pip3line

Pip3line Codacy Badge Linux / MacOS Builds Windows Builds Raw bytes manipulation utility, able to apply well known and less well known transformations, quick binary search, network proxy interception and more. Install on Windows: Download the release zip here Remember to install/repair the VS...

temcrypt

下一代加密技术 在网页上尝试 temcrypt → temcrypt SDK 专注于保护高度敏感数据，temcrypt 是一种先进的多层数据进化加密机制，提供随时间可扩展的复杂性，并能抵抗常见的暴力攻击。 你可以在部署时创建自己的应用程序、脚本和自动化任务。 知识 了解 temcrypt 的含义、功能以及启发我创建它的灵感等内容。阅读知识文档。这对你非常重要。 兼容性 temcrypt 兼容 Node.js v18 及以上版本，以及现代网页浏览器，使你可以在各种环境中使用它。 快速开始 temcrypt 仅依赖 crypto-js 来处理加密算法，如 AES-256 、SHA-256...

crypto

Go 加密库 本仓库包含补充性的 Go 加密软件包。 报告问题 / 提交补丁 本仓库使用 Gerrit 进行代码更改。要了解如何向本仓库提交更改，请参阅 https://go.dev/doc/contribute。 git 仓库位于 https://go.googlesource.com/crypto。 crypto 仓库的主要问题跟踪器位于 https://go.dev/issues。请在主题行中以 “x/crypto:” 为前缀，以便于查找。 请注意，由于加密软件包具有敏感性，对其贡献会受到额外审查。 补丁收到反馈的时间可能比平时更长。...

bouncy-castle-generative-test-poc

Generative testing bouncy castle vulnerability CVE-2020-28052 Running the tests Test the vulnerable versions defaults to 1.66 root@kitploit: $ clojure -M:test $ clojure -M:test:v1.65 Test the versions before the vuln and after the patch 1.67 root@kitploit: $ clojure -M:test:v1.64 $ clojure...

AlmaLinux 10 : yggdrasil (ALSA-2026:69308)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69308 advisory. mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header CVE-2026-42504 encoding/asn1: golang: Go encoding/asn1: Denial of Servi...

RHCOS 4 : OpenShift Container Platform 4.21.34 (RHSA-2026:68538)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:68538 advisory. - crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages CVE-2026-56862 Note that Nessus has not tested...

ROS-20260922-73-0128

The vulnerability in golang-x-crypto is related to improper storage of permissions. Exploiting this vulnerability can allow an attacker to increase their privileges...

weakrng-sweep

weak-rng 扫描（CVE-2026-71851 类） 研究工具：枚举 PRNG 方案 × uint32 种子，派生 BIP39 钱包， 并针对受害者地址集合进行成员资格检查（防御性研究，illbloom 风格）。 方案：0-10（illbloom：MT19937/glibc/Java/LCG/xorshift），11-13（glibc-31 LCG）， 14-15（crypto-js 3.3.0 WordArray.random MWC 移植，已通过字节级验证与 node 对比）。 运行：Actions - mwc-sweep - Run workflow。...

copy-fail-mcp

Copy Fail MCP 📖 安装指南 — 快速上手、手动安装和故障排除 CVE-2026-31431 — 有史以来最严重的 Linux 漏洞。现在可通过 MCP 控制。 732 字节的 Python。无需编译。无竞态条件。无需按发行版区分的偏移量。 一次执行，即可在 2017 年以来构建的所有 Linux 内核上通用提权至 root。 该工具是一个 MCP 服务器 + Web 仪表板，用于测试任何可达的 Linux 系统是否存在此漏洞。它的诞生是因为原始 PoC 已经非常易于使用——这只是额外增加了界面、网络扫描和主机群跟踪功能。 警告： 这是一个真实的内核...

crypto-scanner

Scan your codebase for quantum-vulnerable cryptography before it's too late. Quick Start • Why Quantum-Ready? • Usage • Risk Levels • CI/CD • About Overview Crypto Scanner is a CLI tool that scans your codebase for cryptographic algorithms and generates quantum-vulnerability risk assessments. It...

CVE-NetScalerFileSystemCheck

CVE-NetScalerFileSystemCheck This script checks the Citrix Netscaler if it has been compromised by CVE-2019-19781 attacks and collects all file system information. The following files and logs will be checked Latest version 1.13: Template folders for XML files Apache Access logfiles Apache Error...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

Poc-CVE-2024-32962-xml-crypto

Poc-CVE-2024-32962-xml-crypto A simulation of an attack exploiting the CVE-2024-32962 vulnerability to forge SAML messages and gain unauthorized permissions Very soon it will become available. Poc...

CVE-2026-31431

CVE-2026-31431 Copy Fail - CVE-2026-31431 Detail https://nvd.nist.gov/vuln/detail/CVE-2026-31431 https://copy.fail/exploit https://xint.io/blog/copy-fail-linux-distributions Tested Distro / Version Distro| Version ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023| 6.18.8-9.213.amzn2023...

CVE-2022-21449-TLS-PoC

CVE-2022-21449-TLS-PoC CVE-2022-21449 also dubbed Psychic Signatures in the vulnerability writeup by Neil Madden Proof of Concept demonstrating its usage with a vulnerable client and a malicious TLS server. The malicious server presents a valid as of 2022-04-20 cert chain for www.google.com which...

Python Security Project

🔐 Desktop Cryptographic File Encryption & Decryption Tool A production-grade Python desktop security utility designed to protect local filesystem assets through authenticated symmetric encryption. This application features a responsive graphical user interface GUI built with Tkinter, an independe...

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

A flaw was found in the Go standard library packages crypto/x509 and crypto/tls. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...