cve-2015-6612poc-forM

cve-2015-6612 POC for M reported by me and @WenXu from Keen put this under ANDROIDSRCROOT/frameworks/av/media/decrytpoc/ and cd into it && calling mm...

aeota

aeota AEA OTA/IPSW decryption Prerequisites getkey.py Python 3.10+ might work with older, but not tested requests pyhpke aastuff macOS 13+ macOS 14+ for HPKE support aastuffstandalone macOS 12+ macOS 14+ for HPKE support Building and Installing getkey.py pip3 install -r requirements.txt !NOTE It ...

synodecrypt

SynoDecrypt A tool to decrypt all Synology encrypted archives SPK, PAT, .... The reverse engineering work is explained in our blog post. Installation pip install -r requirements.txt Usage You first have to extract the encryption keys and put them into a JSON file e.g. into keys.json. This JSON fi...

ecologyExp.jar

ecologyExp.jar Weaver OA database configuration file reader java -jar ecologyExp.jar http://127.0.0.1 Source Code package com.test; import org.apache.http.HttpEntity; import org.apache.http.client.methods.CloseableHttpResponse; import org.apache.http.client.methods.HttpGet; import...

lucky13

LUCKY13 Exploit This repository contains a proof-of-concept POC exploit for the LUCKY13 vulnerability CVE-2013-0169, which is a timing attack against certain implementations of the CBC Cipher Block Chaining mode of operation in cryptographic systems. The exploit aims to decrypt a target token by...

teams_dump

PoC for dumping and decrypting cookies in the latest version of Microsoft Teams extract.py just dumps without arguments extract.exe is just extract.py packed into an exe teamsdump.py List values in the database python.exe .\teamsdump.py teams --list Table: meta Columns in meta: key, value...

canon-tools

canon-tools Tools used for decrypting Canon PIXMA printers firmwares. For more information about the background, please refer to the following blogpost: https://synacktiv.com/publications/treasure-chest-party-quest-from-doom-to-exploit References This work was inspired by Contextis research...

Ghostfuscator

Ghostfuscator Obfuscate python scripts making them password-protected using AES Encryption Usage Just execute the script, and follow the menu. Info Once an script is obfuscated, when running it a password asking prompt will appear, after submiting the correct password, the script will execute...

database-druid

druid encode java -cp druid-1.1.19.jar com.alibaba.druid.filter.config.ConfigTools 密码 Example: java -cp druid-1.1.19.jar com.alibaba.druid.filter.config.ConfigTools jas502n...

CVE-2019-6693

CVE-2019-6693 Decrypt FortiGate configuration secrets Original advisory Vendor advisory For Fortigate VM/appliances below versions 6.2.0, 6.0.0 to 6.0.6, 5.6.10 configuration secrets are stored encrypted with a unique key. For versions above the non-default private-data-encryption parameter lets...

KPOT-string-decrypter

KPOT-string-decrypter IDA python scripts for decrypting KPOT stealer's strings and setting those as comments next to the var that would receive them during runtime. It works as follows: Gets the offset that's passed on eax to either decryption function there are two, which is why this repo has tw...

adwind-decryptor

AdWind Decryptor Simple decryptor for encrypted files in the AdWind/jRAT/jBifrost Java RAT. Usage usage: java -jar AdWindDecryptor -a,--aeskeyfile AES key file path -i,--input input file path -o,--output decrypted output file path -r,--rsakeyfile serialized RSA KeyRep file path Example java -jar...

bedaisy-bypass

bedaisy-bypass Description bedaisy-bypass is a kernel driver designed to bypass reports sent from BEDaisy.sys to BEService.exe. For users not on a UEFI, the project utilizes Infinity Hook. The driver intercepts data communicated through the named pipe between the two services. On receiving a...

Jasmin-Ransomware

!SiddhantgourInstagram-shieldInstagram-url !LinkedInlinkedin-shieldlinkedin-url !SiddhantgourTwitter-shieldTwitter-url !YoutubeYoutube-shieldYoutube-url !TelegramTelegram-shieldTelegram-url !QuoraQuora-shieldQuora-url !FacebookFacebook-shieldFacebook-url Jasmin The Ransomware A Powerful Ransomwar...

ParanoiDF

ParanoiDF The swiss army knife of PDF Analysis Tools. Based on peepdf - http://peepdf.eternal-todo.com. This README builds on the peepdf README. This tool was developed as part of my M.Sc dissertation/project for the School of Computing University of Kent, Canterbury, UK. The man behind the idea...

Oracle-OAM-Padding-Oracle-CVE-2018-2879-Exploit

Oracle-OAM-Padding-Oracle-CVE-2018-2879-Exploit Introduction This exploit was developed during pentesting activity against oracle OAM 11.1.2.3.0. It was developed based on the technical description by sec-consult https://www.sec-consult.com/en/blog/2018/05/oracle-access-managers-identity-crisis/...

forticrack

FortiCrack Decrypt encrypted Fortinet FortiOS firmware images Developed by Bishop Fox Team X Requirements This tool is intended to run in a Linux environment. Install python3 and gzip packages for your system. Usage Download an encrypted firmware image from the Fortinet support site, then run thi...

pixma

What is this? Some little tools to unpack firmware of Canon PIXMA series for analysis. Motivation Some Pixma printer is unable to reset the Waste Ink counter and refuses to print now, even though waste ink container has been swapped out. So I was curious about the inner workings of the firmware t...

zizzania

zizzania zizzania sniffs wireless traffic listening for WPA handshakes and dumping only those frames suitable to be decrypted one beacon + EAPOL frames + data. In order to speed up the process, zizzania sends IEEE 802.11 DeAuth frames to the stations whose handshake is needed, properly handling...

CVE-2019-5420

CVE-2019-5420 A vulnerability can allow an attacker to guess the automatically generated development mode secret token. Ruby-on-Rails when it is running in development mode. In development mode, it is possible for an attacker to guess the key used to secure the sessions. Decryption: Key Generate:...