psobf

PowerShell Obfuscator 이 도구는 코드를 변환하여 분석 및 정적 시그니처를 방해하는 것을 목표로 하며, 실험실 및 승인된 Red Team/Pentesting 작업에 유용합니다. 6단계의 난독화 수준과 변환/파이프라인 아키텍처를 지원하며, 문자열 토큰화, 간단한 리터럴 암호화, 숫자 마스킹, 식별자 변형, 포맷 "지터", 제어 흐름 미화, 데드 코드 삽입, 조각화 프로파일 및 결정론적 프로파일과 같은 기술을 중첩할 수 있습니다. ⚠️ 책임 있는 사용: 이 도구는 연구 및 승인된 테스트 전용입니다. 악의적인 목적으로...

stegcloak

StegCloak The Cloak of Invisibility for your texts StegCloak is a pure JavaScript steganography module designed in functional programming style, to hide secrets inside text by compressing and encrypting the secret before cloaking it with special unicode invisible characters. It can be used to...

stegcloak

StegCloak 텍스트를 위한 투명 망토 StegCloak는 순수 JavaScript로 작성된 스테가노그래피 모듈로, 함수형 프로그래밍 스타일로 설계되었습니다. 비밀을 압축 및 암호화한 후 특수 유니코드 보이지 않는 문자를 사용하여 텍스트 내에 숨깁니다. 문자열에 안전하게 워터마크를 남기거나, 웹페이지에 보이지 않는 스크립트를 삽입하거나, 소셜 미디어 텍스트에 사용하거나, 기타 은밀한 통신을 위해 활용할 수 있습니다. 완전히 보이지 않습니다! 자세한 작동 방식은 이 Medium 글에서 확인하거나, 데모를 시청해 보세요. 기능...

NOW

NØW — ワードベースのシェルコードエンコーダー シェルコードを自然な英文散文としてエンコードします。正しい文章とパスワードがあれば、元にデコードできます。 NØWとは？ NØW （Natural Output Words）は、生のシェルコードバイトを人間が読める英語テキストに変換するC言語製ツールです。コードワードの単純なリストか、文と段落からなる自然な英文散文のどちらかを出力できます。出力は、16進ダンプやbase64の塊ではなく、普通の文章のように見えます。 すべてのバイト値（0x00–0xFF）は、指定した秘密の文章...

CVE-2025-53627: Improper Validation of Specified Type of Input

Meshtastic is an open source mesh networking solution. The Meshtastic firmware starting from version 2.5 introduces asymmetric encryption PKI for direct messages, but when the pkiencrypted flag is missing, the firmware silently falls back to legacy AES-256-CTR channel encryption. This was an...

New Qilin.B Ransomware Variant Emerges with Improved Encryption and Evasion Tactics

Cybersecurity researchers have discovered an advanced version of the Qilin ransomware sporting increased sophistication and tactics to evade detection. The new variant is being tracked by cybersecurity firm Halcyon under the moniker Qilin.B. "Notably, Qilin.B now supports AES-256-CTR encryption f...

Insecure Direct Object Reference (IDOR) / Weak Encryption

nzo/url-encryptor-bundle is vulnerable to a Insecure Direct Object Reference IDOR. This vulnerability is due to a lack of mandatory key and initialization vector IV requirements, which makes the aes-256-ctr algorithm susceptible to malleability attacks. It allows attackers to decrypt and modify...

PT-2024-40444 · Nzo · Nzo/Url-Encryptor-Bundle

Name of the Vulnerable Software and Affected Versions: nzo/url-encryptor-bundle versions prior to 5.0.1 nzo/url-encryptor-bundle versions prior to 4.3.2 Description: The issue is related to the lack of mandatory key and IV requirements in the affected versions. By default, the bundle uses the...

Nextcloud: Improper confidentiality protection of server-side encryption keys

This vulnerability is related to the Improper integrity protection of server-side encryption keys vulnerability but leverages a different attack vector. While the previous attack broke the confidentiality of encrypted files because the public keys are not integrity-protected, this new attack brea...

Nextcloud: Downgrade encryption scheme and break integrity through known-plaintext attack

The idea behind the Server Side Encryption is that you can move your encrypted files to an external party without that external party being able to to read or modify those files. Some time ago, Nextcloud switched from unauthenticated CFB cipher block mode to authenticated CTR cipher block mode in...

restic cryptography

tl;dr: this is not an audit and I take no responsibility for your backups, but I had a quick look at the crypto and I think I'm going to use restic for my personal backups. I keep hearing good things about restic. I am redoing my storage solution, and restic seems to tick all the boxes for my...

Windows Crypto Ransomware in Go: Ransomware

Windows Crypto Ransomware in Go Ransomware is a type of malware that prevents or limits users from accessing their system, either by locking the system’s screen or by locking the users’ files unless a ransom is paid. More modern ransomware families, collectively categorized as crypto-ransomware,...