BlackBerryC2

BlackBerryC2 2.0.0-beta BlackBerryC2 — это зашифрованная платформа для удаленного администрирования и C2 , разработанная исключительно для образовательных целей, исследований в области безопасности и контролируемых лабораторных сред. Проект демонстрирует, как построить пользовательский сервер...

CVE-2025-26466

CVE-2025-26466 poc для CVE-2025-26466 создано Fikret Can Gurbuz ИСПОЛЬЗОВАНИЕ root@kitploit: python3 poc.py -i -p Вот шаги: 1. TCP-подключение к порту 2. получить баннер сервера SSH-2.0-OpenSSHX.Xp1 3. отправьте свой клиентский баннер SSH-2.0-YourClient\r\n 4. отправьте wrapsshpacketbuildkexinit ...

NetSpy

NetSpyC2 NetSpyC2 是一个基于 Python 的命令与控制（C2）服务器，专为教学目的、安全研究和受控实验室环境而创建。 该项目展示了如何使用 Python 在应用协议层面实现加密的客户端-服务器通信、会话管理和安全文件传输。 NetSpyC2 不依赖外部 TLS 栈 。相反，它使用现代密码学原语实现自己的加密握手和加密通道。 主要功能 自定义的基于 TCP 的 C2 服务器 应用层握手验证 运行时生成的 RSA 2048 位密钥对 使用 RSA-OAEP 进行安全 AES 密钥交换 AES-GCM 提供每个会话的认证加密 多个并发客户端会话 交互式操作员控制台...

cve-2025-26466-openssh-poc

CVE-2025-26466 OpenSSH SSH2MSGPING DoS PoC 免責事項: このコードは教育目的 および許可されたセキュリティテスト専用です。無許可で他人のシステムを攻撃することは違法です。 脆弱性 CVE-2025-26466 は、OpenSSH における事前認証型サービス拒否 DoS の脆弱性であり、鍵交換 Key Exchange の完了前に SSH サーバーを過負荷にすることができます。 技術的詳細 影響を受けるバージョン: 9.9p2 より前の OpenSSH 種別: Pre-Auth DoS / メモリリーク 悪用方法: 暗号化接続が確立される前に...

formal_np1sec

Ricerca sulla dimostrazione della riservatezza della chiave di gruppo nella parte di scambio di chiavi di gruppo di n+1sec, con alcune limitazioni, come ad esempio avere solo 3 partecipanti. Questo lavoro è stato svolto da Alex Balducci e Andy Lee. Il documento principale è...

SSH-Weak-DH

Informazioni Questo strumento crea connessioni SSH a un server e passa attraverso diverse configurazioni client per verificare se il server consente uno scambio di chiavi Diffie-Hellman DH utilizzando un gruppo debole. Il nostro obiettivo è aiutare a valutare i server SSH per impostazioni di...

PQC-Scanner

Der PQC Network Scanner ist ein eigens entwickeltes Bewertungstool, das Organisationen dabei unterstützt, ihre kryptografische Gefährdung zu verstehen, während sie den Übergang zu einer Post-Quanten-Sicherheitslage vollziehen. Im Gegensatz zu herkömmlichen TLS-Scannern, die sich ausschließlich au...

ECC_Attacks

Ataques Conhecidos à Criptografia de Curvas Elípticas Introdução Introdução às Curvas Elípticas Curvas Elípticas no Contexto da Criptografia Ataques ECC Ataques ECDH A Ordem do Gerador é Muito Pequena A Ordem do Gerador é um Número Suave A Ordem do Gerador é Quase um Número Suave, e a Chave Priva...

DHEater

DHEater DHEater is the proof-of-concept implementation of the DHEat attack CVE-2002-20001. It saturates a server's CPU by enforcing Diffie-Hellman ephemeral DHE or elliptic-curve Diffie-Hellman ephemeral ECDHE key exchange over both TLS and SSH. For further information about the attack visit the...

camel-pqc-tls

TLS Post-Quantum con Apache Camel Questa repository contiene tre esempi che dimostrano gli handshake TLS 1.3 con crittografia post-quantistica PQC con Apache Camel, utilizzando lo scambio di chiavi ibrido X25519MLKEM768. X25519MLKEM768 combina il classico X25519 Diffie-Hellman su curva ellittica...

CVE-2025-32433.py

CVE-2025-32433.py Questo PoC Python simula i flussi di messaggi SSH, inclusi lo scambio di chiavi, l'apertura del canale e le richieste di comando, per analizzare il comportamento del server. Pensato per test di laboratorio controllati, dimostra la gestione del protocollo, l'elaborazione dei...

reternal-quickstart

RE:TERNAL Note: Still under development, only use for testing and do not expose interfaces! Current compose doesn't work yet, only try when you know what you're doing RE:TERNAL is a centralised purple team orchestration service to manage third-party C2 frameworks. Agents are installed on endpoint...

CVE-2026-73430

Russh is a Rust SSH client & server library. Prior to 0.62.4, an unauthenticated SSH client can cause a denial of service by sending SSHMSGKEXECDHINIT with a 32-byte all-zero QC value. Curve25519Kex::serverdh in russh/src/kex/curve25519.rs accepts the all-zero peer public value and computes an...

CVE-2026-73430

Russh is a Rust SSH client & server library. Prior to 0.62.4, an unauthenticated SSH client can cause a denial of service by sending SSHMSGKEXECDHINIT with a 32-byte all-zero QC value. Curve25519Kex::serverdh in russh/src/kex/curve25519.rs accepts the all-zero peer public value and computes an...

PT-2026-71343

Name of the Vulnerable Software and Affected Versions Russh versions prior to 0.62.4 Description An unauthenticated SSH client can trigger a denial of service by sending an SSH MSG KEX ECDH INIT message containing a 32-byte all-zero Q C value. The Curve25519Kex::server dh function in...

Astra Linux – Vulnerability in wpa

In Hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker who has successfully bootstrapped public keys with another entity using PKEX in the past will be able to subvert future bootstrapping attempts by passively observing the public keys. By...

Astra Linux – Vulnerability in python-cryptography

Cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to version 46.0.5, the publickeyfromnumbers or EllipticCurvePublicNumbers.publickey, EllipticCurvePublicNumbers.publickey, loadderpublickey, and loadpempublickey functions did not verify...

Key Exchange without Entity Authentication

Overview Affected versions of this package are vulnerable to Key Exchange without Entity Authentication due to disabled SSH host key verification in the EMR SSH helper commands. An attacker can intercept SSH sessions and file transfers by performing a man-in-the-middle attack between the client a...

CVE-2026-18654

Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and AWS CLI v2 before 2.35.3 might allow man-in-the-middle attackers to intercept SSHsessions and file transfers via network positioning between the client and the EMR cluster endpoint. To...

CVE-2026-59650

Bouncy Castle for Java up to 1.84 (and Java LTS up to 2.73.11) is affected by CVE-2026-59650: MTI/A0 DH key exchange exponentiates an unvalidated peer value. This can impact confidentiality and integrity as described in the CVE, with overall severity listed as CRITICAL (CVSS 9.3). The issue is fi...