CryptoLyzer

CryptoLyzer is a fast, flexible, and comprehensive server cryptographic protocol TLS, SSL, SSH, IKE, DNSSEC and related setting HTTP headers, DNS records analyzer and fingerprint JA3, HASSH generator with API and CLI interfaces. Use CryptoLyzer when you need to audit TLS/SSL cipher suites — unlik...

badssl.com

Visit badssl.com for a list of test subdomains, including: self-signed.badssl.com expired.badssl.com mixed.badssl.com rc4.badssl.com hsts.badssl.com Server Setup Stock Ubuntu VM, DNS A records for badssl.com. and .badssl.com. pointing to the VM. Testing and development 1. Follow the instructions ...

cryptodev-linux

cryptodev-linux This is a /dev/crypto device driver, equivalent to those in OpenBSD or FreeBSD. The main idea is to access existing ciphers in kernel space from userspace, thus enabling the re-use of a hardware implementation of a cipher. For questions and suggestions, please use the homepage at...

testssl.sh

Intro testssl.sh is a free command line tool which checks a server's service on any port for the support of TLS/SSL ciphers, protocols as well as some cryptographic flaws. Key features Clear output: yo...

bkcrack

bkcrack Crack legacy zip encryption with Biham and Kocher's known plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypted with a password-based symmetric encryption algorithm referred to as...

openssl

Welcome to the OpenSSL Project !openssl logowww.openssl.org !github actions ci badgegithub actions ci OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations ar...

pe-sieve

Intro PE-sieve is a tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory patches...

CVE-2026-31431

Test, patch, fix: CVE-2026-31431 Test:Check vuln python3 -c 'import socket;exec"try:s=socket.socketsocket.AFALG,socket.SOCKSEQPACKET,0;s.bind"aead","authencesnhmacsha256,cbcaes";print"vulnerable"\nexcept:print"not vulnerable""' check if module Check if module is loaded in kernel lsmod |...

SDK-SMS-Stack

SMS Stack Sms Stack is a Framework to provide TPC/IP based characteristics to the GSM Short Message Service. This framework works in multiple environments to provide a full stack integration in a service. The main layer features techniques to control the order and the number of sms for a given...

forticrack_v8

Forticrack v8.0.0 Decrypt and extract FortiOS 8.0.0 firmware images. This script extends Bishop Fox's Forticrack to support 8.0.0 firmware images. Also, RandoriSec's article on FortiGate 7.4.7 firmware encryption was really helpful to reverse the encryption for FortiOS 8.0.0, since it looks like ...

FreakVulnChecker

FreakVulnChecker This script check if your list of server is accepting Export cipher suites and could be vulnerable to CVE-2015-0204 Usage Usage: ./freak.vuln.check.sh The program accept single ip:port or domain syntax or a list of ips or domains. It will output if the Exports cipher available in...

cipherscan

CipherScan Cipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl sclient command line. Cipherscan is meant to ru...

Decodify

Decodify It can detect and decode encoded strings, recursively. Lets take this string : s0md3v and encode it in Base 64 czBtZDN2 Now lets encode it in hex 637a42745a444e32 And now again in Base 64 NjM3YTQyNzQ1YTQ0NGUzMg== Now lets supply it to Decodify Boom! Thats what Decodify does. It...

cryptovenom

CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...

CVE-2026-26012

CVE-2026-26012 — Vaultwarden Cipher Enumeration PoC Full Cipher Enumeration Ignoring Organization Collection Permissions A proof-of-concept exploit for CVE-2026-26012, a broken access control vulnerability in Vaultwarden = 1.35.2 that allows any organization member to retrieve and decrypt all...

NOW

NØW — Word-Based Shellcode Encoder Encode shellcode as natural-looking English prose. Decode it back with the right sentence + password. What is NØW? NØW Natural Output Words is a C tool that converts raw shellcode bytes into human-readable English text — either a plain list of codewords or fluen...

encdecshellcode

Shellcode-Encrypter-Decrypter A Shellcode Encrypter & Decrypter, Using XOR Cipher to enc and dec shellcode. Installation git clone https://github.com/blacknbunny/Shellcode-Encrypter-Decrypter.git && cd Shellcode-Encrypter-Decrypter/ python encdecshellcode.py --help Usage Example Encryption: pytho...

CTT-Sovereign-Vortex

CTT-Sovereign-Vortex CTT-Terrminus-Vortex CVE-2026-2406 🕰️ CTT-Sovereign-Vortex: Terrminus Refraction CVE-2026-2406 "The system is only as secure as the time it occupies." Lead Architect: Americo Simoes @amexsimoes Methodology: Convergent Time Theory CTT v2.0 Target: Terrminus Authentication...

CRIME-poc

CRIME-poc CRIME attack : a compression oracle attacks CVE-2012-4929 discovered by Juliano Rizzo and Thai Duong; In a compression oracle attack the use of adaptive data compression on a mixture of chosen plaintext and unknown plaintext can result in content-sensitive changes in the length of the...

O-Saft

--- Any use of this project's code by GitHub Copilot, past or present, is done without our permission. We do not consent to GitHub's use of this project's code in Copilot. O-Saft - OWASP SSL advanced forensic tool DownloadVersion 24.09.24 QUICK START o-saft.pl --help o-saft.pl +check your.tld...