DamnVulnerableCryptoApp

Why? If you try to learn a little bit more about crypto, either because you want to know how the attacks work or just because you want to do safe code, you end up diving really fast into the math behind the algorithms, and for a lot of people this is a NO...

Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278681 CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel bsc1278681 CVE-2026-78662:...

Exploits_and_Advisories

Exploits y Avisos Repositorio que rastrea exploits, vulnerabilidades y avisos públicos que co-descubrí o co-redacté. CVEs CVE| ID| Objetivo| Descripción| Divulgación ---|---|---|---|--- CVE-2020-10881| ZDI-20-333| TP-Link Archer A7/C7| desbordamiento de pila DNS| Pwn2Own Tokyo 2019 CVE-2020-10882...

mks-copy-fail-mitigation

DaemonSets de mitigación de Copy Fail DaemonSets para corregir las vulnerabilidades de la familia Copy Fail en todos los nodos worker de los clústeres MKS. Contenido CVE-2026-31431 Copy Fail CVE-2026-43284, CVE-2026-43500, CopyFail2 Dirty Flag CVE-2026-31431 Copy Fail Descripción de la...

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

Important: Red Hat Security Advisory: rhc-worker-playbook security update

An update for rhc-worker-playbook is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

proxmark3-amiimicyou

Instrucciones del simulador de Amiibo Se incluye una copia del envoltorio Lua de amiitool en client/libluamiibo.so, pero si quieres compilarlo tú mismo, sigue estas instrucciones: 1. Obtén la rama lua-lib de amiitool en https://github.com/jamchamb/amiitool/tree/lua-lib. 2. En CMakeLists.txt,...

cve-2020-0601_poc

Información Básica El código fuente de esta herramienta está destinado a ayudar a comprender la vulnerabilidad CVE-2020-0601 descubierta en la API de criptografía de Windows, consulte la visión general de CERT. La herramienta en sí se puede utilizar para producir un certificado para un dominio...

ROOT-APP-MAVEN-CVE-2025-22228 CVE-2025-22228 in org.springframework.security:spring-security-crypto - Patched by Root

Root has patched CVE-2025-22228 in the org.springframework.security:spring-security-crypto package for Root:Maven. Multiple fixed versions available...

TurkoRat

VERSIÓN TELEGRAM ⚔️ TurkoRat 🛡️ Servidor de Telegram: https://t.me/turcoflex Servidor de Discord: https://discord.gg/xTsJReFG84 únete al nuevo discord 🌐 〢 Contenido 📁 Configuración ⚔️ Características 📸 Capturas de pantalla 📝 Por hacer 📜 Licencia ⚠️ Nota 📁 〢 Configuración Instala Node.js IMPORTANTE:...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.34 packages and security update

Red Hat OpenShift Container Platform release 4.21.34 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

cve-2021-34558

PoC para CVE-2021-34558 root@kitploit: Run the malicious TLS server go run main.go -mode server Run a normal http.Get client call against the server which panics go run main.go -mode client Hay una modificación menor en ./vendor/github.com/refraction-networking/utls/handshakeserver.go para permit...

Digital-Signature-Forgery-Attack

En este artículo, analizaremos el ataque criptográfico de falsificación de firmas digitales Digital Signature Forgery Attack, cuyas consecuencias representan una amenaza para la seguridad de las transacciones en la red Bitcoin, ya que las firmas digitales confirman la propiedad y autorización de...

pip3line

Pip3line Codacy Badge Linux / MacOS Builds Windows Builds Raw bytes manipulation utility, able to apply well known and less well known transformations, quick binary search, network proxy interception and more. Install on Windows: Download the release zip here Remember to install/repair the VS...

temcrypt

El cifrado de próxima generación Prueba temcrypt en la Web → temcrypt SDK Enfocado en proteger datos altamente sensibles, temcrypt es un mecanismo avanzado de cifrado evolutivo de múltiples capas que ofrece complejidad escalable con el tiempo y es resistente a los ataques comunes de fuerza bruta...

crypto

Go Cryptography Este repositorio contiene paquetes complementarios de criptografía para Go. Reportar Problemas / Enviar Parches Este repositorio utiliza Gerrit para los cambios de código. Para aprender cómo enviar cambios a este repositorio, consulta https://go.dev/doc/contribute. El repositorio...

dsa

Un Resumen de la Vulnerabilidad crypto/dsa de Go CVE-2016-3959 Alex Mullins 9 de abril de 2016 Introducción Recientemente, se descubrió un error en la biblioteca criptográfica del Algoritmo de Firma Digital DSA para el lenguaje de programación Go. En este artículo revisaremos los detalles del err...