secretflow

简体中文｜English SecretFlow is a unified framework for privacy-preserving data intelligence and machine learning. To achieve this goal, it provides: An abstract device layer consists of plain devices and secret devices which encapsulate various cryptographic protocols. A device flow layer modeling...

Cloak

Cloak is a pluggable transport that enhances traditional proxy tools like OpenVPN to evade sophisticated censorship and data discrimination. Cloak is not a standalone proxy program. Rather, it works by masquerading proxied traffic as normal web browsing activities. In contrast to traditional tool...

pmanager

Pmanager Demo Description Store and retrieve your passwords from a secure offline database. Check if your passwords has leaked previously to prevent targeted password reuse attacks. Why develop another password manager ? This project was initially born from my desire to learn Rust. I was tired of...

ziti

OpenZiti OpenZiti is an open-source zero-trust networking platform that makes network services invisible to unauthorized users. Every connection, whether from a user, a service, a device, or a workload, is authenticated with cryptographic identity, authorized by policy, and encrypted end-to-end...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the use of cryptographic algorithms that contain defects, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow an unauthorized attacker to gain unauthorized access to protected information...

parsec-cloud

.. raw:: html root@kitploit: Simple, secure, end-to-end encrypted file sharing in the cloud Parsec Parsec is a cloud-based application for simple and cryptographically secure file sharing. 🔐 Client-side E2EE to ensure your data is only accessed by you and the people you share it with. ✒️...

private-membership

Private Set Membership PSM Problem Statement Private Set Membership PSM is a cryptographic protocol that allows clients to privately query whether the client's identifier is a member of a set of identifiers held by a server in a privacy-preserving manner. At a high level, PSM provides the followi...

hashcat

hashcat hashcat is the world's fastest and most advanced password recovery utility, supporting five unique modes of attack for over 300 highly-optimized hashing algorithms. hashcat currently supports CPUs, GPUs, and other hardware accelerators on Linux, Windows, and macOS, and has facilities to...

BLAKE3

BLAKE3 BLAKE3 is a cryptographic hash function that is: Much faster than MD5, SHA-1, SHA-2, SHA-3, and BLAKE2. Secure , unlike MD5 and SHA-1. And secure against length extension, unlike SHA-2. Highly parallelizable across any number of threads and SIMD lanes, because it's a Merkle tree on the...

badsecrets

badsecrets A pure python library for identifying the use of known or very weak cryptographic secrets across a variety of platforms. The project is designed to be both a repository of various "known secrets" for example, ASP.NET machine keys found in examples in tutorials, and to provide a...

perl-CryptX

이름 CryptX - 암호화 툴킷 개요 CryptX는 배포판의 진입점입니다. 일반적인 코드에서는 아래에 나열된 구체적인 모듈 중 하나를 로드합니다. root@kitploit: one-shot hashing use Crypt::Digest qwdigestdatahex; my $sha256 = digestdatahex'SHA256', 'hello world'; classic AES-CBC encryption with padding use Crypt::Mode::CBC; my $cbc = Crypt::Mode::CBC-new'AES...

mhf

Mobile Helper Framework is a tool that automates the process of identifying the framework/technology used to create a mobile application. Additionally, it assists in finding sensitive information or provides suggestions for working with the identified platform. How work? The tool searches for fil...

cryptography

pyca/cryptography .. image:: https://img.shields.io/pypi/v/cryptography.svg :target: https://pypi.org/project/cryptography/ :alt: Latest Version .. image:: https://readthedocs.org/projects/cryptography/badge/?version=latest :target: https://cryptography.io :alt: Latest Docs .. image::...

boringssl

BoringSSL BoringSSL is a fork of OpenSSL that is designed to meet Google's needs. Although BoringSSL is an open source project, it is not intended for general use, as OpenSSL is. We don't recommend that third parties depend upon it. Doing so is likely to be frustrating because there are no...

rscrypto

rscrypto rscrypto объединяет криптографические примитивы, криптографические и быстрые хеши, хеширование паролей и контрольные суммы за одной моделью возможностей feature model. Целевые SIMD и ассемблерные оптимизации ускоряют переносимые Rust-бэкенды без зависимости от продакшн-кода на C/FFI,...

PQC-Scanner

PQC 네트워크 스캐너는 조직이 포스트퀀텀 보안 태세로 전환함에 따라 암호학적 노출을 이해할 수 있도록 설계된 목적 특화 평가 도구입니다. 인증서 유효성이나 고전적 암호 강도에만 초점을 맞추는 기존 TLS 스캐너와 달리, 이 스캐너는 양자 인식 관점에서 엔드포인트를 평가합니다. RSA 및 타원 곡선 키뿐만 아니라 인증서, 확장 및 암호 스위트에 포함된 새로운 포스트퀀텀 알고리즘, 하이브리드 배포 및 실험적 PQC 지표도 식별합니다. 이는 NIST의 PQC 표준화와 증가하는 "harvest now, decrypt later" 공...

RSA

RustCrypto: RSA 순수 Rust로 작성된 이식 가능한 RSA 구현체입니다. 예제 root@kitploit: use rsa::Pkcs1v15Encrypt, RsaPrivateKey, RsaPublicKey; let mut rng = rand::rng; let bits = 2048; let privkey = RsaPrivateKey::new&mut rng, bits.expect"failed to generate a key"; let pubkey = RsaPublicKey::from&privkey; // Encrypt l...

crypto-attacks

소개 암호화 공격 및 유틸리티의 Python 구현입니다. 요구 사항 SageMath Python 3.9 포함 PyCryptodome 다음 명령어로 SageMath Python 버전을 확인할 수 있습니다: $ sage -python --version Python 3.9.0 root@kitploit: SageMath Python 버전이 3.9.0보다 오래된 경우 일부 스크립트의 일부 기능이 작동하지 않을 수 있습니다. 사용법 단위 테스트는 test 디렉터리에 있으며, unittest 모듈이나 pytest를 사용하여 실행할 수...

SymCrypt-OpenSSL

SCOSSL - OpenSSL용 SymCrypt 엔진 및 공급자 SymCrypt 엔진 및 OpenSSL용 공급자SCOSSL를 사용하면 핵심 암호화 작업의 공급자로 SymCrypt를 사용하여 OpenSSL을 활용할 수 있습니다. 이에 대한 주요 동기는 FIPS 인증을 지원하기 위한 것입니다. 기본 OpenSSL 1.1.1에는 FIPS 인증 암호화 모듈이 없고, OpenSSL 3 fips 모듈은 FIPS 140-3 표준으로 인증되지 않았기 때문입니다. SymCrypt 엔진 OpenSSL 1.1.1 SymCrypt 공급자 OpenS...

sandfly-entropyscan

What is sandfly-entropyscan? sandfly-entropyscan is a utility to quickly scan files or running processes and report on their entropy measure of randomness and if they are a Linux/Unix ELF type executable. Some malware for Linux is packed or encrypted and shows very high entropy. This tool can...