peetch

peetch peetch es un conjunto de herramientas destinadas a experimentar con diferentes aspectos de eBPF para eludir las protecciones del protocolo TLS. Actualmente, peetch incluye tres subcomandos. El primero llamado dump tiene como objetivo esnifar tráfico de red asociando información del proceso...

docker-cve-2016-2107

docker-cve-2016-2107 Docker container implementing tests for CVE-2016-2107 - LuckyNegative20 About Dockerized test for CVE-2016-2107. Code written by Filippo Valsorda: GitHub zero to decryption blog explaining the vulenrabiltiy online CVE-2016-2107 test Update Current version is using static...

hikvision_CVE-2017-7921_auth_bypass_config_decryptor

hikvisionCVE-2017-7921authbypassconfigdecryptor This python file will decrypt the configurationFile used by hikvision cameras vulnerable to CVE-2017-7921. https://www.checkpoint.com/defense/advisories/public/2017/cpai-2017-0876.html/ Description Hikvision IP Cameras Authentication Bypass...

pax

pax ¡Explota oráculos de padding por diversión y beneficio! Pax PAdding oracle eXploiter es una herramienta para explotar oráculos de padding con el fin de: 1. Obtener texto plano para un fragmento dado de datos cifrados con CBC. 2. Obtener bytes cifrados para un fragmento dado de texto plano,...

Jasmin-Ransomware

!SiddhantgourInstagram-shieldInstagram-url !LinkedInlinkedin-shieldlinkedin-url !SiddhantgourTwitter-shieldTwitter-url !YoutubeYoutube-shieldYoutube-url !TelegramTelegram-shieldTelegram-url !QuoraQuora-shieldQuora-url !FacebookFacebook-shieldFacebook-url Jasmin The Ransomware A Powerful Ransomwar...

teams_dump

PoC para volcar y descifrar cookies en la última versión de Microsoft Teams extract.py solo vuelca sin argumentos extract.exe es solo extract.py empaquetado en un exe teamsdump.py List valores en la base de datos python.exe .\teamsdump.py teams --list Table: meta Columns in meta: key, value...

dcipher

dcipher Descifra hashes utilizando servicios online de ataque de arcoíris y tablas de búsqueda. Instalación ❯❯❯ npm install dcipher Uso const dcipher = require'dcipher'; dcipher'21232f297a57a5a743894a0e4a801fc3'.thenplaintext = console.logplaintext; //= 'admin' ;...

details-for-CVE-2022-46505

details-for-CVE-2022-46505 MatrixSSL session resume bug 1. Description of bug An issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID field, resulting in the misuse of an all-zero MasterSecret that can decrypt secret data. 2. Affected version MatrixSSL...

pybeacon

PyBeacon PyBeacon es una colección de scripts para tratar con el tráfico cifrado de Cobalt Strike. Puede cifrar/descifrar metadatos de beacons, así como analizar tareas cifradas simétricamente. Scripts incluidos Hay una pequeña biblioteca que incluye métodos de cifrado/descifrado, sin embargo se...

polychrome-rs

Polychrome This is a example on how to embed a payload into a compute shader. The payload is encrypted and decrypted on the GPU. This is not by any means a complete implementation it misses crucial OPSEC considerations. Usage Generate a payload using your preferred method i used the classic...

CVE-2020-5248

CVE-2020-5248 POC Environment Setup and Test Test Method Environment Setup vim docker/nginx/default.conf servername docker host ip ; -change mysqlserver: mysql id: root pw: root Run cd docker/app/ tar -xvf /docker/app/glpi-9.4.5.tgz chmod -R 777 glpi docker-compose up -d Access glpi at...

CVE-2022-29856-PoC

CVE-2022-29856-PoC Minimal PoC for CVE-2022-29856 Credits: https://dolosgroup.io/blog/2022/4/28/anatomy-of-a-zero-day-how-to-decrypt-a-robot...

CVE-2026-53595_exploit

CVE-2026-53595 + CVE-2026-53593 — FreeScout Anonymous ATO → RCE Unauthenticated remote code execution in FreeScout ≤ 1.8.223 a Laravel help desk by chaining two flaws, both fixed in 1.8.224 : CVE-2026-53595 — anonymous account takeover. POST /user-setup/hash/invitesentat picks the account by its...

woody-woodpacker

Woody-Woodpacker A 42 school project that implements a binary packer for 64-bit ELF executables. The packer encrypts the executable's code sections and injects a decryption routine that executes at runtime. 🎯 About Woody-Woodpacker is a program that takes a 64-bit ELF binary as input and creates ...

CVE-2020-9289

Decrypt FortiManager configuration secrets CVE-2020-9289 CVE-2020-9289 and CVE-2019-6693 are related to the same default and hardcoded key. The only differences on the decryption routine implemented in FortiManager/FortiAnalyzer are: The IV handling all the 16 bytes are provided before the...

laravel-crypto-killer

Laravel crypto killer Ein Werkzeug, das entwickelt wurde, um schlechte Implementierungen von Entschlüsselungsmechanismen in Laravel-Anwendungen auszunutzen. Dieses Werkzeug wurde ursprünglich entwickelt, um Payloads zu erstellen, die die Laravel-decrypt-Funktion aus dem Paket Illuminate\Encryptio...

de4dot

Descrizione de4dot è un deoffuscatore e unpacker .NET open source GPLv3 scritto in C. Farà del suo meglio per ripristinare un assembly packato e offuscato riportandolo quasi all'assembly originale. La maggior parte dell'offuscamento può essere completamente ripristinato es. crittografia delle...

cve-2024-21978-poc

SEV Firmware Vulnerability This repo contains an exploit for a vulnerability in the SEV firmware. The exploit allows decrypting arbitrary memory of a running SEV-SNP guest. Tested on version 1.55.16 latest as of the time of writing. Root Cause The nvpaddr field of the SEVINITEX command can be use...

cve-2024-21980-poc

SEV Firmware Vulnerability This repo contains an exploit for a vulnerability in the SEV firmware. The exploit allows decrypting arbitrary memory of an SEV-SNP guest after it's been decommissioned. Tested on version 1.55.16 latest as of time of writing. Root Cause The SEV firmware has a table call...

Linux Distros Unpatched Vulnerability : CVE-2026-106434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The explicit decryption component of MongoDB libmongocrypt can return an unrecognized encrypted payload unchanged instead of returning a decryption error. An...