NOW

NØW — Codificador de Shellcode Basado en Palabras Codifica shellcode como prosa en inglés de aspecto natural. Descifralo con la frase y contraseña correctas. ¿Qué es NØW? NØW Natural Output Words es una herramienta en C que convierte bytes de shellcode sin procesar en texto inglés legible por...

psobf

PowerShell Obfuscator 它的目标是转换代码以阻碍分析和静态签名，适用于实验环境和授权的红队/渗透测试。 支持6级混淆，外加一个转换/流水线架构，允许叠加多种技术，如字符串标记化、轻量级字面量加密、数字掩码、标识符变形、格式“抖动”、控制流修饰、死代码注入、碎片化配置文件和确定性配置文件。 ⚠️ 负责任的使用：本工具仅用于研究和授权测试。 禁止 用于恶意目的。powershell ./psobf -h root@kitploit: ██████╗ ███████╗ ██████╗ ██████╗ ███████╗...

LiberationPlay-CVE-2025-24132-AirBourne-POC

LiberationPlay! CVE-2025-24132 AirBourne POC CVE-2025-24132 AirBourne 的 POC。目前仅触发溢出并导致崩溃。 为了尝试获得我的汽车车机系统的 root 访问权限，我研究并整理了关于由 Oligo Security 发现的 AirPlay 漏洞 CVE-2025-24132（命名为 Airbourne）的所有信息。 https://www.oligo.security/blog/airborne 这是我第一个逆向工程项目。我是在从未使用过调试器、Linux 和编程经验很少、并且直到项目中途才接触过 MacOS...

SDK-SMS-Stack

SMS Stack Sms Stack 是一个框架，旨在为 GSM 短消息服务提供基于 TCP/IP 的特性。 该框架可在多种环境中运行，为服务提供完整的协议栈集成。 其主要层面包含用于控制给定数据流中短信顺序和数量的技术，以及采用 AES + CTR 加密的安全层面。 您可以在 Sms Stack 的协议栈之上轻松实现自己的协议，并为此类基于短信的设备间通信添加新功能。 前提条件 您可以在多种环境中下载并使用 sms-stack，以便在各种场景中实现它。 Typescript Npm - https://www.npmjs.com Nodejs -...

stegcloak

StegCloak The Cloak of Invisibility for your texts StegCloak is a pure JavaScript steganography module designed in functional programming style, to hide secrets inside text by compressing and encrypting the secret before cloaking it with special unicode invisible characters. It can be used to...

stegcloak

StegCloak 你的文本隐形斗篷 StegCloak 是一个纯 JavaScript 的隐写术模块，采用函数式编程风格设计，通过压缩和加密秘密信息，然后利用特殊的 Unicode 不可见字符将其隐藏在文本中。它可以安全地用于水印字符串、网页上的不可见脚本、社交媒体文本或其他任何隐蔽通信。完全不可见！通过这篇 Medium 文章详细了解其工作原理，或观看我们的演示以了解其功能。 特性 使用密码和 HMAC 完整性保护您的不可见秘密 通过使用 AES-256-CTR 加密不可见秘密，实现密码学安全 使用 6 个 Unicode...

can-ctr-escape-cve-2022-0492

Una imagen de contenedor que prueba si un entorno de contenedor es vulnerable a escapes mediante CVE-2022-0492. Es mejor ejecutarlo en un contenedor nuevo que ejecute una imagen construida con: root@kitploit: $ cd can-ctr-escape-cve-2022-0492 $ docker build -t can-ctr-escape-cve-2022-0492:latest...

tiny-AES-c

Tiny AES en C Esta es una implementación pequeña y portátil de los algoritmos de cifrado AES ECB, CTR y CBC escritos en C. Puedes sobrescribir el tamaño de clave predeterminado de 128 bits con 192 o 256 bits definiendo los símbolos AES192 o AES256 en aes.h. La API es muy sencilla y tiene este...

kernel: crypto: ccp - copy IV using skcipher ivsize

A flaw was found in the Linux kernel's cryptographic coprocessor CCP driver. When processing AFALG rfc3686-ctr-aes-ccp requests, the ccpaescomplete function attempts to restore more data than the allocated buffer for the Initialization Vector IV can hold. This leads to a buffer overrun, which can...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: qat – fix out-of-bounds read When preparing an AER-CTR request, the driver copies the key provided by the user into a data structure that is accessible by the firmware. If the target device is QAT GEN4, the key size is...

libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries

A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...

kernel: crypto: ccp - copy IV using skcipher ivsize

A flaw was found in the Linux kernel's cryptographic coprocessor CCP driver. When processing AFALG rfc3686-ctr-aes-ccp requests, the ccpaescomplete function attempts to restore more data than the allocated buffer for the Initialization Vector IV can hold. This leads to a buffer overrun, which can...

kernel: crypto: ccp - copy IV using skcipher ivsize

A flaw was found in the Linux kernel's cryptographic coprocessor CCP driver. When processing AFALG rfc3686-ctr-aes-ccp requests, the ccpaescomplete function attempts to restore more data than the allocated buffer for the Initialization Vector IV can hold. This leads to a buffer overrun, which can...

Astra Linux – Vulnerability in Linux, Linux 5.10

A issue was discovered in the Linux kernel before version 5.14.15. There is a flaw where the array index exceeds the bounds in the detachcapictr function located in drivers/isdn/capi/kcapi.c...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: crypto: s390/aes – Fix for buffer overreading in CTR mode When processing the last block, the s390 CTR code will always read a whole block, even if there is no data left in that block. This issue is fixed by using the actual...

libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries

A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...

kernel: crypto: ccp - copy IV using skcipher ivsize

A flaw was found in the Linux kernel's cryptographic coprocessor CCP driver. When processing AFALG rfc3686-ctr-aes-ccp requests, the ccpaescomplete function attempts to restore more data than the allocated buffer for the Initialization Vector IV can hold. This leads to a buffer overrun, which can...

kernel: crypto: ccp - copy IV using skcipher ivsize

A flaw was found in the Linux kernel's cryptographic coprocessor CCP driver. When processing AFALG rfc3686-ctr-aes-ccp requests, the ccpaescomplete function attempts to restore more data than the allocated buffer for the Initialization Vector IV can hold. This leads to a buffer overrun, which can...

CVE-2026-74901

opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modify ciphertext in transit to bypass integrity verification and perform bit-flipping attacks without...

CVE-2026-74901 openssl_encrypt before 1.4.0 Authentication Bypass via AES-CTR Fallback

opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can modify ciphertext in transit to bypass integrity verification and perform bit-flipping attacks without...