keypair

keypair Generate a RSA PEM key pair from pure JS Usage var keypair = require'keypair'; var pair = keypair; console.logpair; outputs $ node example.js public: '-----BEGIN RSA PUBLIC...

RSA-Backdoor

RSA Backdoor Generator This repo contains code to reproduce the Secretly Embedded Trapdoor with Universal Protection SETUP attack on RSA key generation proposed by Young & Yung, 1996. Considering the potential of this attack, never trust black box key generation systems. References: - Presentatio...

sh4d0wup

sh4d0wup % docker run -it --rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup OPTIONS Commands: bait Start a malicious update server front Bind a http/https server but forward everything unmodified infect High level tampering, inject additional commands into a package tamper Low level tampering,...

Detect-CVE-2017-15361-TPM

Detect Trusted Platform Modules Vulnerable to CVE-2017-15361 This repository provides content for aiding DoD administrators in detecting systems that have an enabled Trusted Platform Module TPM that is vulnerable to CVE-2017-15361 and is a companion to Information Assurance Advisory RSA Key...

SkypeACLKeyGen.exe-analysis-for-hacking-team

SkypeACLKeyGen.exe analysis for hacking team So... what do we analyse today ? well today we analyse a piece of software from hacking team. It's about skype? why do we do this ? idk i find it interesting. So anyway we start by inspecting runtime behaviour. As you can see it requires a username and...

ROCA-attack-on-vulnerability-CVE-2017-15361

ROCA-attack-on-vulnerability-CVE-2017-15361 This repository contains the thesis developed for my bachelor's degree in Mathematical Engineering at Polytechnic of Turin. It's a script based on python and sage. The goal of the script is to generate an RSA key, evaluete if it's vulnerable by the ROCA...

PGP-Tools

PGP Tools Open-source browser extension for PGP encryption, decryption, and signing. Built with Rust/WebAssembly. Private keys never touch the JS heap unless they have to. Get it here Why PGP Tools? Open source and transparent. Most PGP browser extensions are closed source. You shouldn't trust a...

debianopenssl

debianopenssl Private keys vulnerable to Debian OpenSSL bug CVE-2008-0166 In 2008 a bug in Debian's and Ubuntu's OpenSSL package led to predictable private keys. While the number of keys is limited, it takes a few considerations to create a proper list of all plausibly affected keys. This...

immich-exfiltration-demo

Cybersecurity demo: Immich exfiltration CVE-2026-35455 Proof-of-concept cybersecurity demo for CVE-2026-35455, showcasing automated API key generation and data exfiltration leading to full account hijacking and persistent unauthorized access. Learn more: report, video...

HiveV5_keystream_decryptor

HiveV5 keystream decryptor PoC Introduction The Hive sample analyzed and referred to in this document was randomly chosen from this list created by @rivitna to which my warmest thanks go. Artifacts are available on the VirusTotal platform. In this document, file a0h2uih3d2.exe has been taken as a...

vuke

vuke Herramienta de investigación para analizar y reproducir la generación vulnerable de claves de Bitcoin. Características Arquitectura modular : fuentes y transformaciones conectables Múltiples fuentes de entrada Rangos numéricos probar semillas débiles Listas de palabras análisis de brainwalle...

hdcp-genkey

Esempio di generazione della chiave HDCP Questo script implementa una versione semplice dell'algoritmo di generazione delle chiavi HDCP in Python utilizzando la chiave master HDCP trapelata che si trova in master-key.txt. Usage: generatekey.py options Options: -h, --help show this help message an...

CVE-2022-21449

CVE 2022 21449 python implementation This project allows you to: Plot an elliptic curve with desired parameters, over a finite field or not Generate a key pair from a given elliptic curve Encrypt / Decrypt a message via ECIES Sign / verify using ECDSA Simulate an exploitation of CVE 2022 21449 Fi...

zyxel-vmg8825-keygen

Zyxel VMG8825-T50 Keygen per Supervisor Questo progetto contiene le seguenti funzioni implementate in Python 3: Nome funzione| Validità ---|--- zcfgBeCommonGenKeyBySerialNumCBT | ❓ zcfgBeCommonGenKeyBySerialNumMethod2 | ✅ zcfgBeCommonGenKeyBySerialNumMethod3 | ✅...

Astra Linux – Vulnerability in nss

During RSA key generation, bignum implementations used a variant of the Binary Extended Euclidean Algorithm, which involved significant input-dependent processes. This allowed attackers to perform electromagnetic-based side-channel attacks to capture traces that could lead to the recovery of secr...

Timing Attack

Overview org.bouncycastle:bcprov-jdk15to18 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Timing Attack through the mod3 and modQ reduction helpers in org.bouncycastle.pqc.math.ntru.Polynomial and...

Rocky Linux 9.6 [TuxCare] Security Update: opensc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1787393949)

The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787393949 advisory. - A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with...

CVE-2026-90562

LangBot before 4.10.11 generates password recovery keys with only 24 bits of entropy and applies no rate limiting to the unauthenticated reset-password endpoint. Remote attackers knowing the administrator email can exhaust the keyspace through concurrent requests to reset the admin password and...

CVE-2008-0166-BTC-satoshi-mining-wallets

GhostRNG — 漏洞分析：Bitcoin 2009-2012 中的 OpenSSL 0.9.8c CVE-2008-0166 作者： 基于 bitcoin-code-r252 0.1.5 / 0.2.0 / 0.3.24 以及 原始 make-OpenSSL-0-9-8c-vulnerable-again.diff THC 的分析 日期： 2026-09-10 1. 引言 Bitcoin 0.1.5（2009 年 1 月）仅在 Windows 上运行，使用 OpenSSL 0.9.8c 进行 EC 密钥生成（ECKEYgeneratekey）。2008 年，...

Linux Distros Unpatched Vulnerability : CVE-2026-53939

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. In versions 0.6.1 through 0.6.2.5, when cjose encrypts a JWE using ...