crackle

crackle cracks BLE Encryption AKA Bluetooth Smart. crackle exploits a flaw in the BLE pairing process that allows an attacker to guess or very quickly brute force the TK Temporary Key. With the TK and other data collected from the pairing process, the STK Short Term Key and later the LTK Long Ter...

cryptography

pyca/cryptography .. image:: https://img.shields.io/pypi/v/cryptography.svg :target: https://pypi.org/project/cryptography/ :alt: 最新バージョン .. image:: https://readthedocs.org/projects/cryptography/badge/?version=latest :target: https://cryptography.io :alt: 最新ドキュメント .. image::...

PrivateSphare

PrivateSphare PrivateSphare is a secure, anonymous, zero-knowledge file storage and sharing platform. It allows users to upload files and receive a human-readable 24-word passphrase for retrieval. No accounts, no tracking, and no unencrypted data ever touches the server's persistent storage. 🛡️ Ke...

Shellcode-Injection-Techniques

Shellcode Injection Techniques A collection of C shellcode injection techniques. All techniques use an AES encrypted meterpreter payload. I will be building this project up as I learn, discover or develop more techniques. Note: The project is not intended to be used as-is. If you are going to use...

CVE-2026-34486-poc

CVE-2026-34486 Apache Tomcat EncryptInterceptor 우회 취약점 재현 1. 취약점 개요 속성| 상세 ---|--- CVE 번호| CVE-2026-34486 심각도| Important / High（CVSS 3.1: 7.5） 취약점 유형| CWE-311 민감 데이터 암호화 누락 / CWE-807 신뢰할 수 없는 입력 제약 영향받는 버전| Apache Tomcat 9.0.116 / 10.1.53 / 11.0.20 수정 버전| Apache Tomcat 9.0.117 / 10.1.54 / 11.0.21...

core

Secluso Private DIY home security for Raspberry Pi, with encrypted remote access and a 5-minute software setup. Download Secluso Deploy • Build Your Own Guide • Security Model • Website Secluso is a private home security camera system for Raspberry Pi. Watch live video, get alerts, and open...

CVE-2022-25012-dvr4-weak-password-encryption

This is an improved version of the exploit by deathflash1411 Original exploit: https://www.exploit-db.com/exploits/50130 Improved Features Cracked password is now output as reconstructed password string instead of only output character by character The encrypted password string is now entered as ...

cart

CaRT 압축 및 RC4 전송 CaRT 파일 형식은 악성코드 및 관련 메타데이터를 저장/전송하는 데 사용됩니다. 악성코드를 실행할 수 없도록 무력화하고 암호화하여 안티바이러스 소프트웨어가 CaRT 파일을 악성코드로 탐지하지 못하게 합니다. 장점 빠름FAST: CaRT는 파일을 압축하는 것만큼 빠릅니다. 스트리밍STREAMING: CaRT는 zlib 및 RC4를 사용하므로 파일을 스트리밍 방식으로 인코딩할 수 있습니다. 메타데이터METADATA: CaRT는 파일 자체와 동일한 파일에 파일 메타데이터를 저장할 수 있으며, 전체 파...

GG-AESY

Blogpost: https://redteamer.tips/introducing-gg-aesy-a-stegocryptor/ WARNING: you might need to restore NuGet packages and restart visual studio before compiling. If anyone knows how I can get rid of this problem, DM me. Manual To start off, I highly recommend to always use GG-AESY using verbose...

sslyze

SSLyze SSLyze — это быстрый и мощный инструмент для сканирования SSL/TLS, а также библиотека для Python. SSLyze позволяет проанализировать SSL/TLS-конфигурацию сервера, подключаясь к нему, чтобы убедиться, что используются надёжные настройки шифрования сертификат, наборы шифров, эллиптические...

BobTheSmuggler

BobTheSmuggler Quick Update Jan 15th, 2024 -Support for multi-file compression has been added. If you have multiple files generated for your final payload e.g., DLL-Sideloading files or multi-stage delivery files, you can now use the '-i' option to specify the directory path. If a directory path ...

pycryptodome

.. image:: https://github.com/Legrandin/pycryptodome/workflows/Integration%20test/badge.svg :target: https://github.com/Legrandin/pycryptodome/actions .. image:: https://badge.fury.io/py/pycryptodome.svg :target: https://pypi.org/project/pycryptodome .. image::...

Shellcode-Encryptor

ShellcodeEncryptor A simple shell code encryptor/decryptor/executor to bypass anti virus. Note: I have completely redone the work flow for creating the bypass, I have found injecting the binary into memory using PowerShell as the most effective method. Purpose To generate a .Net binary containing...

synodecrypt

SynoDecrypt 모든 Synology 암호화 아카이브SPK, PAT, ...를 해독하는 도구입니다. 리버스 엔지니어링 작업은 블로그 게시물에 설명되어 있습니다. 설치 pip install -r requirements.txt 사용법 먼저 암호화 키를 추출하여 JSON 파일예: keys.json에 넣어야 합니다. 이 JSON 파일은 다음 형식이어야 합니다: "keypairs": "keytypes": 0, 1, 2, "signing": "hexsigningkey", "master": "hexmasterkey" ,...

stegcloak

StegCloak The Cloak of Invisibility for your texts StegCloak is a pure JavaScript steganography module designed in functional programming style, to hide secrets inside text by compressing and encrypting the secret before cloaking it with special unicode invisible characters. It can be used to...

knob

README Repository about the Key Negotiation Of Bluetooth KNOB attacks on Bluetooth BR/EDR and Bluetooth Low Energy. Related Work From the Bluetooth Standard to Standard-Compliant 0-days HWIO20 Key Negotiation Downgrade Attacks on Bluetooth and Bluetooth Low Energy TOPS20 Bluetooth blues: KNOB...

pybeacon

PyBeacon PyBeacon — это набор скриптов для работы с зашифрованным трафиком Cobalt Strike. Он может шифровать/дешифровать метаданные бикона, а также разбирать симметрично зашифрованные задания. Включенные скрипты Существует небольшая библиотека, содержащая методы шифрования/декодирования, однако...

pybeacon

PyBeacon PyBeacon is a collection of scripts for dealing with Cobalt Strike's encrypted traffic. It can encrypt/decrypt beacon metadata, as well as parse symmetric encrypted taskings Scripts included There is a small library which includes encryption/decoding methods, however some example scripts...

Chimera

Chimera Unlea$ed Tool Background While DLL sideloading can be used for legitimate purposes, such as loading necessary libraries for a program to function, it can also be used for malicious purposes. Attackers can use DLL sideloading to execute arbitrary code on a target system, often by exploitin...

ChromeKatz

ChromeKatz ChromeKatzは、Chromiumベースのブラウザのメモリから機密情報をダンプするためのソリューションです。 現時点では、ChromeKatzは次の3つのプロジェクトで構成されています： 1. CookieKatz - Cookieダンパー 2. CredentialKatz - 非推奨... とりあえず 3. ElevationKatz - エレベーションサービスから復号鍵を取得 CookieKatzには、実行ファイル、Beacon Object File、ミニダンプパーサーがあります。また、ElevationKatzには実行ファイルとBeacon...