debianopenssl

debianopenssl Private keys vulnerable to Debian OpenSSL bug CVE-2008-0166 In 2008 a bug in Debian's and Ubuntu's OpenSSL package led to predictable private keys. While the number of keys is limited, it takes a few considerations to create a proper list of all plausibly affected keys. This...

blur

README Repository about the BLUR attacks presented at AsiaCCS'22 in the paper titled: BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energy. Useful links: pdf, video, slides, website. BibTex entry: @inproceedingsantonioli22blur, author=Antonioli, Danie...

sklad

Sklad 📦 Sklad is a cross-platform snippet manager that lives in your system tray. Store passwords, API keys, code snippets, and any text you copy frequently — encrypted and always one click away. Sklad Demo ✨ Features 🔒 Master Password Protection — Secrets are AES-256 encrypted with Argon2 key...

authkeysync

AuthKeySync Automatically synchronize SSH public keys from remote URLs to your servers 📖 Full Documentation The Problem Managing SSH access across multiple servers is painful: Team members join or leave, and you need to update authorizedkeys on every server Developers rotate their SSH keys, and n...

SubDomainizer

Buy Me A Coffee SubDomainizer SubDomainizer is a tool designed to find hidden subdomains and secrets present is either webpage, Github, and external javascripts present in the given URL. This tool also finds S3 buckets, cloudfront URL's and more from those JS files which could be interesting like...

poc-cve-2016-10555

Change the algorithm RS256asymmetric to HS256symmetric - POC CVE-2016-10555 The algorithm HS256 uses the secret key to sign and verify each message. The algorithm RS256 uses the private key to sign the message and uses the public key for authentication. If you change the algorithm from RS256 to...

DumpBrowserSecrets

DumpBrowserSecrets Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from modern Chromium-based and Gecko-based browsers Chrome, Microsoft Edge, Firefox, Opera, Opera GX, and Vivaldi. Quick Links Maldev...

django-cve-2020-13254

Django CVE-2020-13254 This repository demonstrates exploitation of CVE-2020-13254 in two ways – via a web interface and via a failing test case. For more details visit: https://danpalmer.me/2020-06-07-django-memcache-vulnerability/ Exploiting via the web The example provides a web interface with ...

hershell

Hershell Go로 작성된 간단한 TCP 리버스 셸. TLS를 사용하여 통신을 보호하며, 인증서 공개키 지문 고정 기능을 제공하여 트래픽 가로채기를 방지합니다. 지원되는 OS: Windows Linux Mac OS FreeBSD 및 파생 제품 왜 ? Meterpreter 페이로드는 훌륭하지만, 때때로 AV 제품에 탐지됩니다. 이 프로젝트의 목표는 여러 시스템에서 작동할 수 있는 간단한 리버스 셸을 얻는 것입니다. 어떻게 ? Go로 작성되었으므로, 원하는 아키텍처에 대해 소스를 크로스 컴파일할 수 있습니다. 시작 및 의존성...

cryptography-research-demo

Artifacts for "Further Single-Key Recovery Attacks on Reduced-Round AES" Source code for every experiment quoted in the paper. No measurement output or prebuilt table is bundled: each program prints or writes its own results, so every number can be regenerated from scratch. directory| what it is...

CVE-2024-43917

CVE-2024-43917 A proof of concept developed to exploit CVE-2024-43917. Based on PatchStack's article. Usage usage: python CVE-2024-43917.py --help TI WooCommerce Wishlist WordPress plugin = 2.8.2 CVE-2024-43917 PoC positional arguments: COMMAND SQL command to execute SHAREKEY share key of the wis...

crowbar

Crowbar - Brute forcing tool What is Crowbar? Crowbar formally known as Levye is a brute forcing tool that can be used during penetration tests. It was developed to brute force some protocols in a different manner according to other popular brute forcing tools. As an example, while most brute...

zBang

zBang is a special risk assessment tool that detects potential privileged account threats in the scanned network. Organizations and red teamers can utilize zBang to identify potential attack vectors and improve the security posture of the network. The results can be analyzed with the graphic...

CVE-2022-40684

CVE-2022-40684 CVSS score: 9.6 POC for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager appliances. Vulnerable Products FortiOS versions between 7.0.0 – 7.0.6 and 7.2.0 – 7.2.1 FortiProxy versions between 7.0.0 – 7.0.6 and version 7.2.0 FortiSwitchManager versions 7.0...

ike-scan

ike-scan IKE 호스트IPsec VPN 서버를 탐색하고 지문을 식별합니다. 목차 빌드 및 설치 개요 사용법 구현 세부 사항 호스트 입력 및 메모리 요구 사항 속도 제한 쿠키 생성 및 원격 호스트 식별 IKE 패킷 세부 사항 백오프 지문 식별 프로그램 출력 예제 지원 플랫폼 참고 자료 및 RFC 연락처 정보 빌드 및 설치 ike-scan은 표준 GNU autoconf 및 automake 도구를 사용하므로 설치 절차는 일반적입니다: git clone https://github.com/royhills/ike-scan.git를...

ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...

PanOsExploitMultitool

PanOsExploitMultitool Exploitation and Post-Exploitation Multitool for Palo Alto PAN-OS Systems affected by vulnerabilities CVE-2024-0012 and CVE-2024-9474 During early exploitation of CVE-2024-0012 and CVE-2024-9474's Remote Code Execution vulnerabilities, I acquired a shell and began identifyin...

hashcat

hashcat hashcat is the world's fastest and most advanced password recovery utility, supporting five unique modes of attack for over 300 highly-optimized hashing algorithms. hashcat currently supports CPUs, GPUs, and other hardware accelerators on Linux, Windows, and macOS, and has facilities to...

GrafXploit

Automated Exploit Tool for Grafana CVE-2021-43798 Overview This project is an automated exploit tool designed to scan for and extract sensitive information from compromised Grafana instances vulnerable to CVE-2021-43798. The tool identifies vulnerable plugins and extracts SSH keys from compromise...

aws-key-disabler

AWS Lambda - IAM 액세스 키 비활성화기 AWS 키 비활성화기는 설정된 시간 이후에 AWS IAM 사용자 액세스 키를 비활성화하는 Lambda 함수로, 오래된 액세스 키와 관련된 위험을 줄이기 위한 것입니다. AWS Lambda 아키텍처 최종 사용자를 위한 SysOps 출력 개발자 툴체인 현재 제한 사항 스캔 결과JSON가 포함된 보고서는 단일 정의된 시스템 관리자 계정으로 전송됩니다. 빌드 구성 파일 /grunt/package.json의 reportto 속성을 참조하세요. 키는 비활성화만 되며, 삭제되거나 교체되지...