KindaRails2Shell

KindaRails2Shell: CVE-2026-66066 A zero-dependency, single-file proof of concept and loopback-only Docker lab for the Rails Active Storage/libvips arbitrary-file-read vulnerability. It also demonstrates the advisory's conditional escalation from a recovered secretkeybase to a forged image variati...

dp_cryptomg

dpcryptomg Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler. Exploitation leads to access to a file manager utility capable up uploading arbitrary files, usually leading to remote code execution. The vulnerability is caused by an...

hdcp-genkey

HDCP Key Generation Example This script implements a simple version of the HDCP key generation algorithm in Python using the leaked HDCP master key which is located in master-key.txt. Usage: generatekey.py options Options: -h, --help show this help message and exit -m FILE, --master=FILE load...

quantumslop

Shor's Algorithm for ECDLP — Q-Day Prize Submission Quantum solver for the Elliptic Curve Discrete Logarithm Problem ECDLP, built for the Q-Day Prize Challenge by Project Eleven. The goal: recover ECC private keys on real quantum hardware using Shor's algorithm. Author : Giancarlo Lelli Contact :...

fluxion

Fluxion is the future of MITM WPA attacks Fluxion is a security auditing and social-engineering research tool. It is a remake of linset by vk496 with hopefully fewer bugs and more functionality. The script attempts to retrieve the WPA/WPA2 key from a target access point by means of a social...

sshkey-grab

sshkey-grab This script uses a bug in ssh-agent that allows it to pull the last key added to the agent. This may allow the ability to recover a key that has been removed from ssh-agent via ssh-add -t, -d, or -D, provided that the ssh-agent was not terminated and a new key has not been added since...

cryptography-research-demo

Artifacts for "Further Single-Key Recovery Attacks on Reduced-Round AES" Source code for every experiment quoted in the paper. No measurement output or prebuilt table is bundled: each program prints or writes its own results, so every number can be regenerated from scratch. directory| what it is...

gentlemen-decryptor

The Gentlemen Ransomware Decryptor The first publicly available decryption method for The Gentlemen ransomware. The Gentlemen also known as hastalamuerte is currently the most active ransomware-as-a-service RaaS operation globally, with 320+ confirmed victims as of Q1 2026. Until now, every major...

CVE-2023-33242

CVE-2023-33242 CVE-2023-33242 PoC The simulated Lindell17 protocol is vulnerable to a bit extraction exploit, allowing an attacker to recover the private key by iteratively extracting individual bits of the key. The protocol is designed to generate ECDSA signatures in a client-server model, with...

RsaCtfTool

RsaCtfTool RSA multi-attack tool that decrypts data from weak public keys and recovers private keys. Overview This tool is a utility designed to decrypt data from weak public keys and attempt to recover the corresponding private key. It offers a comprehensive range of attack options for cracking...

keepass-password-dumper

KeePass 2.X Master Password Dumper CVE-2023-32784 Update The vulnerability was assigned CVE-2023-32784 and fixed in KeePass 2.54. Thanks again to Dominik Reichl for his fast response and creative fix! Clarification: the password has to be typed on a keyboard, not copied from a clipboard see the H...

keepass_dump

Keepass-Dumper This is my PoC implementation for CVE-2023-32784 My version is a python port of @vdohney's PoC along with a few changes and additional features. Changes One change, was to use known strings that can be found within the dump file in order to more accurately jump to the location of t...

mfcuk

README 컴파일: autoreconf -is ./configure make 실행 가장 기본: ./mfcuk -C -R 0:A -v 2 패키지 MiFare Classic Universal toolKit MFCUK 도구 Mifare Classic DarkSide Key Recovery Tool mfcukkeyrecoverydarkside.c 이전에는 zvmfdarkside로 알려짐 ... 라이선스 GPL. 자세한 내용은 MFCUKLICENSE를 참조하십시오. 참고 문헌 특별한 순서 없음 1. WPMCC09 - "Wireless...

heartbleed-tools

OpenSSL Heartbleed CVE-2014-0160 vulnerability scanner, data miner and RSA key-restore tools. Author: Einar Otto Stangvik / @einaros / https://hacking.ventures Since the cat is long since out of the bag, and others have begun publishing their tools, I'm putting mine out there too. Hopefully this...

CVE-2020-10560-Key-Recovery

CVE-2020-10560 Key Recovery AES This PoC recovers the sitekey for OSSN 5.3 and above. For more information see http://techanarchy.net/blog/cve-2020-10560-ossn-arbitrary-file-read...

NoMoreXOR

NoMoreXOR.py Tool to help guess a files 256 byte XOR key by using frequency analysis. Usage usage: NoMoreXOR.py -h -a -c -xor key -g -o outfile -y YARARULES Path Tool to help guess a files 256 byte XOR key by using frequency analysis. positional arguments: Path Path to file to be analyzed optiona...

c-jwt-cracker

Craqueur de JWT Un craqueur par force brute multi-threadé de JWT écrit en C. Si vous êtes très chanceux ou disposez d'une puissance de calcul énorme, ce programme devrait trouver la clé secrète d'un jeton JWT, vous permettant de forger des jetons valides. Ceci est uniquement à des fins de test, n...

mfoc

MFOC는 Nethemba의 "offline nested" 공격의 오픈 소스 구현체입니다. 이 프로그램은 MIFARE Classic 카드에서 인증 키를 복구할 수 있게 해줍니다. 참고로 MFOC는 대상에 알려진 키가 있는 경우에만 키를 복구할 수 있습니다: 기본 키MFOC에 하드코딩됨 또는 사용자 지정 키사용자가 명령줄로 제공. 소스에서 빌드 autoreconf -is ./configure make && sudo make install 사용법 키를 복구하려는 MIFARE Classic 태그를 하나 놓으세요; mfoc을 실행하려...

xortool

xortool.py Инструмент для xor-анализа: подбор длины ключа на основе количества совпадающих символов подбор ключа на основе знания самого частого символа Примечание: xortool теперь работает только на Python 3. Старая версия для Python 2 доступна в ветке py2. Пакет pip обновлён. Установка $ pip3...

CVE-2026-4567-Post-Quantum-KEM-Timing-Side-Channel-Kyber-Decapsulation-

2. CVE-2026-4567 – Post-Quantum KEM Timing Side-Channel Kyber Decapsulation Overview A vulnerable implementation of the Kyber KEM decapsulation leaks secret key bits through timing differences in the ciphertext rejection step, enabling full key recovery. Severity: Critical Private Key Compromise...