Lock-Picking-Robot

🔑 Unlocked 🔑 소개 배경 오픈 소스 자물쇠 따기 로봇입니다. 기본적으로 많은 마스터 키가 사용되고 있습니다 가장 흔한 예는 TSA 007이며, 문제가 있습니다. 하나의 키로 여러 다른 자물쇠를 열 수 있다는 것, 특히 자물쇠 소유자가 그런 키의 존재를 모르거나 알리익스프레스에서 1파운드에 살 수 있다는 것은 심각한 보안 문제입니다. 그러나 TSA, 자물쇠 수리공 등은 특정 상황에서 자물쇠를 열어야 할 필요가 있으며, 자물쇠를 그들에게 쉽게 열리게 만든다면 그것은 누구에게나 쉽게 열리게 되는 것입니다. 🔒 ➡️ 🔑🤖 ➡️...

WindowsPatchDetector

실험적 Windows .text 섹션 패치 탐지기 ====================== 실험적: Windows .text 섹션 비교 - 디스크 대 메모리 원래 아이디어 Skeleton Key 악성코드http://www.secureworks.com/cyber-threat-intelligence/threats/skeleton-key-malware-analysis/에 관한 글을 읽은 후, 디스크에 있는 .exe 및 .dll 파일의 .text 섹션을 RAM에 있는 동일 섹션과 비교하여 패치를 탐지하는 작은 도구를 개발했다. 결과...

zBang

zBang은 스캔된 네트워크에서 잠재적인 권한 계정 위협을 탐지하는 특수 위험 평가 도구입니다. 조직 및 레드팀은 zBang을 활용하여 잠재적인 공격 벡터를 식별하고 네트워크의 보안 태세를 개선할 수 있습니다. 결과는 그래픽 인터페이스 또는 원시 출력 파일 검토를 통해 분석할 수 있습니다. zBang에 대한 자세한 내용은 @Hechtov의 Big zBang Theory 블로그 게시물에서 확인할 수 있습니다:...

NewStart CGSL MAIN 6.06 : chrony Multiple Vulnerabilities (NS-SA-2025-0212)

The remote NewStart CGSL host, running version MAIN 6.06, has chrony packages installed that are affected by multiple vulnerabilities: - chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to...

Prompt Injection Flaw in Vanna AI Exposes Databases to RCE Attacks

Cybersecurity researchers have disclosed a high-severity security flaw in the Vanna.AI library that could be exploited to achieve remote code execution vulnerability via prompt injection techniques. The vulnerability, tracked as CVE-2024-5565 CVSS score: 8.1, relates to a case of prompt injection...

SUSE CVE-2007-6755

The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation DualECDRBG algorithm contains point Q constants with a possible relationship to certain "skeleton key" values, which might allow context-dependent attackers to defeat cryptographic protection...

SUSE CVE-2016-1567

chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."...

Chinese Hackers Have Pillaged Taiwan's Semiconductor Industry

A campaign called Operation Skeleton Key has stolen source code, software development kits, chip designs, and more...

Huawei EulerOS: Security Advisory for chrony (EulerOS-SA-2017-1158)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : chrony (EulerOS-SA-2017-1158)

According to the version of the chrony package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote...

CVE-2016-1567

chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."...

DEBIAN-CVE-2016-1567

chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."...

DEBIAN-CVE-2015-7974

NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."...

CVE-2015-7974

NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."...

UBUNTU-CVE-2016-1567

chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."...

CVE-2016-1567

CVE-2016-1567 affects chrony before 1.31.2 and 2.x before 2.2.1, where peer associations of symmetric keys are not verified when authenticating packets. This can enable remote impersonation attacks via an arbitrary trusted key (skeleton key). Public sources in the initial document describe the af...

CVE-2015-7974

NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."...

CVE-2015-7974: Improper Authentication

NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."...

CVE-2016-1567: Undefined Security Weakness

chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."...

UBUNTU-CVE-2015-7974

NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."...