CVE-2026-98805

A flaw was found in the Linux kernel's TIPC Transparent Inter-Process Communication module. A network attacker who intercepts cluster communications can achieve information disclosure and alter transmitted data. This vulnerability occurs because TIPC resets encryption sequence counters during pee...

Openssl_1_1_0_CVE-2021-23841

OpenSSL 1.1.0g 2 Nov 2017 Copyright c 1998-2016 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

crypto-attacks

Introduction Python implementations of cryptographic attacks and utilities. Requirements SageMath with Python 3.9 PyCryptodome You can check your SageMath Python version using the following command: $ sage -python --version Python 3.9.0 If your SageMath Python version is older than 3.9.0, some...

BLEBoy

BLEBoy Goal Create a BLE peripheral that supports all BLE pairing methods that can be used for training and testing, including out-of-band OOB pairing. The perpiheral must be configurable and easy to re-create using consumer parts. About BLEBoy is a BLE peripheral implemented using the Adafruit...

DeadDialect

DeadDialect Every boot speaks a different language. Yesterday's binary is today's dead code. A session-unique RISC-V ISA remapping system. Every time the system boots, it generates a fresh cryptographic permutation of the instruction set. Binaries compiled for one session are cryptographically...

mhf

Mobile Helper Framework is a tool that automates the process of identifying the framework/technology used to create a mobile application. Additionally, it assists in finding sensitive information or provides suggestions for working with the identified platform. How work? The tool searches for fil...

authproof-sdk

AuthProof SDK AuthProof is an audit and attribution layer for AI agents. It lets you prove what a user authorized before the agent acted, and it records what the agent actually did against that authorization. The mechanism is simple. The user signs a delegation receipt with their own private key...

parsec-cloud

.. raw:: html Simple, secure, end-to-end encrypted file sharing in the cloud Parsec Parsec is a cloud-based application for simple and cryptographically secure file sharing. 🔐 Client-side E2EE to ensure your data is only accessed by you and the people you share it with. ✒️ Cryptographic signature...

rscrypto

rscrypto rscrypto is a Rust library of cryptographic primitives, hashes, password hashing, and checksums. One feature model controls all of them. Portable Rust is the reference implementation. SIMD and assembly backends make it faster on supported targets. Production builds do not depend on C, FF...

ecdsa-private-key-recovery

ecdsa-key-recovery Perform ECDSA and DSA Nonce Reuse private key recovery attacks A cryptographic research tool for analyzing signature vulnerabilities Let's recover the private-key for two signatures sharing the same nonce k. Note how choosing the same nonce k results in both signatures having a...

external_boringssl_openssl_1.1.0g_CVE-2021-23841

OpenSSL 1.1.0g 2 Nov 2017 Copyright c 1998-2016 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

hashcat

hashcat hashcat is a highly optimized password recovery platform for GPUs, CPUs, and large distributed systems. Features World's fastest password cracker World's first and only in-kernel rule engine, usable in every attack mode Free and open source, under the MIT license Multi-OS: Linux, Windows...

AdvSim.Cryptography

AdvSim.Cryptography The AdvSim.Cryptography NuGet contains a set of cryptographic wrapper functions which are reusable, configured with sane defaults and are easy to use. Further details are available under the different subheadings below. Symmetric Key Material Generation AES Triple DES RC4 RC2...

Webasyst Shop-Script CMS Cryptographic Defect Unauthorized Access

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow an unauthorized attacker to gain unauthorized access to protected information...

badsecrets

badsecrets A pure python library for identifying the use of known or very weak cryptographic secrets across a variety of platforms. The project is designed to be both a repository of various "known secrets" for example, ASP.NET machine keys found in examples in tutorials, and to provide a...

RSA

RustCrypto: RSA A portable RSA implementation in pure Rust, with encryption and signature schemes specified in PKCS1 v2.2 RFC8017. Scheme| Purpose| Specification ---|---|--- RSAES-OAEP| Encryption| RFC8017 §7.1 RSAES-PKCS1-v15| Encryption| RFC8017 §7.2 RSASSA-PSS| Signatures| RFC8017 §8.1...

keeper

keeper Keeper is a cryptographic secret store for Go. It encrypts arbitrary byte payloads at rest using Argon2id key derivation and XChaCha20-Poly1305 default authenticated encryption, and stores them in an embedded bbolt database. It ships as three things you can use independently: A Go library ...

pmanager

Pmanager Demo Description Store and retrieve your passwords from a secure offline database. Check if your passwords has leaked previously to prevent targeted password reuse attacks. Why develop another password manager ? This project was initially born from my desire to learn Rust. I was tired of...

cryptoptic

cryptoptic Find the cryptography hiding in your code before quantum computers find it for you. cryptoptic uses CodeQL and GitHub Actions to scan a repository or an entire GitHub organisation and produce an inventory of every cryptographic function in use, the library it comes from, and where it i...

radioguard

RadioGuard: Zero-Trust Cellular Defense Sub-Service for Android RadioGuard is an open-source, production-ready Android security application and background sub-service. It actively detects rogue cell towers IMSI-catchers / Cell-Site Simulators / SMS Blasters, identifies hostile 2G/4G cellular...