10 matches found
crypto-attacks
简介 密码学攻击与实用工具的 Python 实现。 环境要求 使用 Python 3.9 的 SageMath PyCryptodome 你可以使用以下命令检查你的 SageMath Python 版本： $ sage -python --version Python 3.9.0 如果你的 SageMath Python 版本低于 3.9.0，某些脚本中的某些功能可能无法正常工作。 用法 单元测试位于 test 目录中，可以使用 unittest 模块或 pytest 来执行。这不会花费太长时间，具体取决于你的机器，可能需要几分钟。 要运行特定攻击，你必须在执行前将代码添加到相应的文件中...
DamnVulnerableCryptoApp
なぜ？ もし暗号についてもう少し学ぼうとすると、攻撃の仕組みを知りたいためか、安全なコードを書きたいためかに関わらず、すぐにアルゴリズムの背後にある数学に深く潜り込むことになりますが、多くの人にとってこれは「ノー」です。 このプロジェクトは、いくつかの重要なポイントを念頭に置いて作成されました: 暗号攻撃ベクトルの実例 まだ理解しようとしている脆弱性を悪用するためにコードを書く必要はありません 解答のないチャレンジはありません シンプルなドキュメント。複雑な数学や数式はありません。わかりやすい英語 さまざまな攻...
SilverRAT Source Code Leaked Online: Here’s What You Need to Know
SilverRAT Source Code leaked on GitHub, exposing powerful malware tools for remote access, password theft, and crypto attacks before removal...
Security Bulletin: IBM SPSS Statistics: "IBM Java versions 8.0.7.0 - 8.0.7.11 are vulnerable to crypto attacks"
Summary A combination of two flaws in the JSSE component and IBMJCEPlus security provider expose some IBM Java releases to various cryptographic attacks when acting as a TLS server. IBM SPSS Statistics is not directly affected, but is issuing a patch for the relevant versions. Vulnerability Detai...
Security Bulletin: Vulnerability in IBM Java affects Infosphere Data Architect
Summary IBM Java versions 8.0.7.0 - 8.0.7.11 are vulnerable to crypto attacks Vulnerability Details CVEID:CVE-2023-30441 DESCRIPTION: IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of...
Security Bulletin: Vulnerability in IBM Java affects DB2 Recovery Expert for Linux, Unix and Windows
Summary IBM Java versions 8.0.7.0 - 8.0.7.11 are vulnerable to crypto attacks Vulnerability Details CVEID:CVE-2023-30441 DESCRIPTION: IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of...
Security Bulletin: The IBM® Engineering Lifecycle Engineering products using IBM Java versions 8.0.7.0 - 8.0.7.11 are vulnerable to crypto attacks. (CVE-2023-30441)
Summary IBM Java versions 8.0.7.0 - 8.0.7.1 has a combination of two flaws in the JSSE component and IBMJCEPlus security provider expose some IBM Java releases to various cryptographic attacks when acting as a TLS server. Following IBM® Engineering Lifecycle Engineering products are vulnerable to...
Security Bulletin: A vulnerability in IBM SDK, Java Technology Edition affect IBM Operations Analytics Predictive Insights
Summary A security vulnerability in IBM SDK, Java Technology Edition affects IBM Operations Analytics Predictive Insights 1.3.6 or earlier. IBM Java versions 8.0.7.0 - 8.0.7.11 are vulnerable to crypto attacks. This vulnerability has been addressed. Vulnerability Details Refer to the security...
OpenSSL Heartbleed Highlights Crypto Pitfalls
There is no shortage of bad advice online about crypto–or anything else, for that matter. And the recent mess involving the OpenSSL heartbleed vulnerability has brought out plenty of advice on building, implementing and repairing cryptosystems, but experts say that the fundamental truths about ho...
Design/Logic Flaw
The gnu.java.security.util.PRNG class in GNU Classpath 0.97.2 and earlier uses a predictable seed based on the system time, which makes it easier for context-dependent attackers to conduct brute force attacks against cryptographic routines that use this class for randomness, as demonstrated again...