MrRAT

MrRAT 这是一个跨平台的 Python 2.x 远程访问木马（RAT），MrRAT 的创建是为了保持一个干净设计的全功能 Python RAT。目前仍在开发中，并且仍在积极修改中。 免责声明：此 RAT 仅用于研究目的，只能在经授权的系统上使用。未经授权或明确许可访问计算机系统或网络是非法的。 功能 跨平台（Windows、Linux 和 macOS） 带有 D-H 交换的 AES GCM 加密 C2 接受来自多个客户端的连接 命令执行 文件上传/下载（自加密更改以来有点缺陷） 标准实用程序（wget、unzip） 系统调查 用法 root@kitploit: $ python...

gohide

gohide Tunnel port to port traffic via an obfuscated channel with AES-GCM encryption. Obfuscation Modes Session Cookie HTTP GET http-client Set-Cookie Session Cookie HTTP/2 200 OK http-server WebSocket Handshake "Sec-WebSocket-Key" websocket-client WebSocket Handshake "Sec-WebSocket-Accept"...

NetSpy

NetSpyC2 NetSpyC2 is a Python-based Command & Control C2 server created for educational purposes, security research, and controlled laboratory environments. The project demonstrates how encrypted client-server communication, session management, and secure file transfer can be implemented at the...

CVE-2025-15467

CVE-2025-15467: OpenSSL CMS AuthEnvelopedData Stack Buffer Overflow Overview CVE-2025-15467 is a critical stack buffer overflow vulnerability in OpenSSL's CMS Cryptographic Message Syntax parsing code. The vulnerability exists in the evpciphergetasn1aeadparams function when processing AES-GCM...

pmanager

Pmanager デモ 説明 パスワードを安全なオフラインデータベースに保存し、取得します。パスワードが過去に漏洩したことがあるかを確認し、標的型のパスワード再利用攻撃を防ぎます。 なぜ別のパスワードマネージャーを開発したのか？ このプロジェクトは、Rustを学びたいという私の願いから始まりました。 keepassxcの使いにくいGUIに飽きていました。 暗号技術についてもっと学びたかったのです。 楽しみのためです。: 機能 最先端の暗号アルゴリズムを使用した安全なパスワード保存。 Argon2idの複数回の反復による鍵導出で、攻撃者がブルートフォース攻撃を行うのを困難にします。...

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs

A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service DoS for the affected system...

CryptHook

CryptHook CryptHook es una implementación modular para asegurar aplicaciones existentes con cifrado simétrico por bloques. Funciona interceptando las llamadas al sistema base para la comunicación de red send/sendto y recv/recvfrom. Crypthook funcionará con cualquier aplicación existente que depen...

Fragnesia-go

fragnesia-go Una SA. Un byte a la vez. Sin condiciones de carrera. Implementación en Go de fragnesia CVE-2026-46300. Miembro de la clase de vulnerabilidades Dirty Frag: error distinto, misma superficie, parche propio. Cómo funciona tl;dr El fallo está en el subsistema XFRM ESP-in-TCP de Linux...

CVE-2026-0177

In dosssaesgcm256op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49230-APISIX-jwe-decrypt-Auth-Bypass

CVE-2026-49230 — Apache APISIX jwe-decrypt Authentication Bypass Proof of concept for an authentication bypass in the Apache APISIX jwe-decrypt plugin. The plugin decrypts a JWE token and forwards its plaintext to the upstream, acting as an authentication gate — but it never validates the AES-GCM...

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs

A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service DoS for the affected system...

CVE-2026-11110-AES-GCM-Nonce-Reuse-Leading-to-Key-Recovery

CVE-2026-11110 – AES-GCM nonce 重用导致密钥恢复 程序代码 Python root@kitploit: aesgcmnoncereusesim.py - Simulated encryption oracle with fixed nonce from Crypto.Cipher import AES import os key = os.urandom16 nonce = b'\x00' 12 ALWAYS SAME NONCE def encryptplaintext: cipher = AES.newkey, AES.MODEGCM,...

CVE-2026-87732

An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml. The AES.GCM.authenticatedecryptinto and Chacha20.authenticatedecryptinto functions write the decrypted plaintext into a caller-provided buffer and only then compares the tag. On a forged tag, the functions returns false,...

DEBIAN-CVE-2026-87732

An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml. The AES.GCM.authenticatedecryptinto and Chacha20.authenticatedecryptinto functions write the decrypted plaintext into a caller-provided buffer and only then compares the tag. On a forged tag, the functions returns false,...

CVE-2026-87732

An issue was discovered in the mirage-crypto package before 2.2.0 for OCaml. The AES.GCM.authenticatedecryptinto and Chacha20.authenticatedecryptinto functions write the decrypted plaintext into a caller-provided buffer and only then compares the tag. On a forged tag, the functions returns false,...

USN-8720-1: GnuPG vulnerability

It was discovered that GnuPG incorrectly validated authentication tag lengths when parsing CMS messages encrypted with AES-GCM. An attacker could possibly use this issue to bypass message integrity checks...

USN-8720-1 gnupg2 vulnerability

It was discovered that GnuPG incorrectly validated authentication tag lengths when parsing CMS messages encrypted with AES-GCM. An attacker could possibly use this issue to bypass message integrity checks...

PT-2026-85369

It was discovered that GnuPG incorrectly validated authentication tag lengths when parsing CMS messages encrypted with AES-GCM. An attacker could possibly use this issue to bypass message integrity checks...

libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection...

libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection...