Centry

Centry 警告：这是实验性软件。很可能包含错误。 更新 如果你已经安装了 Centry，请运行 git pull 更新到最新版本。最新更新使其在抵御重放攻击方面更加安全。 简介 Centry 是一个紧急按钮（panic button），旨在保护用户免受冷启动攻击、直接内存访问攻击以及其他实时系统威胁。Centry 在部署了全盘加密且没有交换分区/页面文件的系统上最为有效。紧急功能可以通过 GUI 或网络请求（通过浏览器、智能手机等）触发。收到紧急指令后，Centry 将尝试从内存中移除敏感密钥，安全地覆写 RAM，然后强制关机。 功能 用户友好的 GUI 界面...

incus-os

简介 IncusOS 是一个专用于运行 Incus 的不可变操作系统镜像。 它基于 Debian 13，并使用 mkosi 构建。 IncusOS 可以安装在现代的 amd64 x8664 和 arm64 系统上。 这旨在提供一种非常快速、安全且可靠的方式来运行 Incus 服务器。 它非常注重安全性，积极依赖 UEFI 安全启动和 TPM 2.0 来实现启动安全和磁盘加密。 你可以在此处阅读更多关于如何开始使用 IncusOS 的信息， 包括物理安装或在各种虚拟机平台上运行 IncusOS 的详细说明。 IncusOS 的完整文档可以在此处找到。 开发 本仓库包含用于构建生产环境...

inception

Note: This tool is no longer under active development, please look at PCILeech instead. INCEPTION Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe HW interfaces...

kali-rpi-luks-crypt

在树莓派（或其他类似架构）上使用 LUKS 对 Kali 进行全盘加密 本 HOWTO 文档专门介绍如何在树莓派（或其他类似架构，例如 ODROID-C2）上运行 Kali，并使用 LUKS 进行全盘加密。本文基于这篇略显过时的文档。 动机 在局域网环境中，将 Kali 部署在树莓派（或其他类似的、小型低功耗硬件）上作为“一次性黑客盒子（throw-away-hackbox）”显然很实用。然而，将收集到的数据保密是一项基本要求。因此，全盘加密成为强制性的安全概念。 先决条件 首先，我们应该在 SD 卡上安装一个官方的、适用于树莓派的最新 Kali 镜像（未加密）。...

usbkill

« usbkill » is an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer. To run: sudo python usbkill.py or sudo python3 usbkill.py Related project; same idea, but implemented as a Linux driver: https://github.com/NateBrune/silk-guardian...

usbkill

« usbkill » es un interruptor de seguridad anti-forense que espera un cambio en tus puertos USB y, a continuación, apaga inmediatamente tu ordenador. Para ejecutarlo: sudo python usbkill.py o sudo python3 usbkill.py Proyecto relacionado; la misma idea, pero implementada como un controlador de...

CVE-2020-11932

CVE-2020-11932 🐛🔍 检查 CVE-2020-11932 并测试与此漏洞相关的主机 使用方法 下载 git clone https://github.com/Staubgeborener/CVE-2020-11932 cd CVE-2020-11932 chmod +x cve-2020-11932.sh ./cve-2020-11932.sh 使用 curl（无需下载） bash curl -s https://raw.githubusercontent.com/Staubgeborener/CVE-2020-11932/master/cve-2020-11932.sh ...

CVE-2026-32606-POC

Prueba de Concepto para CVE-2026-32606 Este repositorio contiene un código de prueba de concepto simple que explota una debilidad común descrita originalmente hace más de un año en https://oddlama.org/blog/bypassing-disk-encryption-with-tpm2-unlock/. Aunque se dirige específicamente a IncusOS, el...

AndroidSecurityEvolution

Evolución de la seguridad de Android Mejoras de seguridad significativas de las versiones principales recientes de Android, a partir de Android 5.0 Lollipop API 21. Android 5.0 API 21 - Lollipop Mejoras de seguridad - Android 5 A partir de agosto de 2023, las actualizaciones de Google Play Servic...

bitlocker-bypass-research

BitLocker 绕过研究 个人安全研究项目——利用 CVE-2023-21563（BitPixie）绕过 BitLocker 全盘加密。 这是什么 2025年10月，我对一台启用了 BitLocker 的企业笔记本电脑进行了物理恢复评估。员工忘记了密码，恢复密钥也找不到。我利用一个已知漏洞（CVE-2023-21563）从内存中提取了卷主密钥，绕过了 BitLocker，恢复了对系统的完全访问权限。 使用的工具/技术 CVE-2023-21563 — 通过 PXE 软重启绕过 BitLocker（BitPixie 框架） CVE-2024-1086 — Linux 内核...

Rocky Linux 9.6 [TuxCare] Security Update: libluksmeta / libluksmeta-devel / luksmeta (ALMALINUX9.6:CLSA-2026:1779796898)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779796898 advisory. - A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker...

YellowKey-Bitlocker-CVE-2026-45585

🔑 YellowKey-Bitlocker-CVE-2026-45585 - Gestisci facilmente le tue chiavi di ripristino BitLocker YellowKey BitLocker CVE-2026-45585 fornisce un modo per estrarre, eseguire il backup e organizzare le chiavi di ripristino per i tuoi drive crittografati. Questo strumento funziona su sistemi Windows...

CVE-2025-59322

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted volumes to be mounted as plaintext...

YellowKey-Bitlocker-CVE-2026-45585 — Updated!

🔑 YellowKey-Bitlocker-CVE-2026-45585 - Manage your BitLocker recovery keys easily YellowKey BitLocker CVE-2026-45585 provides a way to extract, back up, and organize recovery keys for your encrypted drives. This tool works on Windows systems that use BitLocker for full disk encryption. It automat...

CVE-2026-9266

A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers. This vulnerability represents an incomplete remediation of CVE-2026-0714. The firmware introduced TPM2 parameter encryption as a countermeasure again...

PT-2026-48857

A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers. This vulnerability represents an incomplete remediation of CVE-2026-0714. The firmware introduced TPM2 parameter encryption as a countermeasure again...

CVE-2026-9266: Missing Cryptographic Step

A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers. This vulnerability represents an incomplete remediation of CVE-2026-0714. The firmware introduced TPM2 parameter encryption as a countermeasure again...

luksmeta: Data corruption when handling LUKS1 partitions with luksmeta

A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption format. An attacker with the necessary permissions can exploit this flaw by writing a large amount of metadata to an encrypted device. The utility fails to correctly validate the...

ALSA-2026:18421 Moderate: luksmeta security update

LUKSMeta is a simple library for storing metadata in the LUKSv1 header. The luksmeta package is a dependency of the clevis and tang packages, together providing the Network Bound Disk Encryption NBDE in AlmaLinux. Security Fixes: luksmeta: Data corruption when handling LUKS1 partitions with...

CVE-2026-31543

In the Linux kernel, the following vulnerability has been resolved: crashdump: don't log dm-crypt key bytes in readkeyfromuserkeying When debug logging is enabled, readkeyfromuserkeying logs the first 8 bytes of the key payload and partially exposes the dm-crypt key. Stop logging any key bytes...