CVE-2020-0601

CVE-2020-0601 CVE-2020-0601 - A Windows Crypto Exploit...

foxguard

foxguard Escaneo de seguridad local rápido para código, secretos, dependencias y riesgo criptográfico. root@kitploit: npx foxguard...

Important: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

OCI-Ansible-Fix-CVE-2026-31431

CVE-2026-31431 Ansible Remediation This playbook remediates CVE-2026-31431, also known as Copy Fail, on Linux instances in OCI. CVE-2026-31431 is a local privilege escalation issue in the Linux kernel algifaead implementation used by the AFALG userspace crypto API. This playbook applies the main...

hdcp-genkey

HDCP Key Generation Example This script implements a simple version of the HDCP key generation algorithm in Python using the leaked HDCP master key which is located in master-key.txt. root@kitploit: Usage: generatekey.py options Options: -h, --help show this help message and exit -m FILE,...

zclaw

zclaw The smallest possible AI personal assistant for ESP32. zclaw is written in C and runs on ESP32 boards with a strict all-in firmware budget target of = 888 KiB on the default build. It supports scheduled tasks, GPIO control, persistent memory, and custom tool composition through natural...

Exploits_and_Advisories

Exploits and Advisories Repository that tracks public exploits, vulnerabilities and advisories that I co-discovered or co-authored. CVEs CVE| ID| Target| Description| Disclosure ---|---|---|---|--- CVE-2020-10881| ZDI-20-333| TP-Link Archer A7/C7| DNS stack overflow| Pwn2Own Tokyo 2019...

crypto-attacks

Introduction Python implementations of cryptographic attacks and utilities. Requirements SageMath with Python 3.9 PyCryptodome You can check your SageMath Python version using the following command: root@kitploit: $ sage -python --version Python 3.9.0 If your SageMath Python version is older than...

quantum-security-project

OWASP Quantum Security Project Prepare Today. Protect tomorrow. An official OWASP community project mapping the security risks of the quantum era in a practical, vendor-neutral, and risk-based way - the antidote to hype and fear. Status: Bootstrap phase. The OWASP Top 10 for Quantum Security Risk...

Digital-Signature-Forgery-Attack

In this article, we will look at the cryptographic attack of digital signature forgery Digital Signature Forgery Attack, its consequences pose a threat to the security of transactions in the Bitcoin network, since digital signatures confirm the ownership and authorization of cryptocurrency...

Cryptolocker

DESCARGO DE RESPONSABILIDAD: NUESTRAS HERRAMIENTAS SON SOLO CON FINES EDUCATIVOS. NO LAS UTILICES PARA ACTIVIDADES ILEGALES. ¡ERES EL ÚNICO RESPONSABLE DE TUS ACCIONES! NUESTRAS HERRAMIENTAS SON DE CÓDIGO ABIERTO SIN GARANTÍA Y TAL CUAL. Cryptolocker Crypto es un Crypto-Locker de código abierto...

proxmark3-amiimicyou

Amiibo simulator instructions A copy of the amiitool Lua wrapper is included at client/libluamiibo.so, but if you want to build it yourself, follow these instructions: 1. Get the lua-lib branch of amiitool at https://github.com/jamchamb/amiitool/tree/lua-lib. 2. In CMakeLists.txt set PROXMARKLIBL...

cve-2021-34558

POC for CVE-2021-34558 root@kitploit: Run the malicious TLS server go run main.go -mode server Run a normal http.Get client call against the server which panics go run main.go -mode client There is a minor modification to ./vendor/github.com/refraction-networking/utls/handshakeserver.go to enable...

TurkoRat

VERSIÓN TELEGRAM ⚔️ TurkoRat 🛡️ Servidor de Telegram: https://t.me/turcoflex Servidor de Discord: https://discord.gg/xTsJReFG84 únete al nuevo discord 🌐 〢 Contenido 📁 Configuración ⚔️ Características 📸 Capturas de pantalla 📝 Por hacer 📜 Licencia ⚠️ Nota 📁 〢 Configuración Instala Node.js IMPORTANTE:...

cve-2020-0601_poc

Basic Info The source code of this tool is supposed to help with understanding of CVE-2020-0601 vulnerability discovered in Windows Crypto API, see CERT's overview. The tool itself can be used to produce a certificate for an arbitrary domain which will be signed by an evil certificate authority...

vuke

vuke Research tool for analyzing and reproducing vulnerable Bitcoin key generation. Features Modular architecture - pluggable sources and transforms Multiple input sources Numeric ranges test weak seeds Wordlists brainwallet analysis Timestamps time-based PRNG exploitation Stdin streaming pipelin...

cryptodev-linux

cryptodev-linux This is a /dev/crypto device driver, equivalent to those in OpenBSD or FreeBSD. The main idea is to access existing ciphers in kernel space from userspace, thus enabling the re-use of a hardware implementation of a cipher. For questions and suggestions, please use the homepage at...

signy

signy Signed URLs for small devices. Background signy is a library for generating signed URLs on embedded devices using asymmetric cryptography. Signed URLs are typically utilized to grant time-limited access to private resources, such as those served by a Content Delivery Network CDN. In the...

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...