HiveV5_keystream_decryptor

PoC du décrypteur de keystream HiveV5 Introduction L'échantillon Hive analysé et référencé dans ce document a été choisi aléatoirement dans cette liste créée par @rivitna, à qui vont mes plus chaleureux remerciements. Les artefacts sont disponibles sur la plateforme VirusTotal. Dans ce document, ...

zyxel-vmg8825-keygen

Zyxel VMG8825-T50 Генератор ключей супервизора В этом проекте содержатся следующие функции, реализованные на Python 3: Имя функции| Валидность ---|--- zcfgBeCommonGenKeyBySerialNumCBT | ❓ zcfgBeCommonGenKeyBySerialNumMethod2 | ✅ zcfgBeCommonGenKeyBySerialNumMethod3 | ✅...

debianopenssl

debianopenssl Debian OpenSSL バグ CVE-2008-0166 の影響を受ける秘密鍵 2008 年、Debian および Ubuntu の OpenSSL パッケージのバグにより、予測可能な秘密鍵が生成されました。鍵の数は限られていますが、影響を受ける可能性のあるすべての鍵の適切なリストを作成するには、いくつかの考慮点があります。このリポジトリには、badkeys ツールのブロックリストで使用される鍵が含まれています。 Debian OpenSSL バグに関する注意事項: 鍵はプロセス ID PID に依存します。有効な PID は 0 から 32767...

SkypeACLKeyGen.exe-analysis-for-hacking-team

Analyse de SkypeACLKeyGen.exe pour hacking team Donc... qu'analysons-nous aujourd'hui ? Eh bien aujourd'hui nous analysons un logiciel de hacking team. Il s'agit de Skype ? pourquoi faisons-nous cela ? je ne sais pas, je trouve cela intéressant. Bref, on commence par inspecter le comportement à...

ROCA-attack-on-vulnerability-CVE-2017-15361

Attaque ROCA sur la vulnérabilité CVE-2017-15361 Ce dépôt contient le mémoire développé pour mon bachelor en Ingénierie Mathématique à l'École Polytechnique de Turin. Il s'agit d'un script basé sur Python et Sage. L'objectif du script est de générer une clé RSA, d'évaluer si elle est vulnérable à...

hdcp-genkey

Exemple de génération de clé HDCP Ce script implémente une version simple de l'algorithme de génération de clé HDCP en Python en utilisant la clé maître HDCP divulguée qui se trouve dans master-key.txt. root@kitploit: Usage: generatekey.py options Options: -h, --help show this help message and ex...

PGP-Tools

PGP Tools Расширение для браузера с открытым исходным кодом для шифрования, дешифрования и подписи PGP. Создано на Rust/WebAssembly. Закрытые ключи не попадают в кучу JS, если без этого нельзя обойтись. Установить здесь Почему PGP Tools? Открытый исходный код и прозрачность. Большинство...

vuke

vuke Outil de recherche pour analyser et reproduire la génération de clés Bitcoin vulnérables. Fonctionnalités Architecture modulaire - sources et transformations enfichables Sources d'entrée multiples Plages numériques tester les seeds faibles Listes de mots analyse de brainwallet Horodatages...

RSA-Backdoor

Gerador de Backdoor RSA Este repositório contém código para reproduzir o ataque de Alçapão Secretamente Embutido com Proteção Universal SETUP na geração de chaves RSA proposto por Young & Yung, 1996. Considerando o potencial deste ataque, nunca confie em sistemas de geração de chaves do tipo...

CVE-2022-21449

CVE 2022 21449 python implementation Questo progetto permette di: Tracciare una curva ellittica con i parametri desiderati, su un corpo finito o no Generare una coppia di chiavi a partire da una curva ellittica data Crittografare / Decrittografare un messaggio con ECIES Firmarlo / verificarlo...

keypair

keypair Genera una coppia di chiavi RSA PEM in puro JS Utilizzo root@kitploit: var keypair = require'keypair'; var pair = keypair; console.logpair; restituisce root@kitploit: $ node example.js public: '-----BEGIN RSA PUBLIC...

immich-exfiltration-demo

Cybersecurity demo: Immich exfiltration CVE-2026-35455 Demo di cybersecurity come prova di concetto per CVE-2026-35455, che mostra la generazione automatica di chiavi API e l'esfiltrazione di dati, portando al completo dirottamento dell'account e all'accesso non autorizzato persistente. Scopri di...

TencentOS Server 4: opensc (TSSA-2026:0853)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0853 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Astra Linux – Vulnerability in nss

During RSA key generation, bignum implementations used a variant of the Binary Extended Euclidean Algorithm, which involved significant input-dependent processes. This allowed attackers to perform electromagnetic-based side-channel attacks to capture traces that could lead to the recovery of secr...

sh4d0wup

sh4d0wup root@kitploit: % docker run -it --rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup OPTIONS Commands: bait Start a malicious update server front Bind a http/https server but forward everything unmodified infect High level tampering, inject additional commands into a package tamper Low...

CVE-2026-19565 Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey

Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey. CreateSessionAuthKey runs five rounds of SHA-256, each over a fresh Time::HiRes reading formatted to six decimal places, the running...

Detect-CVE-2017-15361-TPM

Detectar Módulos de Plataforma Confiável Vulneráveis ao CVE-2017-15361 Este repositório fornece conteúdo para auxiliar administradores do DoD na detecção de sistemas que possuem um Trusted Platform Module TPM ativado e vulnerável ao CVE-2017-15361, sendo um complemento ao Information Assurance...

CVE-2026-76234 libcrux before 0.0.6 Cryptographic Implementation Bug Fixes

libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation bugs. libcrux-ecdh did not properly check length and clamping during X25519 secret validation and had a broken clamping check for imported X25519 secret keys; libcrux-ed25519 performe...

CVE-2026-19906

A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the component API Key Generation. Executing a manipulation of the argument apiKey can lead to insufficient entropy. The attack may b...

CVE-2026-19906 pkp pkp-lib API Key Generation APIProfileForm.php setData entropy

A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the component API Key Generation. Executing a manipulation of the argument apiKey can lead to insufficient entropy. The attack may b...