kali-rpi-luks-crypt

在树莓派（或其他类似架构）上使用 LUKS 对 Kali 进行全盘加密 本 HOWTO 文档专门介绍如何在树莓派（或其他类似架构，例如 ODROID-C2）上运行 Kali，并使用 LUKS 进行全盘加密。本文基于这篇略显过时的文档。 动机 在局域网环境中，将 Kali 部署在树莓派（或其他类似的、小型低功耗硬件）上作为“一次性黑客盒子（throw-away-hackbox）”显然很实用。然而，将收集到的数据保密是一项基本要求。因此，全盘加密成为强制性的安全概念。 先决条件 首先，我们应该在 SD 卡上安装一个官方的、适用于树莓派的最新 Kali 镜像（未加密）。...

CVE-2023-38571-a-macOS-TCC-bypass-in-Music-and-TV

执行摘要 macOS 的 Music 和 TV 存在不安全的重命名操作，导致通过完全控制用户的 TCC.db 来获得 FDA。 我针对每个应用分别提交了漏洞报告，如果适用，可以合并。 根本问题在于这些应用拥有 FDA 权限，但未能对其文件操作进行清理。 利用描述 Music 和 TV 在这方面几乎相同，只是路径不同。此后我将以 Music 为例。TV 的利用代码非常直接，请自行查看。 Music 具有将文件复制到用户资料库的功能，该功能通过一个专用文件夹实现，用户可以在此文件夹中“拖放”文件。 用户只需在 /Music/Music/Media.localized/Automaticall...

bitlocker-bypass-research

BitLocker 绕过研究 个人安全研究项目——利用 CVE-2023-21563（BitPixie）绕过 BitLocker 全盘加密。 这是什么 2025年10月，我对一台启用了 BitLocker 的企业笔记本电脑进行了物理恢复评估。员工忘记了密码，恢复密钥也找不到。我利用一个已知漏洞（CVE-2023-21563）从内存中提取了卷主密钥，绕过了 BitLocker，恢复了对系统的完全访问权限。 使用的工具/技术 CVE-2023-21563 — 通过 PXE 软重启绕过 BitLocker（BitPixie 框架） CVE-2024-1086 — Linux 内核...

Centry

Centry 警告：这是实验性软件。很可能包含错误。 更新 如果你已经安装了 Centry，请运行 git pull 更新到最新版本。最新更新使其在抵御重放攻击方面更加安全。 简介 Centry 是一个紧急按钮（panic button），旨在保护用户免受冷启动攻击、直接内存访问攻击以及其他实时系统威胁。Centry 在部署了全盘加密且没有交换分区/页面文件的系统上最为有效。紧急功能可以通过 GUI 或网络请求（通过浏览器、智能手机等）触发。收到紧急指令后，Centry 将尝试从内存中移除敏感密钥，安全地覆写 RAM，然后强制关机。 功能 用户友好的 GUI 界面...

inception

Note: This tool is no longer under active development, please look at PCILeech instead. INCEPTION Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe HW interfaces...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

CVE-2020-11932

CVE-2020-11932 🐛🔍 检查 CVE-2020-11932 并测试与此漏洞相关的主机 使用方法 下载 root@kitploit: git clone https://github.com/Staubgeborener/CVE-2020-11932 cd CVE-2020-11932 chmod +x cve-2020-11932.sh ./cve-2020-11932.sh 使用 curl（无需下载） root@kitploit: bash curl -s...

CVE-2025-61229

CVE-2025-61229 描述 来自开发者博客： 用户可设置的 Before/After shell 脚本在提权状态下运行，拥有 SuperDuper 的 TCC 完全磁盘访问权限。由于这些 shell 脚本由复制或计划任务的设置文件引用，恶意攻击者可以修改这些设置以运行自己的脚本。 来自 CVE： Shirt Pocket 的 SuperDuper! 3.10 及更早版本中存在一个问题，允许本地攻击者修改默认任务模板，以 root 权限和完全磁盘访问权限执行任意预飞脚本，从而绕过 macOS 隐私控制。 归属 本作者并非漏洞发现者，SuperDuper...

AndroidSecurityEvolution

Android Security Evolution Significant security enhancements of recent major Android versions, starting with Android 5.0 Lollipop API 21. Android 5.0 API 21 - Lollipop Security Enhancements - Android 5 Starting August 2023, Google Play Services updates will only be received from this Android...

CVE-2026-65400-poc

CVE-2026-65400 — macOS Screen Sharing pre-auth root file read read-only PoC Read-only proof of concept. It demonstrates the authentication bypass by reading a root-only file from a vulnerable host. It writes nothing to the target: no LaunchDaemon, no shell startup file, no crontab, no RCE chain...

YellowKey-Bitlocker-CVE-2026-45585

🔑 YellowKey-Bitlocker-CVE-2026-45585 - Gestisci facilmente le tue chiavi di ripristino BitLocker YellowKey BitLocker CVE-2026-45585 fornisce un modo per estrarre, eseguire il backup e organizzare le chiavi di ripristino per i tuoi drive crittografati. Questo strumento funziona su sistemi Windows...

zupt

Project archived. For newest versions and updates check it out. Compress everything. Trust nothing. Encrypt always...

YellowKey-Bitlocker-CVE-2026-45585 — Updated!

🔑 YellowKey-Bitlocker-CVE-2026-45585 - Manage your BitLocker recovery keys easily YellowKey BitLocker CVE-2026-45585 provides a way to extract, back up, and organize recovery keys for your encrypted drives. This tool works on Windows systems that use BitLocker for full disk encryption. It automat...

GHSA-WH8P-H9HW-X2MC uutils coreutils has an Unchecked Return Value Issue

The dd utility in uutils coreutils suppresses errors during file truncation operations by unconditionally calling Result::ok on truncation attempts. While intended to mimic GNU behavior for special files like /dev/null, the uutils implementation also hides failures on regular files and directorie...

This Android vulnerability can break your lock screen in under 60 seconds

A vulnerability in Android devices can allow attackers to gain access to a phone in less than a minute. The vulnerability, tracked as CVE-2026-20435, affects certain MediaTek SoCs System-on-a-Chip using Trustonic’s TEE Trusted Execution Environment. That may sound rare, but reportedly that’s abou...

CVE-2026-0714

A physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS full-disk encryption on Moxa Industrial Linux 3, where the discrete TPM is connected to the CPU via an SPI bus. Exploitation requires invasive physical access, including opening the device and...

CVE-2026-0714

A physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS full-disk encryption on Moxa Industrial Linux 3, where the discrete TPM is connected to the CPU via an SPI bus. Exploitation requires invasive physical access, including opening the device and...

CVE-2026-0714

A physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS full-disk encryption on Moxa Industrial Linux 3, where the discrete TPM is connected to the CPU via an SPI bus. Exploitation requires invasive physical access, including opening the device and...

CVE-2026-0714

CVE-2026-0714 (CISA/Red Hat context included) describes a physical-attack vulnerability in certain Moxa industrial computers running Moxa Industrial Linux 3 with TPM-backed LUKS full-disk encryption. The discrete TPM is connected to the CPU over an SPI bus. Exploitation requires invasive physical...

CVE-2026-0714

A physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS full-disk encryption on Moxa Industrial Linux 3, where the discrete TPM is connected to the CPU via an SPI bus. Exploitation requires invasive physical access, including opening the device and...