formal_np1sec

Forschung zum Nachweis der Vertraulichkeit des Gruppenschlüssels im Gruppenschlüsselaustausch-Teil von n+1sec, mit bestimmten Einschränkungen wie nur 3 Teilnehmern. Diese Arbeit wurde von Alex Balducci und Andy Lee durchgeführt. Das Hauptdokument ist gkepnormxormsimplifiedwriteup.txt. Es enthält...

NetSpy

NetSpyC2 NetSpyC2 एक Python-आधारित कमांड एंड कंट्रोल C2 सर्वर है जो शैक्षिक उद्देश्यों, सुरक्षा अनुसंधान और नियंत्रित प्रयोगशाला वातावरण के लिए बनाया गया है। यह प्रोजेक्ट दर्शाता है कि Python का उपयोग करके एप्लिकेशन प्रोटोकॉल स्तर पर एन्क्रिप्टेड क्लाइंट-सर्वर संचार, सत्र प्रबंधन और सुरक्षित फ़ाइ...

PQC-Scanner

The PQC Network Scanner è uno strumento di valutazione appositamente progettato per aiutare le organizzazioni a comprendere la propria esposizione crittografica mentre transitano verso una postura di sicurezza post‑quantistica. A differenza dei tradizionali scanner TLS che si concentrano...

cve-2025-26466-openssh-poc

CVE-2025-26466 OpenSSH SSH2MSGPING DoS PoC Aviso: Este código destina-se exclusivamente a fins educacionais e testes de segurança autorizados. Ataques não autorizados a sistemas de terceiros são ilegais. Vulnerabilidade CVE-2025-26466 é uma vulnerabilidade de negação de serviço DoS pré-autenticaç...

BlackBerryC2

BlackBerryC2 2.0.0-beta BlackBerryC2 ist ein verschlüsseltes Fernverwaltungs- und C2-Framework , das ausschließlich für Bildungszwecke, Sicherheitsforschung und kontrollierte Laborumgebungen entwickelt wurde. Das Projekt zeigt, wie man einen benutzerdefinierten Command-and-Control-Server mit...

CVE-2025-26466

CVE-2025-26466 CVE-2025-26466 के लिए PoC Fikret Can Gurbuz द्वारा बनाया गया उपयोग root@kitploit: python3 poc.py -i -p ये चरण हैं: 1. पोर्ट से TCP कनेक्ट करें 2. सर्वर बैनर प्राप्त करें SSH-2.0-OpenSSHX.Xp1 3. अपना क्लाइंट बैनर भेजें SSH-2.0-YourClient\r\n 4. wrapsshpacketbuildkexinit भेजें 5. सर्...

SSH-Weak-DH

Informazioni Questo strumento crea connessioni SSH a un server e passa attraverso diverse configurazioni client per verificare se il server consente uno scambio di chiavi Diffie-Hellman DH utilizzando un gruppo debole. Il nostro obiettivo è aiutare a valutare i server SSH per impostazioni di...

ECC_Attacks

Ataques Conhecidos à Criptografia de Curvas Elípticas Introdução Introdução às Curvas Elípticas Curvas Elípticas no Contexto da Criptografia Ataques ECC Ataques ECDH A Ordem do Gerador é Muito Pequena A Ordem do Gerador é um Número Suave A Ordem do Gerador é Quase um Número Suave, e a Chave Priva...

DHEater

DHEater DHEater is the proof-of-concept implementation of the DHEat attack CVE-2002-20001. It saturates a server's CPU by enforcing Diffie-Hellman ephemeral DHE or elliptic-curve Diffie-Hellman ephemeral ECDHE key exchange over both TLS and SSH. For further information about the attack visit the...

camel-pqc-tls

TLS Post-Quantum con Apache Camel Questa repository contiene tre esempi che dimostrano gli handshake TLS 1.3 con crittografia post-quantistica PQC con Apache Camel, utilizzando lo scambio di chiavi ibrido X25519MLKEM768. X25519MLKEM768 combina il classico X25519 Diffie-Hellman su curva ellittica...

CVE-2025-32433.py

CVE-2025-32433.py Questo PoC Python simula i flussi di messaggi SSH, inclusi lo scambio di chiavi, l'apertura del canale e le richieste di comando, per analizzare il comportamento del server. Pensato per test di laboratorio controllati, dimostra la gestione del protocollo, l'elaborazione dei...

reternal-quickstart

RE:TERNAL Note: Still under development, only use for testing and do not expose interfaces! Current compose doesn't work yet, only try when you know what you're doing RE:TERNAL is a centralised purple team orchestration service to manage third-party C2 frameworks. Agents are installed on endpoint...

CVE-2026-73430

Russh is a Rust SSH client & server library. Prior to 0.62.4, an unauthenticated SSH client can cause a denial of service by sending SSHMSGKEXECDHINIT with a 32-byte all-zero QC value. Curve25519Kex::serverdh in russh/src/kex/curve25519.rs accepts the all-zero peer public value and computes an...

CVE-2026-73430

Russh is a Rust SSH client & server library. Prior to 0.62.4, an unauthenticated SSH client can cause a denial of service by sending SSHMSGKEXECDHINIT with a 32-byte all-zero QC value. Curve25519Kex::serverdh in russh/src/kex/curve25519.rs accepts the all-zero peer public value and computes an...

PT-2026-71343

Name of the Vulnerable Software and Affected Versions Russh versions prior to 0.62.4 Description An unauthenticated SSH client can trigger a denial of service by sending an SSH MSG KEX ECDH INIT message containing a 32-byte all-zero Q C value. The Curve25519Kex::server dh function in...

Astra Linux – Vulnerability in wpa

In Hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker who has successfully bootstrapped public keys with another entity using PKEX in the past will be able to subvert future bootstrapping attempts by passively observing the public keys. By...

Astra Linux – Vulnerability in python-cryptography

Cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to version 46.0.5, the publickeyfromnumbers or EllipticCurvePublicNumbers.publickey, EllipticCurvePublicNumbers.publickey, loadderpublickey, and loadpempublickey functions did not verify...

Key Exchange without Entity Authentication

Overview Affected versions of this package are vulnerable to Key Exchange without Entity Authentication due to disabled SSH host key verification in the EMR SSH helper commands. An attacker can intercept SSH sessions and file transfers by performing a man-in-the-middle attack between the client a...

CVE-2026-18654

Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and AWS CLI v2 before 2.35.3 might allow man-in-the-middle attackers to intercept SSHsessions and file transfers via network positioning between the client and the EMR cluster endpoint. To...

CVE-2026-59650

Bouncy Castle for Java up to 1.84 (and Java LTS up to 2.73.11) is affected by CVE-2026-59650: MTI/A0 DH key exchange exponentiates an unvalidated peer value. This can impact confidentiality and integrity as described in the CVE, with overall severity listed as CRITICAL (CVSS 9.3). The issue is fi...