steganography

Strumento di Steganografia per Immagini Semplice strumento C++ di crittografia e steganografia che utilizza crittografia protetta da password per proteggere il contenuto di un file, e poi lo incorpora nei dati dei pixel di un'immagine utilizzando la codifica del bit meno significativo. Per sistem...

aes256_passwd_store

aes256passwdstore Dieses Skript verschlüsselt oder entschlüsselt Passwörter sicher auf der Festplatte in einer benutzerdefinierten Datenbankdatei. Es bietet außerdem eine Funktion zum Abrufen von Passwörtern aus einer zuvor erstellten Datenbankdatei. Das Skript nimmt ein Master-Passwort von der...

cryptography

pyca/cryptography .. image:: https://img.shields.io/pypi/v/cryptography.svg :target: https://pypi.org/project/cryptography/ :alt: Latest Version .. image:: https://readthedocs.org/projects/cryptography/badge/?version=latest :target: https://cryptography.io :alt: Latest Docs .. image::...

VSHG

VSHG - Hardware-Resistenz & verbesserte Sicherheit für GnuPG. VSHG zielt darauf ab, eine speicher-/hardwareresistente Verstärkung für GnuPGs standardmäßige s2k-Schlüsselableitungsfunktion + eine vereinfachte Schnittstelle für symmetrische Verschlüsselung bereitzustellen. Über VSHG VSHG Very secur...

pmanager

Pmanager Demo Descrizione Archivia e recupera le tue password da un database offline sicuro. Verifica se le tue password sono state precedentemente esposte per prevenire attacchi mirati di riutilizzo delle password. Perché sviluppare un altro gestore di password? Questo progetto è nato inizialmen...

blur

README Repository sugli attacchi BLUR presentati ad AsiaCCS'22 nell'articolo intitolato: BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energy. Link utili: pdf, video, slides, website. Voce BibTex: root@kitploit: @inproceedingsantonioli22blur,...

GlobalUnProtect

GlobalUnProtect PoC tool per decrittare e raccogliere configurazione, cookie e file HIP di GlobalProtect da installazioni client Windows. Post del blog: https://rotarydrone.medium.com/4a1d8fc7773e Utilizzo Eseguire come standalone o in-memory tramite execute-assembly o equivalente. Raccoglie tutt...

CVE-2019-5420

CVE-2019-5420 Exploit für Rails CVE-2019-5420 Das Problem Bis Rails v5.2.2 leitet die Anwendung den Schlüssel aus dem Namen der Anwendung ab, wenn die Sitzungen im Entwicklungsmodus gesichert werden...

curveball

curveball CVE-2020-0601 curveball - Calcolatore di chiavi alternative Compilazione Windows Visual Studio 2012 o successivo, quindi compilare la soluzione. Linux / Unix cc altkey.c -lcrypto -o altkey Utilizzo Utilizzo: altkey ecpubliccertificate.pem ecnewprivatekey.pem Esempio root@kitploit:...

CVE-2026-11116-SNMPv3-Authentication-Bypass-via-Default-EngineID

CVE-2026-11116 – Bypass dell'autenticazione SNMPv3 tramite EngineID predefinito Codice del programma Python con pysnmp root@kitploit: snmpagentsim.py - SNMPv3 agent using well-known EngineID from pysnmp.hlapi import def snmpgetengineid=SnmpEngineIDhexValue='8000000001020304': iterator = getCmd...

lazywarden

Sistema di Backup e Importazione Sicuro, Automatico e Multi-Cloud per Bitwarden Lazywarden è uno strumento di automazione Python progettato per eseguire il backup e il ripristino dei dati dal tuo vault, inclusi gli allegati di Bitwarden. Ti consente di caricare i backup su più servizi di...

CVE-2026-81720

opensslencrypt before 1.4.9 fails to validate the memorycost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key derivation. Attackers with write access to local identity stores can craft malicious identity files with excessive...

CVE-2026-81704

opensslencrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched SHA-256 instead of Argon2id. Attackers can perform offline password guessing against encrypted files roughly six to seven orders of magnitude faste...

CVE-2026-81689

opensslencrypt versions before 1.4.9 derive the remote-pepper wrap key using unsalted HKDF-SHA256 or bare SHA-256 of the password, allowing identical keys across all users and files. Attackers with access to wrapped pepper blobs can precompute a single dictionary table and perform fleet-wide...

crackle

crackle knackt BLE-Verschlüsselung auch bekannt als Bluetooth Smart. crackle nutzt eine Schwachstelle im BLE-Pairing-Prozess aus, die es einem Angreifer ermöglicht, den TK Temporary Key zu erraten oder sehr schnell zu brute-forcen. Mit dem TK und anderen während des Pairing-Prozesses gesammelten...

EUVD-2026-67070

opensslencrypt before 1.4.9 fails to validate the memorycost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key derivation. Attackers with write access to local identity stores can craft malicious identity files with excessive...

EUVD-2026-67060

opensslencrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched SHA-256 instead of Argon2id. Attackers can perform offline password guessing against encrypted files roughly six to seven orders of magnitude faste...

CVE-2026-81704

openssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler. The affected code uses unstretched SHA-256 instead of Argon2id , omitting key stretching and hash rounds. This allows attackers to perform offline password guessing ag...

EUVD-2026-67055

opensslencrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, allowing attackers to trigger unbounded memory and CPU exhaustion during pre-authentication processing. Attackers can supply malicious files with excessive KDF parameters to exhaust syst...

CVE-2026-81689

openssl_encrypt versions before 1.4.9 derive the remote-pepper wrap key using unsalted HKDF-SHA256 or bare SHA-256 of the password, resulting in identical keys across all users and files. An attacker with access to wrapped pepper blobs can precompute a single dictionary table and perform fleet-wi...