NeuroCore

NeuroCore High-Performance Structural Binary Analysis and Visualization Utility Abstract NeuroCore is a native macOS utility engineered for the structural analysis of binary data through high-velocity visualization. By leveraging General-Purpose Computing on Graphics Processing Units GPGPU via...

edwards25519

filippo.io/edwards25519 root@kitploit: import "filippo.io/edwards25519" This library implements the edwards25519 elliptic curve, exposing the necessary APIs to build a wide array of higher-level primitives. Read the docs at pkg.go.dev/filippo.io/edwards25519. The package tracks the upstream...

purrcrypt

🐱 PurrCrypt 🐶 Fur-ociously Secure, Paw-sitively Adorable! The purr -fect way to keep your secrets fur -ever safe, straight from the meow -th of your computer to your fur -ends' paws! !IMPORTANT PurrCrypt is real cryptography in a fuzzy disguise! Your messages are protected by the same elliptic...

gringotts

CVE-2020-0601 proof of concept A fun proof of concept to create your own root CA and signed certificate based on the CVE-2020-0601 vulnerability in Windows 10. The basis for the issue is the CertGetCertificateChain method improperly validated root certificate authorities. Since the search for a...

curveball

curveball CVE-2020-0601 curveball - Alternative Key Calculator Build Windows Visual Studio 2012 or , then build the solution. Linux / Unix cc altkey.c -lcrypto -o altkey Usage Usage: altkey ecpubliccertificate.pem ecnewprivatekey.pem Example root@kitploit: C:\security\curveball\Releasealtkey...

python-ecdsa

ECDSA y ECDH en Python puro Esta es una implementación fácil de usar de ECC Criptografía de Curva Elíptica con soporte para ECDSA Algoritmo de Firma Digital de Curva Elíptica, EdDSA Algoritmo de Firma Digital de Curva Edwards y ECDH Diffie-Hellman de Curva Elíptica, implementada puramente en...

Quantum-Algorithm-for-Elliptic-Curve-Discrete-Logarithms-with-Space-Efficient-Point-Addition

Algoritmo Cuántico para Logaritmos Discretos en Curvas Elípticas con Suma de Puntos Eficiente en Espacio Este repositorio contiene código Qiskit para la estimación de recursos de los circuitos cuánticos de inversión modular eficiente en espacio y suma de puntos afín utilizados en configuraciones ...

dual-ec-drbg

DualECDRBG Backdoor: Educational Proof-of-Concept For Security Professionals | Educational Purposes Only ⚠️ Disclaimer This repository contains an educational demonstration of the DualECDRBG cryptographic backdoor CVE-2014-8610, a well-documented vulnerability disclosed following the Snowden...

pycryptodome

.. image:: https://github.com/Legrandin/pycryptodome/workflows/Integration%20test/badge.svg :target: https://github.com/Legrandin/pycryptodome/actions .. image:: https://badge.fury.io/py/pycryptodome.svg :target: https://pypi.org/project/pycryptodome .. image::...

ligolo

Ligolo : 渗透测试者打造的简易反向隧道工具 目录 引言 使用场景 快速演示 性能 使用方法 设置/编译 如何使用？ 太长不看 选项 功能特点 待办事项 许可证 致谢 引言 Ligolo 是一款 简单 且 轻量 的工具，用于通过反向连接安全地建立 SOCKS5 或 TCP 隧道（使用椭圆曲线 TLS 证书）。 它类似于 Meterpreter 配合 Autoroute + Socks4a ，但更稳定、更快速。 使用场景 你在外部审计期间攻陷了一台 Windows / Linux / Mac 服务器。该服务器位于局域网内部，而你需要与该网络上的其他机器建立连接。 Ligolo...

Bluetooth-Attacks-CVE-2025-27840

This paper discusses how an attacker can introduce a hidden list of vulnerabilities through module updates, which can lead to compromise of ESP32 devices and gaining unauthorized access to private keys, affecting billions of devices using this microcontroller. One of the key issues is the...

CVE-2026-33936

CVE-2026-33936 Vulnerabilidad de denegación de servicio en ecdsa PyPI Introducción Identifiqué y divulgué de forma responsable una vulnerabilidad de severidad Moderada en python-ecdsa , una biblioteca de criptografía de Python ampliamente utilizada con 47,8 millones de descargas en el último mes...

cve-2019-13132-lab

CVE-2019-13132 — libzmq CURVE INITIATE stack overflow → RCE lab End-to-end working RCE exploit + reproducible lab for CVE-2019-13132 , a stack buffer overflow in libzmq's CURVE INITIATE handshake handler. An attacker who knows the server's long-term public key a public parameter by design can...

noble-curves

noble-curves Implementación JS auditada y minimalista de criptografía de curva elíptica. 🔒 Auditada por firmas de seguridad independientes 🪶 Minimalista: 15KB comprimido con gzip secp256k1, el código no utilizado se excluye de tus compilaciones 🏎 Rápida: optimizada manualmente para las...

ECC_Attacks

Ataques conocidos a la criptografía de curvas elípticas Introducción Introducción a las curvas elípticas Curvas elípticas en el contexto de la criptografía Ataques ECC Ataques ECDH El orden del generador es demasiado pequeño El orden del generador es un número liso El orden del generador es casi ...

cve-2024-13176-timing-analysis

Detección instrumentada de fugas de temporización ECDSA de baja amplitud en CVE-2024-13176 Este repositorio contiene el informe de investigación, el sitio web, los datos, el material fuente y los archivos de reproducibilidad de un estudio independiente de CVE-2024-13176. El proyecto examina si la...

cve-2020-0601

Zeek test script for CVE-2020-0601 This script can detect exploit attempts for CVE-2020-0601. It performs a simple check to see if a known curve is used in a certificate - if this is not the case a notice is raised. Example notice in notice.log: root@kitploit: 1579043477.791522 CHhAvVGS1DHFjwGM9...

Astra Linux – Vulnerability in mbedtls

A issue was discovered in Arm Mbed TLS before version 2.23.0. A side channel allows the recovery of an ECC private key, which is related to functions such as mbedtlsecpcheckpubpriv, mbedtlspkparsekey, mbedtlspkparsekeyfile, mbedtlsecpmul, and mbedtlsecpmulrestartable...

Astra Linux – Vulnerability in mbedtls

The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS from 2.19.1 onwards does not reduce the blinded scalar before computing the inverse. This allows a local attacker to recover the private key through side-channel attacks...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: pfifotailenqueue: Drop a new packet when sch-limit == 0. Expected behavior: If the scheduler’s limit is reached, pfifotailenqueue will drop a packet from the scheduler’s queue and decrease the scheduler’s qlen by one. Then, it wi...