weakrng-sweep

weak-rng sweep CVE-2026-71851 class Research tool: enumerates PRNG schemes x uint32 seeds, derives BIP39 wallets, checks membership against a victim address set defensive research, illbloom-style. Schemes: 0-10 illbloom: MT19937/glibc/Java/LCG/xorshift, 11-13 glibc-31 LCG, 14-15 crypto-js 3.3.0...

CVE-2012-1803

CVE-2012-1803 Vulnerabilidad crítica en dispositivos Siemens RuggedCom ROS que permite a los atacantes derivar una contraseña oculta de cuenta de fábrica a partir de la dirección MAC del dispositivo y obtener acceso administrativo no autorizado a través de interfaces TELNET, rsh o serie. Afecta a...

CVE-2025-63353

FiberHome Wi-Fi Password Predictor CVE-2025-63353 A Python utility designed for security auditing and proof-of-concept demonstration of the deterministic password generation flaw found in FiberHome HG6145F1 RP4423 routers. 📋 Overview This script exploits CVE-2025-63353, a critical vulnerability...

SafeGuard

root@kitploit: ./safeguard --version 1.0 Safeguard is a fast, lightweight, cross-platform command-line file encryption tool written in Go. Security Notice This project is a learning-oriented file encryption tool. While it uses standard cryptographic primitives from Go’s standard library e.g...

Linux Distros Unpatched Vulnerability : CVE-2023-42179

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bird Home Automation GmbH D1101V-F 000140 is vulnerable to Incorrect Access Control via the Key derivation process, password validation process. CVE-2023-42179...

CVE-2024-1346

CVE-2024-1346 Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants. Exploit Title: LaborOfficeFree 19.10 MySQL Root Password Calculator -...

bluffs

BLUFFS 简介 本仓库包含与 BLUFFS：蓝牙前向与未来保密性攻击与防御 相关的代码。 论文摘要 蓝牙是一种无处不在的无线通信技术。数十亿台设备在敏感应用中使用它，并交换私有数据。蓝牙的安全性取决于蓝牙标准及其两种安全机制：配对和会话建立。此前没有任何工作（包括标准本身）分析过这些机制的未来和前向保密性保证，例如，当攻击者攻破当前会话时，蓝牙配对和会话建立能否保护过去和未来的会话。为了弥补这一空白，我们提出了六种新颖的攻击，统称为 BLUFFS...

Steganography-Online-Codec-JavaScript

SDK Steganography Online Codec per JavaScript e NPM Steganographic Online Codec ti consente di nascondere un messaggio crittografato con password all'interno di immagini e foto utilizzando l'algoritmo di crittografia AES con una chiave derivata a 256 bit PBKDF2. Puoi usarlo gratuitamente su:...

AdvSim.Cryptography

AdvSim.Cryptography Il pacchetto NuGet AdvSim.Cryptography contiene un insieme di funzioni wrapper crittografiche riutilizzabili, configurate con impostazioni predefinite sensate e facili da usare. Ulteriori dettagli sono disponibili nelle diverse sottosezioni riportate di seguito. Crittografia...

bitcoin-security

bitcoin-security دراسة تعليمية عن المصدر الفعلي لأمان مفاتيح البيتكوين — وأين لا يكمن. مبنية على اشتقاق حقيقي وفق BIP39/BIP32، مع تجربتين تقعان على طرفي نقيض للفكرة نفسها:...

CVE-2020-12712

CVE-2020-12712: SOS JobScheduler में संग्रहीत पासवर्ड का डिक्रिप्शन इस रिपॉजिटरी में मौजूद स्क्रिप्ट आपको JobScheduler इंस्टेंस के लिए SFTP कॉन्फ़िगरेशन फ़ाइल में संग्रहीत पासवर्ड को डिक्रिप्ट करने की अनुमति देती है। विवरण SOS JobScheduler रिमोट सिस्टम प्रशासन के लिए एक टूल है जो उपयोगकर्ताओं को...

CVE-2026-11116-SNMPv3-Authentication-Bypass-via-Default-EngineID

CVE-2026-11116 – Bypass dell'autenticazione SNMPv3 tramite EngineID predefinito Codice del programma Python con pysnmp root@kitploit: snmpagentsim.py - SNMPv3 agent using well-known EngineID from pysnmp.hlapi import def snmpgetengineid=SnmpEngineIDhexValue='8000000001020304': iterator = getCmd...

GlobalUnProtect

GlobalUnProtect PoC tool per decrittare e raccogliere configurazione, cookie e file HIP di GlobalProtect da installazioni client Windows. Post del blog: https://rotarydrone.medium.com/4a1d8fc7773e Utilizzo Eseguire come standalone o in-memory tramite execute-assembly o equivalente. Raccoglie tutt...

CVE-2019-5420

CVE-2019-5420 Exploit für Rails CVE-2019-5420 Das Problem Bis Rails v5.2.2 leitet die Anwendung den Schlüssel aus dem Namen der Anwendung ab, wenn die Sitzungen im Entwicklungsmodus gesichert werden...

CVE-2026-81720

opensslencrypt before 1.4.9 fails to validate the memorycost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key derivation. Attackers with write access to local identity stores can craft malicious identity files with excessive...

CVE-2026-81704

opensslencrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched SHA-256 instead of Argon2id. Attackers can perform offline password guessing against encrypted files roughly six to seven orders of magnitude faste...

CVE-2026-81689

opensslencrypt versions before 1.4.9 derive the remote-pepper wrap key using unsalted HKDF-SHA256 or bare SHA-256 of the password, allowing identical keys across all users and files. Attackers with access to wrapped pepper blobs can precompute a single dictionary table and perform fleet-wide...

EUVD-2026-67070

opensslencrypt before 1.4.9 fails to validate the memorycost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key derivation. Attackers with write access to local identity stores can craft malicious identity files with excessive...

CVE-2026-81720 openssl_encrypt before 1.4.9 Denial of Service via Unbounded Argon2

opensslencrypt before 1.4.9 fails to validate the memorycost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key derivation. Attackers with write access to local identity stores can craft malicious identity files with excessive...

CVE-2026-81720 openssl_encrypt before 1.4.9 Denial of Service via Unbounded Argon2

opensslencrypt before 1.4.9 fails to validate the memorycost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key derivation. Attackers with write access to local identity stores can craft malicious identity files with excessive...