 -ne 'print "$1\n" if /cryptoconnectChainAjax\s=\s^"nonce"\s:\s"^"+"/s'...