sandy

sandy Copyright 2013 Sandy 작성자: Laszlo Toth, Ferenc Spala 설명 Sandy는 오픈소스 삼성 휴대폰 암호화 평가 프레임워크입니다. Sandy는 암호화된 삼성 휴대폰을 대상으로 다양한 공격 시나리오를 수행할 수 있는 여러 모듈을 제공합니다. 자세한 내용은 Derbycon 3.0 프레젠테이션Oracle과 Samsung의 공통점은 무엇일까요? 그들은 암호화에 대해 다르게 생각하려고 했습니다.을 참조하세요. 요구 사항 python 2.7로 개발되었습니다. 대부분의 모듈은 OSX에서 작동합니다...

alaniz-cipher

El Cifrado Alaniz v3 Cifrado Post-Cuántico Basado en Haces mediante Permutaciones Vectoriales de Cuerpos Finitos Una primitiva criptográfica basada en el Problema de Inversión de Morfismos de Haces No Lineales NL-SMIP: un sistema polinomial con coeficientes secretos acoplados por cohomología de...

Dumpy

Description This tool dynamically calls MiniDumpWriteDump to dump lsass memory content. This process is done without opening a new process handle to lsass and using DInvokers to make it harder to detect its malicious behaviour. In order to obtain a valid process handle without calling OpenProcess...

SleepyCrypt

SleepyCrypt A shellcode function to encrypt a running process image in memory when sleeping. This is the companion code for my blog post here. Build Just run build.sh to compile the C code, extract the .text section as shellcode, and compile it into a test binary called sleep.exe. This will requi...

CVE-2026-105208

ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption, allowing authenticated users to tamper with their own token so it is accepted for another user's external login intent. An attacker who predicts a victim's in-flight intent...

Shellcrypt

Shellcrypt A single-file cross-platform quality of life tool to obfuscate a given shellcode file and output in a useful format for pasting directly into your source code. Contributors These are going here because they deserve it An00bRektn github twitter ♥ 0xtejas github Encryption Methods...

Telerik-UI-ASP.NET-AJAX-Exploitation

Telerik-UI-ASP.NET-AJAX-Explotación Carga de archivos sin restricciones por cifrado débil en versiones afectadas CVE-2017-11317 2. Ejecución remota de código por deserialización insegura - CVE-2019-18935...

CVE-2020-27688

CVE-2020-27688 Introducción RVTools es una aplicación desarrollada por Robware.net y está escrita en .NET 4.6.1. Interactúa con entornos vSphere para extraer información en formato CSV o XLSX. Puede ejecutarse a través de una interfaz gráfica GUI o utilizando un archivo CSV de entrada en el que s...

CVE-2026-105208 ZITADEL before 4.17.3 Session Hijacking via Forgeable IdP Intent Tokens

ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption, allowing authenticated users to tamper with their own token so it is accepted for another user's external login intent. An attacker who predicts a victim's in-flight intent...

EUVD-2026-92101

ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption, allowing authenticated users to tamper with their own token so it is accepted for another user's external login intent. An attacker who predicts a victim's in-flight intent...

CVE-2026-105208 ZITADEL before 4.17.3 Session Hijacking via Forgeable IdP Intent Tokens

ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption, allowing authenticated users to tamper with their own token so it is accepted for another user's external login intent. An attacker who predicts a victim's in-flight intent...

CVE-2018-7211-PoC

CVE-2018-7211-PoC El PoC||GTFO de CVE-2018-7211 Referencia: https://membership.backbox.org/idashboards-9-6b-multiple-vulnerabilities/ Requisitos Ninguno, solo Python Uso Ejecute el script $ git clone https://github.com/bowline90/CVE-2018-7211-PoC.git $ cd CVE-2018-7211-PoC $ chmod +x PoCedcrypt.p...

Telerik_CVE-2019-18935

TelerikUI Python Scanner telerikrcescan.py Examples Assess an IP for CVE-2019-18935 $ python3 telerikrcescan.py -t 192.168.44.21 Assess a hostname for CVE-2019-18935 $ python3 telerikrcescan.py -t vulnerable.telerik.net Assess a CIDR network range for CVE-2019-18935 $ python3 telerikrcescan.py -r...

UI_CVE-2017-9248

UICVE-2017-9248 Exploit de oráculo de cifrado basado en Base64 para CVE-2017-9248 Telerik UI para el manejador de diálogo de ASP.NET AJAX...

RansomLord

RansomLord NG v1.0 Anti-Ransomware exploit tool. Proof-of-concept tool that automates the creation of PE files, used to exploit ransomware pre-encryption. Updated version NG: https://github.com/malvuln/RansomLord/releases/tag/v1.0 Lang: C SHA256:...

Decrypt-passwords-for-Huawei-routers-and-switches-CVE-2012-4960

Decrypt passwords for Huawei routers and switches/CVE-2012-4960 In multiple Huawei products, DES encryption algorithm is used for password and the encryption is not strong enough so it may be cracked. This Vulnerability has been assigned Common Vulnerabilities and Exposures CVE ID: CVE-2012-4960...

cve-2026-39031-lansweeper-lsrunase2-lsencrypt2

CVE-2026-39031: Lansweeper lsrunase 2.0 / lsencrypt 2.0 Password Recovery Summary Lansweeper lsrunase 2.0 and lsencrypt 2.0 use a reversible password encryption scheme based on RC4. The RC4 key is derived from an 8-character prefix that is stored in cleartext with the encrypted password and fixed...

hikvision_CVE-2017-7921_auth_bypass_config_decryptor

hikvisionCVE-2017-7921authbypassconfigdecryptor 이 파이썬 파일은 CVE-2017-7921에 취약한 hikvision 카메라에서 사용되는 configurationFile을 복호화합니다. https://www.checkpoint.com/defense/advisories/public/2017/cpai-2017-0876.html/ Description Hikvision IP 카메라 인증 우회 CVE-2017-7921 기본적으로, 위에 나열된 CVE에 취약한 hikvision 카메라는 URL에 인...

LeetObfuscator

LeetObfuscator ██╗ ███████╗███████╗████████╗ ██║ ██╔════╝██╔════╝╚══██╔══╝ ██║ █████╗ █████╗ ██║ ██║ ██╔══╝ ██╔══╝ ██║ ███████╗███████╗███████╗ ██║ ╚══════╝╚══════╝╚══════╝ ╚═╝ ██████╗ ██████╗ ███████╗██╗ ██╗███████╗ ██████╗ █████╗ ████████╗ ██████╗ ██████╗ ██╔═══██╗██╔══██╗██╔════╝██║...

cve-2025-59287

CVE-2025-59287 - Kit de Explotación WSUS por adel-h4x0a ⚠️ Solo para fines educativos y de pruebas autorizadas ⚠️ Resumen Este kit demuestra la explotación de CVE-2025-59287, una vulnerabilidad de ejecución remota de código en Windows Server Update Services WSUS. Componentes 1. Módulo de cifrado...