private-landing

Частный лендинг Изучайте аутентификацию, создавая её правильно. Демо · Модель угроз · Потоки аутентификации · ADRs Примечание к демо: Конечная точка входа защищена адаптивными PoW-задачами — повторные неудачи увеличивают сложность доказательства работы. Ограничение частоты запросов на основе кэша...

ios_Restriction_PassCode_Crack---Python-version

Взлом кода ограничений iOS - версия Python Обзор ios Restriction PassCode Cracker , эта версия приложения написана на языке программирования Python и используется для взлома кода ограничений Restriction PassCode iPhone/iPad. iphone/ipad 访问限制密码破解 Метод тот же, что и в версии C Перебор 1. Получить...

vboxdie-cracker

Взломщик пароля шифрования образа диска Virtual Box Требования 1. PHP = 5.5.0 2. OpenSSL = 1.0.1 поддержка XTS Описание алгоритма Пароль пользователя хранится с помощью комбинации PBKDF2 и AES-XTS следующим образом приведенные значения фиксированы на данный момент, но их можно контролировать внут...

hcxtools

hcxtools Небольшой набор инструментов для преобразования пакетов из файлов захвата в хэш-файлы, пригодные для использования с Hashcat или John the Ripper. Эти инструменты на 100% совместимы с Hashcat и John the Ripper и одобрены сообществом Hashcat. Краткое описание Основная цель hcxtools —...

sandy

sandy Copyright 2013 Sandy Written by: Laszlo Toth, Ferenc Spala Description Sandy is an open-source Samsung phone encryption assessment framework. Sandy has different modules that allow you to carry out different attack scenarios against encrypted Samsung phones. For the details check our Derbyc...

pmkidcracker

PMKID WPA2 Cracker This program is a tool written in Python to recover the pre-shared key of a WPA2 WiFi network without any de-authentication or requiring any clients to be on the network. It targets the weakness of certain access points advertising the PMKID value in EAPOL message 1. Program...

Grafana-CVE-2021-43798

CVE-2021-43798 Grafana 무단 임의 파일 읽기 취약점 8.3.1 2021-12-07 보안: CVE-2021-43798 수정. 자세한 정보는 블로그를 참조하세요. https://grafana.com/blog/2021/12/07/grafana-8.3.1-8.2.7-8.1.8-and-8.0.7-released-with-high-severity-security-fix/ 예: DB 비밀번호 가져오기 /var/lib/grafana/grafana.db 솔트된 비밀번호 평문 검증...

steganography

Инструмент стеганографии изображений Простой инструмент на C++ для шифрования и стеганографии , который использует шифрование с защитой паролем для защиты содержимого файла, а затем встраивает его в пиксельные данные изображения с помощью кодирования наименьшего значащего бита LSB. Для систем...

CryptHook

CryptHook CryptHook은 기존 애플리케이션을 대칭 블록 암호화로 보호하는 모듈식 구현체입니다. 네트워크 통신용 기본 시스템 호출인 send/sendto 및 recv/recvfrom을 후킹하는 방식으로 동작합니다. Crypthook은 이러한 시스템 호출에 의존하는 모든 기존 애플리케이션에서 작동합니다. 암호화 CryptHook은 256비트 키를 사용하는 AES GCM 모드를 사용합니다. 키는 PBKDF2를 사용하여 패스프레이즈에서 생성됩니다. IV는 무작위 바이트 데이터로 즉석에서 구성되며, 수신 측에서는 동일한 키...

vboxdie-cracker

Virtual Box Disk Image Encryption password cracker Requirements 1. PHP = 5.5.0 2. OpenSSL = 1.0.1 XTS support Algorithm description User password is stored using a combination of PBKDF2 and AES-XTS as following shown values are fixed at the moment, but they can be controlled inside the file forma...

jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication

A flaw was found in pgjdbc, an open-source PostgreSQL JDBC Driver. A malicious server can exploit this vulnerability by instructing the driver to perform SCRAM-SHA-256 Salted Challenge Response Authentication Mechanism Secure Hash Algorithm 256 authentication with an excessively large iteration...

jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication

A flaw was found in pgjdbc, an open-source PostgreSQL JDBC Driver. A malicious server can exploit this vulnerability by instructing the driver to perform SCRAM-SHA-256 Salted Challenge Response Authentication Mechanism Secure Hash Algorithm 256 authentication with an excessively large iteration...

Grafana-Password-Decryptor

Grafana 비밀번호 복호화 도구 다중 형식의 Grafana 비밀번호를 복호화 및 크래킹하는 Python 도구 키트입니다. 제작: strikoder 이 도구는 무엇을 하나요? 두 가지 유형 의 Grafana 비밀번호 저장 방식을 처리합니다: 🔐 AES-256 Base64 datasource 테이블 → AESDecrypt.py로 직접 복호화 🔨 PBKDF2HMACSHA256 user 테이블 → grafana2hashcat.py로 Hashcat용 변환 CVE-2021-43798 경로 탐색 이후 사후...

CVE-2025-11187

CVE-2025-11187 PKCS12 PBMAC1 PBKDF2 鍵長におけるスタックバッファオーバーフロー OpenSSL 3.X 約1年前にこのスタックバッファオーバーフローを発見しましたが、重複 CVE-2025-11187 であることが判明しました。 この問題は、PBKDF2 の鍵長が攻撃者によって制御可能な場合に、libcrypto の PKCS12 PBMAC1 処理で発生します。OpenSSL 3.6.0 で試行 pkcs12genmac crypto/pkcs12/p12mutl.c 内の固定スタックバッファを超える書き込みを引き起こします。 コンポーネント:...

Steganography-Online-Codec-JavaScript

JavaScript 및 NPM용 스테가노그래피 온라인 코덱 SDK 스테가노그래피 온라인 코덱Steganographic Online Codec 을 사용하면 AES 암호화 알고리즘과 256비트 PBKDF2 파생 키를 사용하여 이미지 및 사진 내부에 비밀번호로 암호화된 메시지를 숨길 수 있습니다. 다음 사이트에서 무료로 사용할 수 있습니다: https://www.pelock.com/products/steganography-online-codec 이 SDK는 WebAPI 인터페이스를 통해 코덱과 그 인코딩 및 디코딩 기능에 대한...

CVE-2026-81718

opensslencrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-force wrapping password...

CVE-2026-81718 openssl_encrypt before 1.4.9 Weak Cryptographic Parameters

opensslencrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-force wrapping password...

EUVD-2026-67068

opensslencrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-force wrapping password...

CVE-2026-81718 openssl_encrypt before 1.4.9 Weak Cryptographic Parameters

opensslencrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-force wrapping password...

CVE-2026-81718

openssl_encrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 key derivation, employing only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-f...