Huan

Huan Huan は、PE ファイル構造と PE ローディングプロセスを学習するために開発した、暗号化 PE ローダー生成ツールです。実行する PE ファイルを毎回異なる鍵で暗号化し、ローダーバイナリの新しいセクションに埋め込みます。現在は 64 ビット PE ファイルで動作します。 仕組み まず、Huan は指定された PE ファイルを読み込み、CBC モードの AES-128 暗号化アルゴリズムで暗号化します。暗号化には Tiny AES in C を使用し、このライブラリのためにパディングコードを準備しました。暗号化が完了すると、Visual Studio...

sony-vp-extract

Sony WH-1000XM4 ボイスパック抽出ツール Sony WH-1000XM4 の暗号化されたファームウェアファイルから、音声ガイダンスのMP3プロンプトを復号・抽出します。 AES-128-CBC 鍵は、ヘッドホンのAiroha MT2811ファームウェアをBluetooth Low Energy経由で RACEプロトコル を使ってダンプし、ARM Cortex-...

udp2raw

Udp2raw-tunnel Raw Socket を使用して UDP トラフィックを暗号化された FakeTCP/UDP/ICMP トラフィックに変換し、UDP ファイアウォール（または不安定な UDP 環境）をバイパスするトンネルです。 単体で使用する場合、udp2raw は UDP トラフィックのみをトンネリングします。ただし、udp2raw と任意の UDP ベースの VPN を併用すると、あらゆるトラフィック（TCP/UDP/ICMP を含む）をトンネリングできます。現在、OpenVPN/L2TP/ShadowVPN および tinyfecVPN...

CVE-2023-3350

CVE-2023-3349 / CVE-2023-3350 | IBERMATICA RPS 2019 IBERMATICA RPS 2019 における、認証を必要としない情報漏えいと暗号設計上の欠陥を文書化したセキュリティ研究です。 これらの脆弱性を連鎖させることで、認証に関連する SQL クエリを含むアプリケーションログを露出させ、可逆的な AES-CBC 暗号文からユーザーパスワードを復元できます。 免責事項...

EUVD-2026-91834

Armatura One stores database and message-broker credentials in an install configuration file, encrypting them with AES-128-CBC when this protection is enabled. The encryption key and initialization vector are fixed values embedded in the software itself and are identical across every installation...

CVE-2026-94591

Armatura One stores database and message-broker credentials in an install configuration file, encrypting them with AES-128-CBC when this protection is enabled. The encryption key and initialization vector are fixed values embedded in the software itself and are identical across every installation...

CVE-2026-94591 Armatura LLC Armatura One Use of Hard-coded Cryptographic Key

Armatura One stores database and message-broker credentials in an install configuration file, encrypting them with AES-128-CBC when this protection is enabled. The encryption key and initialization vector are fixed values embedded in the software itself and are identical across every installation...

CVE-2026-94591

Armatura One is vulnerable to the compromise of database and message-broker credentials due to a hard-coded cryptographic key (CWE-321 ). When the software's protection is enabled, it encrypts these credentials using AES-128-CBC ; however, the encryption key and initialization vector are fixed va...

SHIRO-721

SHIRO-721 RememberMe Padding Oracle 脆弱性 RCE 0x00 概要： RememberMe cookieはAES-128-CBCモードで暗号化されており、パディングオラクル攻撃の影響を受けやすくなっています。 攻撃者は有効なRememberMe cookieをPadding Oracle Attackのプレフィックスとして使用し、細工されたRememberMeを生成してJavaの逆シリアライズ攻撃（例: SHIRO-550）を実行できます。 0x01 問題の再現手順： 1. Webサイトにログインし、cookieからRememberMeを取得します。 ...

reyee_decrypt

reyeedecrypt 自适应解密锐捷 Ruijie ReyeeOS 的固件与配置备份，并从配置中恢复明文口令。 用法 python3 reyeedecrypt.py 输出目录 自动识别，支持以下几种： 输入| 例子 ---|--- 固件 tar 包| AP3.01...withbootencryptov1.tar.gz 固件解压目录| ...withbootencryptov1/ 加密 install bin| ...installencryptov1.bin / ...installencryptov2.bin 加密 u-boot| u-boot-encryptov2 配置备份|...

BIT-CEPH-2026-39944 Ceph: CephX AES Authentication error

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the RADOS Gateway RGW protects STS session tokens with an AES-128-CBC handler that provides no message authentication, allowing an attacker who holds any valid ST...

AZL-98039 CVE-2025-30156 affecting package ceph 18.2.2-13

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication protocol encrypts tickets with AES-128-CBC in an unauthenticated mode that uses a hard-coded initialization vector and no message...

CVE-2025-30156

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication protocol encrypts tickets with AES-128-CBC in an unauthenticated mode that uses a hard-coded initialization vector and no message...

CVE-2026-39944: Use of a Broken or Risky Cryptographic Algorithm

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the RADOS Gateway RGW protects STS session tokens with an AES-128-CBC handler that provides no message authentication, allowing an attacker who holds any valid ST...

CVE-2025-30156: Use of a Broken or Risky Cryptographic Algorithm

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication protocol encrypts tickets with AES-128-CBC in an unauthenticated mode that uses a hard-coded initialization vector and no message...

EUVD-2026-67315

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the RADOS Gateway RGW protects STS session tokens with an AES-128-CBC handler that provides no message authentication, allowing an attacker who holds any valid ST...

CVE-2026-39944 Ceph: CephX AES Authentication error

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the RADOS Gateway RGW protects STS session tokens with an AES-128-CBC handler that provides no message authentication, allowing an attacker who holds any valid ST...

CVE-2026-39944

CVE-2026-39944 affects the Ceph RADOS Gateway (RGW) , where STS session tokens are protected by an AES-128-CBC handler that provides no message authentication. An attacker holding any valid STS token can perform a CBC bit-flip on the acct_type, perm_type, and is_admin fields to forge an is_admin ...

CVE-2026-39944 Ceph: CephX AES Authentication error

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the RADOS Gateway RGW protects STS session tokens with an AES-128-CBC handler that provides no message authentication, allowing an attacker who holds any valid ST...

EUVD-2025-210807

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication protocol encrypts tickets with AES-128-CBC in an unauthenticated mode that uses a hard-coded initialization vector and no message...