147 matches found
awesome-password-cracking
أدوات رائعة لكسر كلمات المرور في علم التعمية وأمن الحاسوب، كسر كلمات المرور هو عملية استعادة كلمات المرور من البيانات التي تم تخزينها أو نقلها بواسطة نظام حاسوبي بشكل مشوش. نهج شائع هجوم القوة العمياء هو محاولة تخمينات متكررة لكلمة المرور والتحقق منها مقابل تجزئة تشفيرية متاحة لكلمة المرور. هذه...
Bluetooth-Attacks-CVE-2025-27840
이 논문은 공격자가 모듈 업데이트를 통해 숨겨진 취약점 목록을 도입할 수 있는 방법을 논의하며, 이는 ESP32 기기 손상 및 개인 키에 대한 무단 액세스로 이어져 이 마이크로컨트롤러를 사용하는 수십억 개의 기기에 영향을 미칠 수 있습니다. 핵심 문제 중 하나는 ESP32 아키텍처에서 발견된 CVE-2025-27840 취약점입니다. 비트코인 네트워크의 보안을 보장하기 위해 우리는 다음과 같은 취약점을 식별했습니다: hasinvalidprivkey 함수의 하한 검사 부재로 인해 유효하지 않은 개인 키를 사용할 가능성; BIP-1...
bLaCk-eye-RSA-Attacking-Toolkit-v0.1f-compiled
bLaCk-eye RSA Attacking Toolkit v0.1f Description RAT v0.1f compilé pour Windows Étant donné que depuis le site officiel, vous ne pouvez télécharger que le code source et aucun exécutable. Si vous n'avez pas de temps à perdre avec le compilateur et la bibliothèque miracl, celui-ci est prêt à...
xortool
xortool.py Un outil pour faire des analyses xor : deviner la longueur de la clé basée sur le nombre de caractères identiques deviner la clé basée sur la connaissance du caractère le plus fréquent Avis : xortool fonctionne désormais uniquement sur Python 3. L'ancienne version Python 2 est accessib...
cryptovenom
CryptoVenom كريبتوڤينوم: سكين الجيش السويسري للتشفير ما هو كريبتوڤينوم؟ كريبتوڤينوم هي أداة مفتوحة المصدر تحتوي على الكثير من أنظمة التشفير وطرق التحليل التشفيري في أداة واحدة، بما في ذلك الخوارزميات الكلاسيكية، خوارزميات التجزئة، خوارزميات الترميز، البوابات المنطقية، الدوال الرياضية، التشفير...
break-golf
break-golf Un tableau de résultats de cryptanalyse qui sont prouvés , et non exécutés. Un défi fixe deux mondes et l'énoncé que vous devez prouver. Vous écrivez un adversaire et une preuve qu'il les distingue. La victoire, c'est la preuve : rien n'est exécuté, échantillonné ni rejoué, et aucun...
miLazyCracker
miLazyCracker Mifare Classic Plus — реализация атаки Hardnested для USB-считывателей LibNFC SCL3711, ASK LoGO и др. Установка: root@kitploit: ./miLazyCrackerFreshInstall.sh Пример использования: приложите метку и наслаждайтесь root@kitploit: mkdir mydumps cd mydumps miLazyCracker Возможная...
quantum-zk-proof-poc
PoC pour casser la preuve à divulgation nulle de Google sur la cryptanalyse quantique Ce dépôt contient les ressources pour le billet de blog de Trail of Bits détaillant comment nous avons battu la preuve à divulgation nulle de Google affirmant qu'ils disposent d'un circuit quantique à haute...
featherduster
FeatherDuster et Cryptanalib FeatherDuster est un outil écrit principalement par Daniel « unicornfurnace » Crowley, avec des contributions de la communauté, pour casser de la crypto ; il essaie de rendre le processus d'identification et d'exploitation des cryptosystèmes faibles aussi simple que...
Tridium Niagara Use of a Broken or Risky Cryptographic Algorithm (CVE-2025-3938)
Missing Cryptographic Step vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before...
AI-Accelerated Brute Force Cryptanalysis
Modern cryptography is hinged on "not learning from mistakes": trying numerous wrong keys, should not help one identify the right key. Indeed, it worked -- until recently when the surprising power of AI to see pattern in apparent randomness has turned the 'wrong plaintexts' generated by the 'wron...
CVE-2025-14505
The ECDSA implementation of the Elliptic package generates incorrect signatures if an interim value of 'k' as computed based on step 3.2 of RFC 6979 https://datatracker.ietf.org/doc/html/rfc6979 has leading zeros and is susceptible to cryptanalysis, which can lead to secret key exposure. This...
CVE-2025-14505 Elliptic Cryptanalysis vulnerability when `k` has leading zeros
The ECDSA implementation of the Elliptic package generates incorrect signatures if an interim value of 'k' as computed based on step 3.2 of RFC 6979 https://datatracker.ietf.org/doc/html/rfc6979 has leading zeros and is susceptible to cryptanalysis, which can lead to secret key exposure. This...
CVE-2025-14505 Elliptic Cryptanalysis vulnerability when `k` has leading zeros
The ECDSA implementation of the Elliptic package generates incorrect signatures if an interim value of 'k' as computed based on step 3.2 of RFC 6979 https://datatracker.ietf.org/doc/html/rfc6979 has leading zeros and is susceptible to cryptanalysis, which can lead to secret key exposure. This...
CVE-2025-14505
The CVE-2025-14505 entry concerns Elliptic’s ECDSA implementation. A fault in the ECDSA signing path occurs when the interim value of k (per RFC 6979 step 3.2) has leading zeros, causing the byte-length of k to be computed incorrectly and truncated. This can allow cryptanalytic leakage of the sec...
Cryptanalysis of Pseudorandom Error-Correcting Codes
Pseudorandom error-correcting codes PRC is a novel cryptographic primitive proposed at CRYPTO 2024. Due to the dual capability of pseudorandomness and error correction, PRC has been recognized as a promising foundational component for watermarking AI-generated content. However, the security of PR...
ALTCHA 安全漏洞
ALTCHA is a self-hosted CAPTCHA software from ALTCHA Open Source. A security vulnerability exists in ALTCHA that stems from a cryptanalysis flaw that could lead to the recovery of random numbers through mathematical derivation...
The Star Product of Uniformly Random Codes
We consider the problem of determining the expected dimension of the star product of two uniformly random linear codes that are not necessarily of the same dimension. We achieve this by establishing a correspondence between the star product and the evaluation of bilinear forms, which we use to...
