database-druid

druid encode java -cp druid-1.1.19.jar com.alibaba.druid.filter.config.ConfigTools 密码 Example: java -cp druid-1.1.19.jar com.alibaba.druid.filter.config.ConfigTools jas502n root@kitploit:...

CVE-2022-25012-dvr4-weak-password-encryption

This is an improved version of the exploit by deathflash1411 Original exploit: https://www.exploit-db.com/exploits/50130 Improved Features Cracked password is now output as reconstructed password string instead of only output character by character The encrypted password string is now entered as ...

CVE-2022-25012

Argus Surveillance DVR 4.0 - 弱密码加密 CVE-2022-25012 此弱密码加密脚本的更新版本 Exploit DB 参考: https://www.exploit-db.com/exploits/50130 作者参考: https://deathflash1411.github.io/blog/dvr4-hash-crack NIST 参考: https://nvd.nist.gov/vuln/detail/CVE-2022-25012 描述: 作者曾表示他们没有为特殊 ASCII 字符添加额外的条目。...

CSRF-breach

安全漏洞项目 - 跨站请求伪造 Dolibarr 7.0.0 受到以下漏洞影响：跨站请求伪造（CSRF）。其影响为：允许恶意 HTML 更改用户密码、禁用用户以及禁用密码加密。受影响组件为：用户密码修改、用户禁用及密码加密功能。攻击向量为：管理员访问恶意 URL。 演示 演示步骤 运行：'vagrant up' 以构建环境（自然需要一些时间：最多几个小时——这就是 Vagrant，你能咋办 ¯ツ/¯）。 环境就绪后，从 dev 目录运行以下命令： root@kitploit: rm index.html mv backupindex.html index.html 运行...

stegano

bzt によるステガノグラフィ オンラインデモ 一言で言えば、 ステガノグラフィ...

hash-identifier

hash-identifier データの暗号化、特にパスワードの暗号化に使用されるさまざまな種類のハッシュを識別するソフトウェア。 対応している暗号化形式: ADLER-32 CRC-32 CRC-32B CRC-16 CRC-16-CCITT DESUnix FCS-16 GHash-32-3 GHash-32-5 GOST R 34.11-94 Haval-160 Haval-192 110080 ,Haval-224 114080 ,Haval-256 Lineage II C4 Domain Cached Credentials XOR-32 MD5Half MD5Middle...

gpp-encrypt

gpp-encrypt 描述 这个小脚本将密码加密为 gpp cpassword。它可用于创建易受攻击的实验 AD 环境。 环境要求 该包需要： python3 python3 标准库 安装 root@kitploit: git clone "https://github.com/mauricelambert/gpp-encrypt.git" cd "gpp-encrypt" python3 -m pip install -r requirements.txt 用法 命令行 root@kitploit: python3 gpp-encrypt.py Using python script...

CVE-2022-25012

CVE-2022-25012 Argus Surveillance DVR v4.0 采用弱密码加密。 编译 root@kitploit: gcc pocland.c -o pocland 使用示例 root@kitploit: ./pocland B4A1ECB4F539C48C7357F641C9C49083 参考 CVE-2022-25012 更多 PoC 可在 pocland 获取...

openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap

A flaw was found in the OpenSSL CMS implementation RFC 3211 KEK Unwrap. This vulnerability allows memory corruption, an application level denial of service, or potential execution of attacker-supplied code via crafted CMS messages using password-based encryption PWRI...

Covert Timing Channel

Overview Affected versions of this package are vulnerable to Covert Timing Channel via the authentication process. An attacker can recover user credentials by exploiting timing differences during MD5-hashed password comparison. This is only exploitable if the database contains MD5-hashed password...

CVE-2026-5363 Use of weak cryptographic key in TP-Link Archer C7

Inadequate Encryption Strength vulnerability in TP-Link Archer C7 v5 and v5.8 uhttpd modules allows Password Recovery Exploitation. The web interface encrypts the admin password client-side using RSA-1024 before sending it to the router during login. An adjacent attacker with the ability to...

CVE-2026-30785 RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305)

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution', Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-client RustDesk Client rustdesk, hbbcommon on Windows, MacOS, Linux Password security module, config encryption, machine U...

CVE-2026-30785

RustDesk Client (through version 1.4.5) is affected by CVE-2026-30785 due to a vulnerability described as Prototype Pollution and weak password hashing in the password_security, config, and machine-uid-related code paths (hbb_common and related modules). The issue can allow Retrieve Embedded Sens...

CVE-2026-30785 RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305)

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution', Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-client RustDesk Client rustdesk, hbbcommon on Windows, MacOS, Linux Password security module, config encryption, machine U...

Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is affected by a vulnerability that could provide weaker than expected security (CVE-2025-13333)

Summary IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is affected by a vulnerability that could provide weaker than expected security when enabling AES-256 password encryption. Vulnerability Details Refer to the security bulletins listed in the...

openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap

A flaw was found in the OpenSSL CMS implementation RFC 3211 KEK Unwrap. This vulnerability allows memory corruption, an application level denial of service, or potential execution of attacker-supplied code via crafted CMS messages using password-based encryption PWRI...

CVE-2024-52334

A vulnerability has been identified in syngo.plaza VB30E All versions VB30EHF07. The affected application does not encrypt the passwords properly. This could allow an attacker to recover the original passwords and might gain unauthorized access...

CVE-2024-52334

A vulnerability has been identified in syngo.plaza VB30E All versions VB30EHF07. The affected application does not encrypt the passwords properly. This could allow an attacker to recover the original passwords and might gain unauthorized access...

CVE-2024-52334

CVE-2024-52334 concerns syngo.plaza VB30E (all versions

CVE-2024-52334

A vulnerability has been identified in syngo.plaza VB30E All versions VB30EHF07. The affected application does not encrypt the passwords properly. This could allow an attacker to recover the original passwords and might gain unauthorized access...