kali-rpi-luks-crypt

Cifratura completa del disco per Kali su Raspberry o altre architetture simili usando LUKS Questo HOWTO è dedicato all'esecuzione di Kali su Raspberry o altre architetture simili, es. ODROID-C2 usando la cifratura completa del disco con LUKS. Basato sul documento un po' datato qui. Motivazione...

AndroidSecurityEvolution

Evoluzione della Sicurezza di Android Miglioramenti significativi della sicurezza delle principali versioni recenti di Android, a partire da Android 5.0 Lollipop API 21. Android 5.0 API 21 - Lollipop Security Enhancements - Android 5 A partire da agosto 2023, gli aggiornamenti di Google Play...

usbkill

« usbkill » è un kill-switch anti-forense che attende un cambiamento sulle porte USB e poi spegne immediatamente il computer. Per eseguirlo: root@kitploit: sudo python usbkill.py oppure root@kitploit: sudo python3 usbkill.py Progetto correlato; stessa idea, ma implementata come driver Linux:...

YellowKey-Bitlocker-CVE-2026-45585

🔑 YellowKey-Bitlocker-CVE-2026-45585 - Gestisci facilmente le tue chiavi di ripristino BitLocker YellowKey BitLocker CVE-2026-45585 fornisce un modo per estrarre, eseguire il backup e organizzare le chiavi di ripristino per i tuoi drive crittografati. Questo strumento funziona su sistemi Windows...

CVE-2020-11932

CVE-2020-11932 🐛🔍 Überprüft CVE-2020-11932 und testet den Host auf die Schwachstelle Verwendung Herunterladen root@kitploit: git clone https://github.com/Staubgeborener/CVE-2020-11932 cd CVE-2020-11932 chmod +x cve-2020-11932.sh ./cve-2020-11932.sh Mit curl ohne Download root@kitploit: bash curl ...

CVE-2026-32606-POC

Proof-of-Concept per CVE-2026-32606 Questo repository contiene un semplice codice proof-of-concept che sfrutta una debolezza comune descritta per la prima volta oltre un anno fa all'indirizzo https://oddlama.org/blog/bypassing-disk-encryption-with-tpm2-unlock/. Sebbene sia specificamente mirato a...

Centry

Centry चेतावनी: यह प्रायोगिक सॉफ्टवेयर है। इसमें बग होने की संभावना है। अपडेट्स यदि आपने पहले ही Centry स्थापित कर लिया है, तो नवीनतम संस्करण में अपडेट करने के लिए कृपया git pull चलाएँ। नवीनतम अपडेट इसे रीप्ले हमलों replay attacks के विरुद्ध अधिक सुरक्षित बनाते हैं। परिचय Centry एक पैनिक बटन है...

inception

Note: This tool is no longer under active development, please look at PCILeech instead. INCEPTION Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe HW interfaces...

incus-os

Introduzione IncusOS è un'immagine OS immutabile dedicata all'esecuzione di Incus. È basato su Debian 13 e costruito utilizzando mkosi. IncusOS può essere installato su sistemi moderni amd64 x8664 e arm64. Questo mira a fornire un modo molto veloce, sicuro e affidabile per eseguire un server Incu...

bitlocker-bypass-research

Ricerca sul Bypass di BitLocker Progetto personale di ricerca sulla sicurezza — bypass della crittografia integrale del disco di BitLocker tramite CVE-2023-21563 BitPixie. Di cosa si tratta Ad ottobre 2025 ho effettuato una valutazione fisica di recupero su un laptop aziendale con BitLocker attiv...

usbkill

« usbkill » is an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer. To run: root@kitploit: sudo python usbkill.py or root@kitploit: sudo python3 usbkill.py Related project; same idea, but implemented as a Linux driver:...

CVE-2026-9266

A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers. This vulnerability represents an incomplete remediation of CVE-2026-0714. The firmware introduced TPM2 parameter encryption as a countermeasure again...

PT-2026-48857

A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers. This vulnerability represents an incomplete remediation of CVE-2026-0714. The firmware introduced TPM2 parameter encryption as a countermeasure again...

luksmeta: Data corruption when handling LUKS1 partitions with luksmeta

A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the...

ALSA-2026:18421 Moderate: luksmeta security update

LUKSMeta is a simple library for storing metadata in the LUKSv1 header. The luksmeta package is a dependency of the clevis and tang packages, together providing the Network Bound Disk Encryption NBDE in AlmaLinux. Security Fixes: luksmeta: Data corruption when handling LUKS1 partitions with...

CVE-2026-31543

In the Linux kernel, the following vulnerability has been resolved: crashdump: don't log dm-crypt key bytes in readkeyfromuserkeying When debug logging is enabled, readkeyfromuserkeying logs the first 8 bytes of the key payload and partially exposes the dm-crypt key. Stop logging any key bytes...

CVE-2026-32606

IncusOS is an immutable OS image dedicated to running Incus. Prior to 202603142010, the default configuration of systemd-cryptenroll as used by IncusOS through mkosi allows for an attacker with physical access to the machine to access the encrypted data without requiring any interaction by the...

This Android vulnerability can break your lock screen in under 60 seconds

A vulnerability in Android devices can allow attackers to gain access to a phone in less than a minute. The vulnerability, tracked as CVE-2026-20435, affects certain MediaTek SoCs System-on-a-Chip using Trustonic’s TEE Trusted Execution Environment. That may sound rare, but reportedly that’s abou...

RLSA-2026:3476 Important: udisks2 security update

The Udisks project provides a daemon, tools, and libraries to access and manipulate disks, storage devices, and technologies. Security Fixes: udisks: Missing Authorization Check Allows Unprivileged Users to Back Up LUKS Headers via udisks D-Bus API CVE-2026-26104 udisks: Missing Authorization Che...

CVE-2026-26104

A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization. The issue occurs because a privileged D-Bus method responsible for exporting encryption metadata does not perform a policy check. As a result, sensitiv...