wcw-cyberring-pav-decryptor

WCW CyberRing PAV復号化ツール 1999年製プロプライエタリなビデオDRMシステムの暗号解析。静的バイナリ解析と既知平文攻撃により、51分の失われたメディアを復元。 復元された「CyberRing」試合のフレーム。WCWのレスラーはブルースクリーンで撮影され、火炎効果のあるCGIアリーナに合成された。これが1999年のインタラクティブ・エンターテインメントの姿だった。 背景 WCW Internet Powerdisk は、1999年にWCW Magazineに同梱されたプロモーション用CD-ROMである。UITという企業が開発した PAVENCRYPT...

bkcrack

bkcrack Crack legacy zip encryption with Biham and Kocher's known plaintext attack. Overview A ZIP archive may contain many entries whose content can be compressed and/or encrypted. In particular, entries can be encrypted with a password-based symmetric encryption algorithm referred to as...

bkcrack

bkcrack 使用 Biham 和 Kocher 的已知明文攻击破解传统 ZIP 加密。 概述 ZIP 归档可能包含许多条目，其内容可以被压缩和/或加密。 具体来说，条目可以使用基于密码的对称加密算法进行加密，该算法通常称为传统 PKWARE 加密、传统加密或 ZipCrypto。 该算法生成一个伪随机字节流（密钥流），通过与条目内容（明文）进行异或运算来产生加密数据（密文）。 生成器的状态由三个 32 位整数组成，使用密码初始化，并在加密过程中随着明文不断更新。 这种加密算法容易受到已知明文攻击，如 Eli Biham 和 Paul C. Kocher 的研究论文《对 PKZIP...

forticrack

FortiCrack 解密加密的 Fortinet FortiOS 固件镜像 由 Bishop Fox Team X 开发 环境要求 本工具设计用于 Linux 环境。 请为你的系统安装 python3 和 gzip 软件包。 使用方法 从 Fortinet 支持站点下载加密的固件镜像，然后对该镜像运行此工具。 root@kitploit: ❯ ./forticrack.py -h Usage: python3 forticrack.py FortiCrack 使用已知明文攻击来推导文件加密密钥，然后解密镜像数据。更多详情请参阅我们的博客：Breaking Fortinet Firmwa...

EUVD-1999-1066

Malware in sbrugna...

EUVD-2014-2357

Malware in sbrugna...

Nextcloud Server 19.0.1 Encryption Vulnerability (NC-SA-2020-039)

Nextcloud Server is prone to a vulnerability where it is possible to downgrade the encryption scheme and break the integrity through known-plaintext attack. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Nextcloud: Downgrade encryption scheme and break integrity through known-plaintext attack

The idea behind the Server Side Encryption is that you can move your encrypted files to an external party without that external party being able to to read or modify those files. Some time ago, Nextcloud switched from unauthenticated CFB cipher block mode to authenticated CTR cipher block mode in...

CVE-2014-2319

The Encrypt Files feature in ConeXware PowerArchiver before 14.02.05 uses legacy ZIP encryption even if the AES 256-bit selection is chosen, which makes it easier for context-dependent attackers to obtain sensitive information via a known-plaintext attack...

Code injection

The Encrypt Files feature in ConeXware PowerArchiver before 14.02.05 uses legacy ZIP encryption even if the AES 256-bit selection is chosen, which makes it easier for context-dependent attackers to obtain sensitive information via a known-plaintext attack...

CVE-2014-2319

The Encrypt Files feature in ConeXware PowerArchiver before 14.02.05 uses legacy ZIP encryption even if the AES 256-bit selection is chosen, which makes it easier for context-dependent attackers to obtain sensitive information via a known-plaintext attack...

CVE-2007-6192

The web management interface in Citrix NetScaler 8.0 build 47.8 uses weak encryption XOR of unpadded data to store credentials within a cookie, which makes it easier for remote attackers to obtain cleartext credentials when a cookie is captured via a known-plaintext attack...

CVE-2007-6192

The web management interface in Citrix NetScaler 8.0 build 47.8 uses weak encryption XOR of unpadded data to store credentials within a cookie, which makes it easier for remote attackers to obtain cleartext credentials when a cookie is captured via a known-plaintext attack...

CVE-2007-6192

The CVE-2007-6192 entry describes an information disclosure vulnerability in the Citrix NetScaler Web Management Interface (NetScaler 8.0 build 47.8). The issue arises from using weak encryption to protect cookie contents by XORing sensitive values (including credentials) with a fixed key stream,...

Design/Logic Flaw

PasswordSafe 3.0 beta, when running on Windows before XP, uses a weak random number generator C++ rand function during generation of the database encryption key, which makes it easier for attackers to decrypt the database and steal passwords by generating keys for all possible rand seed values an...

CVE-2006-1378

CVE-2006-1378 concerns PasswordSafe 3.0 beta running on Windows versions prior to XP, where the database encryption key is generated using the weak C++ rand() RNG. The underlying root cause is the predictability of rand(), which enables an attacker to enumerate possible seed values and, via a kno...

Weak pkzip encryption

Weak PRNG open possibility for recovering encrypted text with known plain text attack with minimal amount of known text...

CVE-1999-1085

SSH 1.2.25, 1.2.23, and other versions, when used in in CBC Cipher Block Chaining or CFB Cipher Feedback 64 bits modes, allows remote attackers to insert arbitrary data into an existing stream between an SSH client and server by using a known plaintext attack and computing a valid CRC-32 checksum...