kali-rpi-luks-crypt

Full disk encryption for Kali on Raspberry or other similar architecture using LUKS This HOWTO is dedicated to running Kali on Raspberry or other similar architecture, e.g. ODROID-C2 using full disk encryption with LUKS. Based on the little bit outdated document here. Motivation Deploying Kali on...

sonos

sonos/amlogic haxx here you will find some exploit & tool code that was part of my presentation about the Sonos One @ Hack in the Box amsterdam 2023. the EL3 exploit can be used to dump your OTP/eFUSE data. sonostool can be used to get decryption keys for Sonos LUKS volumes as well as fetch and...

booster

Booster - fast, secure, modern initramfs for Linux Booster makes early boot feel lighter, faster, and more dependable. It builds compact initramfs images that move your Linux system from firmware to the real root filesystem with minimal fuss and strong encrypted-boot support. Instead of packing a...

lehack-2026-challenge

LeHack 2026 Challenge A 3-tier challenge demonstrating impact of direct disk mounting. Challenge Overview Level| Goal| Technique ---|---|--- 1| Access the unencrypted disk| Set boot cmdline to init=/bin/bash in grub 2| Crack vault1 LUKS| Extract header → hashcat → unlock & mount vault 3| Crack...

CVE-2026-32606-POC

Proof-of-Concept for CVE-2026-32606 This repo has simple proof-of-concept code exploiting a common weakness initially described over a year ago at https://oddlama.org/blog/bypassing-disk-encryption-with-tpm2-unlock/. While it specifically targets IncusOS, the attack is pretty generic against most...

UBUNTU-CVE-2026-125672

A flaw was found in cockpit-storaged. A Tang keyserver address read from a clevis token in a LUKS header is concatenated into curl's argument vector without a "--" separator. An address beginning with "-" is parsed by curl as an option instead of a hostname, allowing an attacker who can attach a...

CVE-2026-125672

A flaw was found in cockpit-storaged. A Tang keyserver address read from a clevis token in a LUKS header is concatenated into curl's argument vector without a "--" separator. An address beginning with "-" is parsed by curl as an option instead of a hostname, allowing an attacker who can attach a...

CVE-2026-125672

A flaw was found in cockpit-storaged. A Tang keyserver address read from a clevis token in a LUKS header is concatenated into curl's argument vector without a "--" separator. An address beginning with "-" is parsed by curl as an option instead of a hostname, allowing an attacker who can attach a...

CVE-2026-125672 Cockpit: cockpit-storaged: tang keyserver address from an untrusted luks header clevis token reaches curl's argument vector as an option

A flaw was found in cockpit-storaged. A Tang keyserver address read from a clevis token in a LUKS header is concatenated into curl's argument vector without a "--" separator. An address beginning with "-" is parsed by curl as an option instead of a hostname, allowing an attacker who can attach a...

CVE-2026-125672

A flaw in cockpit-storaged allows for curl option injection because a Tang keyserver address read from an untrusted clevis token in a LUKS header is concatenated into a curl argument vector without a "--" separator. If an attacker attaches a crafted LUKS/clevis block device, they can trick an adm...

CVE-2026-125672

A flaw was found in cockpit-storaged. A Tang keyserver address read from a clevis token in a LUKS header is concatenated into curl's argument vector without a "--" separator. An address beginning with "-" is parsed by curl as an option instead of a hostname, allowing an attacker who can attach a...

EUVD-2026-120869

A flaw was found in cockpit-storaged. A Tang keyserver address read from a clevis token in a LUKS header is concatenated into curl's argument vector without a "--" separator. An address beginning with "-" is parsed by curl as an option instead of a hostname, allowing an attacker who can attach a...

CVE-2026-125672 Cockpit: cockpit-storaged: tang keyserver address from an untrusted luks header clevis token reaches curl's argument vector as an option

A flaw was found in cockpit-storaged. A Tang keyserver address read from a clevis token in a LUKS header is concatenated into curl's argument vector without a "--" separator. An address beginning with "-" is parsed by curl as an option instead of a hostname, allowing an attacker who can attach a...

CVE-2026-125672

A flaw was found in cockpit-storaged. A Tang keyserver address read from a clevis token in a LUKS header is concatenated into curl's argument vector without a "--" separator. An address beginning with "-" is parsed by curl as an option instead of a hostname, allowing an attacker who can attach a...

Linux Distros Unpatched Vulnerability : CVE-2026-125672

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in cockpit-storaged. A Tang keyserver address read from a clevis token in a LUKS header is concatenated into curl's argument vector without a -...

CVE-2020-11932

CVE-2020-11932 🐛🔍 Check CVE-2020-11932 and test for host relating to this vulnerability Usage Download git clone https://github.com/Staubgeborener/CVE-2020-11932 cd CVE-2020-11932 chmod +x cve-2020-11932.sh ./cve-2020-11932.sh With curl so no download bash curl -s...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: dm: prevent leakage of the caller’s thread keyring via the table device file The refactoring in commit a28d893eb327 “md: port block device access to file” inadvertently keeps the caller’s thread keyring alive for an extended peri...

[SECURITY] Fedora 45 Update: clevis-pin-trustee-0.1.1-2.fc45

clevis-pin-trustee is a Clevis PIN that implements encryption and decryption operations using remote attestation via a Trustee server. It enables automated unlocking of LUKS-encrypted volumes in confidential computing environments by fetching encryption keys from Trustee servers after successful...

[SECURITY] Fedora 44 Update: clevis-pin-trustee-0.1.1-2.fc44

clevis-pin-trustee is a Clevis PIN that implements encryption and decryption operations using remote attestation via a Trustee server. It enables automated unlocking of LUKS-encrypted volumes in confidential computing environments by fetching encryption keys from Trustee servers after successful...

Linux Distros Unpatched Vulnerability : CVE-2026-109976

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the clevis PKCS11 pin. The clevis-pkcs11-afunix-socket-unlock daemon crashes when an AFUNIX client connects to the data socket without a bou...