kali-rpi-luks-crypt

在树莓派（或其他类似架构）上使用 LUKS 对 Kali 进行全盘加密 本 HOWTO 文档专门介绍如何在树莓派（或其他类似架构，例如 ODROID-C2）上运行 Kali，并使用 LUKS 进行全盘加密。本文基于这篇略显过时的文档。 动机 在局域网环境中，将 Kali 部署在树莓派（或其他类似的、小型低功耗硬件）上作为“一次性黑客盒子（throw-away-hackbox）”显然很实用。然而，将收集到的数据保密是一项基本要求。因此，全盘加密成为强制性的安全概念。 先决条件 首先，我们应该在 SD 卡上安装一个官方的、适用于树莓派的最新 Kali 镜像（未加密）。...

lehack-2026-challenge

LeHack 2026 挑战 一个三层挑战，演示直接磁盘挂载的影响。 挑战概述 级别| 目标| 技术 ---|---|--- 1| 访问未加密的磁盘| 在 grub 中将启动命令行设置为 init=/bin/bash 2| 破解 vault1 LUKS| 提取头部 → hashcat → 解锁并挂载保险库 3| 破解 vault2 LUKS| 从 TPM 读取密钥 凭据 用户| 密码 ---|--- root| SynacktivSekurPasswd1337! operator| donthackmeplsss LUKS 保险库 1| ihatehackers! 部署 已在 Libvi...

booster

Booster - 高速、安全、モダンなLinux用initramfs Boosterは、初期ブートをより軽く、速く、信頼性の高いものにします。最小限の手間と強力な暗号化ブートサポートで、Linuxシステムをファームウェアから実際のルートファイルシステムへ移行するコンパクトなinitramfsイメージを構築します。...

sonos

sonos/amlogic haxx 在这里你会找到一些漏洞利用与工具代码，它们是我在 2023 年阿姆斯特丹 Hack in the Box 上 关于 Sonos One 的演讲的一部分。 EL3 漏洞利用可用于转储你的 OTP/eFUSE 数据。 sonostool 可用于获取 Sonos LUKS 卷的解密密钥，以及 获取并解密 OTA 更新，而无需将 Sonos 设备用作预言机。 截至撰写本文时，EL3 漏洞利用/缺陷仍是 0day。（从未向厂商报告） 尽情享用吧！ -- blasty [email protected]...

CVE-2020-11932

CVE-2020-11932 🐛🔍 Verifica CVE-2020-11932 y prueba si el host está relacionado con esta vulnerabilidad Uso Descarga root@kitploit: git clone https://github.com/Staubgeborener/CVE-2020-11932 cd CVE-2020-11932 chmod +x cve-2020-11932.sh ./cve-2020-11932.sh Con curl sin descarga root@kitploit: bash...

CVE-2026-32606-POC

Prueba de Concepto para CVE-2026-32606 Este repositorio contiene un código de prueba de concepto simple que explota una debilidad común descrita originalmente hace más de un año en https://oddlama.org/blog/bypassing-disk-encryption-with-tpm2-unlock/. Aunque se dirige específicamente a IncusOS, el...

Linux Distros Unpatched Vulnerability : CVE-2026-72103

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm: avoid leaking the caller's thread keyring via the table device file The refactoring in commit a28d893eb327 md: port block device access to file accidentally...

CVE-2026-72103

A flaw was found in the Linux kernel's device-mapper dm component. A refactoring error caused the caller's thread keyring, which can contain sensitive data like LUKS volume keys, to persist in memory longer than intended. This issue allows a local attacker with administrative privileges to recove...

CVE-2026-72103

In the Linux kernel, the following vulnerability has been resolved: dm: avoid leaking the caller's thread keyring via the table device file The refactoring in commit a28d893eb327 "md: port block device access to file" accidentally causes the caller's thread keyring to be kept alive long beyond th...

CVE-2026-72103

In the Linux kernel, the following vulnerability has been resolved: dm: avoid leaking the caller's thread keyring via the table device file The refactoring in commit a28d893eb327 "md: port block device access to file" accidentally causes the caller's thread keyring to be kept alive long beyond th...

CVE-2026-72103 dm: avoid leaking the caller's thread keyring via the table device file

In the Linux kernel, the following vulnerability has been resolved: dm: avoid leaking the caller's thread keyring via the table device file The refactoring in commit a28d893eb327 "md: port block device access to file" accidentally causes the caller's thread keyring to be kept alive long beyond th...

CVE-2026-72103

CVE-2026-72103 relates to the Linux kernel’s dm-crypt flow. A refactoring bug caused the caller’s thread keyring to be kept alive beyond the caller’s lifetime, making the LUKS volume key linger in memory. As a result, cryptsetup luksSuspend could fail to wipe the key, even though luksOpen passes ...

CVE-2026-72103 dm: avoid leaking the caller's thread keyring via the table device file

In the Linux kernel, the following vulnerability has been resolved: dm: avoid leaking the caller's thread keyring via the table device file The refactoring in commit a28d893eb327 "md: port block device access to file" accidentally causes the caller's thread keyring to be kept alive long beyond th...

EUVD-2026-59061

In the Linux kernel, the following vulnerability has been resolved: dm: avoid leaking the caller's thread keyring via the table device file The refactoring in commit a28d893eb327 "md: port block device access to file" accidentally causes the caller's thread keyring to be kept alive long beyond th...

PT-2026-72292

In the Linux kernel, the following vulnerability has been resolved: dm: avoid leaking the caller's thread keyring via the table device file The refactoring in commit a28d893eb327 "md: port block device access to file" accidentally causes the caller's thread keyring to be kept alive long beyond th...

CVE-2025-59324

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped...

CVE-2025-59327

In CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4, bootxsa.efi fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped...

CVE-2025-59327

CVE-2025-59327 affects CPSD CryptoPro Secure Disk for Bitlocker (before v7.7.4). The bootxsa.efi component fails to properly validate LUKS encryption, and if encryption is present, all CryptoPro file integrity checks are skipped. This may impair detection of integrity violations when BitLocker is...

CVE-2025-59324

CVE-2025-59324 affects CPSD CryptoPro Secure Disk for Bitlocker prior to v7.7.4. The vulnerability is that the component fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped. This can undermine integrity verification for protect...

PT-2026-71072

Name of the Vulnerable Software and Affected Versions CryptoPro Secure Disk for Bitlocker versions prior to 7.7.4 Description The software fails to properly validate LUKS Linux Unified Key Setup encryption. When encryption is detected, the system skips all CryptoPro file integrity checks, which a...