941 matches found
BitUnlocker
BitUnlocker Downgrade Attack A proof of concept for accessing BitLocker-encrypted disks in under 5 minutes on fully patched Windows 11 machines through a boot manager downgrade attack, leveraging the SDI vulnerability originally documented as CVE-2025-48804. The July 2025 patch fixes this in...
ExtractBitlockerKeys
A system administration or post-exploitation script to automatically extract the bitlocker recovery keys from a domain. Features Automatically gets the list of all computers from the domain controller's LDAP. Multithreaded connections to extract Bitlocker keys from LDAP. Iterate on LDAP result...
ntfstool
ntfstool NTFSTool is a forensic tool focused on NTFS volumes. It supports reading partition info MBR, partition table, VBR but also information on Master File Table, Bitlocker encrypted volume, EFS encrypted files, USN journal and more. Download the latest binaries on AppVeyor or by checking the...
YellowKey-WinRE-Remediation
YellowKey WinRE Remediation Intune Remediation package for the CVE-2026-45585 YellowKey BitLocker/WinRE bypass mitigation described in the provided procedure. This package removes autofstx.exe from the offline WinRE image's BootExecute value and refreshes WinRE registration so BitLocker trust is...
CVE-2024-20666
CVE-2024-20666 Vulnerability Patch Guide Welcome to the repository for addressing the CVE-2024-20666 vulnerability patch failures in the Windows Recovery Environment WinRE. Overview This repository provides resources and instructions to resolve patch failures related to the Windows OS update...
lpc_sniffer_tpm
TPM Specific lpc sniffer low pin count for ice40 stick Turn the ice40 stick into a LPC sniffer, only logging TPM specific messages. This repository is a duplicate of https://github.com/lynxis/lpcsniffer/, with modifications made to only log messages with start field 0101 and address between 24 an...
inception
Note: This tool is no longer under active development, please look at PCILeech instead. INCEPTION Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe HW interfaces...
bitcracker
BitCracker BitCracker is the first open source password cracking tool for storage devices Hard Disk, USB Pendrive, SD card, etc... encrypted with BitLocker, an encryption feature available on Windows Vista, 7, 8.1 and 10 Ultimate, Pro and Enterprise editions. BitLocker offers a number of differen...
CVE-2026-45585
🔑 CVE-2026-45585 - YellowKey 🔓 Advanced mitigation for CVE-2026-45585 YellowKey 📌 What is YellowKey Vulnerability? YellowKey CVE-2026-45585 is a zero-day physical attack vulnerability discovered in May 2026 that allows attackers with physical access to completely bypass BitLocker encryption on...
ClientInspectorV2
Introduction to ClientInspector v2 Are you in control? - or are some of your core infrastructure processes like patching, antivirus, bitlocker enablement drifting? Or would you like to do advanced inventory , where you can lookup your warranty state against Lenovo or Dell warranty, then keep...
tofu
tofu A modular tool for hacking offline Windows filesystems and bypassing login screens. Can do hashdumps, OSK-Backdoors, user enumeration and more. How it works : When a Windows machine is shut down, unless it has Bitlocker or another encryption service enabled, it's storage device contains...
YellowKey-BitLocker-Bypass-CVE-2026-45585-Detect-Fix-Automatically-via-Microsoft-Intune
This repository does not have a README...
YellowKey-Bitlocker-CVE-2026-45585
🛡️ YellowKey-Bitlocker-CVE-2026-45585 - Recover Your BitLocker Keys Safely 📋 What This Software Does YellowKey is a free open-source utility for Windows 10 and Windows 11. It helps you extract, backup, and view your BitLocker recovery keys. This is useful if you lost access to your encrypted drive...
CVE-2026-97015
Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...
CVE-2026-119832
Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature with a physical attack...
CVE-2026-119832
A vulnerability in Windows BitLocker allows an authorized attacker to bypass a security feature via a physical attack due to improper access control . While the specific technical root cause and internal components are not detailed in the provided documents, the impact includes a high level of co...
EUVD-2026-122350
Improper access control in Windows BitLocker allows an authorized attacker to bypass a security feature with a physical attack...
CVE-2026-97015
A heap-based buffer overflow exists in Windows BitLocker that allows an unauthorized attacker to bypass a security feature via a physical attack . No specific exploit details or remediation versions are provided in the documents, though the vulnerability is associated with official security updat...
