424 matches found
PanOsExploitMultitool
PanOsExploitMultitool Exploitation and Post-Exploitation Multitool for Palo Alto PAN-OS Systems affected by vulnerabilities CVE-2024-0012 and CVE-2024-9474 During early exploitation of CVE-2024-0012 and CVE-2024-9474's Remote Code Execution vulnerabilities, I acquired a shell and began identifyin...
BSOD_bitlocker_recover
BitLocker VMK Carving Tool This Python script helps you extract potential BitLocker Volume Master Keys VMKs from memory dump files, such as those generated by a Blue Screen of Death BSOD. It's a command-line utility designed to assist in forensic investigations where BitLocker encryption is...
BruteForce-to-KeePass
BruteForce-to-KeePass Este script complementa los resultados obtenidos mediante la herramienta keepass-password-dumper al explotar la vulnerabilidad CVE-2023-32784 que afecta a KeePass. Descripción Este script solicita al usuario introducir una lista de caracteres y un sufijo conocido. A...
hdcp-genkey
Ejemplo de generación de claves HDCP Este script implementa una versión sencilla del algoritmo de generación de claves HDCP en Python utilizando la clave maestra HDCP filtrada que se encuentra en master-key.txt. Usage: generatekey.py options Options: -h, --help show this help message and exit -m...
CYBERDUDEBIVASH-5G-Core-Key-Rotation-Ghost-Admin-Auditor
CYBERDUDEBIVASH Rotación de Claves del Núcleo 5G y Auditor de Ghost Admin v1.1 © 2026 CYBERDUDEBIVASH – Todos los Derechos Reservados Autoridad Global en Seguridad de Redes Privadas y 5G de Confianza Cero Bhubaneswar, Odisha, India Herramienta de grado de producción para detectar y remediar...
keepass_dump
Keepass-Dumper Esta es mi implementación de PoC para CVE-2023-32784 Mi versión es un puerto en Python del PoC de @vdohney junto con algunos cambios y características adicionales. Cambios Un cambio fue usar cadenas conocidas que pueden encontrarse en el archivo de volcado para saltar con mayor...
bitlocker-bypass-research
BitLocker Bypass Research Personal security research project — bypassing BitLocker full disk encryption using CVE-2023-21563 BitPixie. What This Is In October 2025, I did a physical laptop recovery assessment on a corporate laptop with BitLocker enabled. The employee forgot their password and the...
CVE-2023-32784
keepass-dump-masterkey Uso python3 poc.py Vista previa Como recordatorio, el primer carácter no se puede encontrar en el volcado, y para el segundo, el script solo te dará algunas posibilidades. En cualquier caso, te recomendamos ejecutar la fuerza bruta en 2 caracteres con el siguiente script:...
Astra Linux – Vulnerability in LibreOffice
LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passwords are encrypted using a single master key provided by the user. There was a flaw in LibreOffice where the master key was poorly encoded, resulting in a reduction in its entro...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: fscrypt: stopped using the keyring subsystem for fscryptmasterkey. The approach of having fs/crypto/ manage the fscryptmasterkey structures internally as payloads within “struct key” objects contained in a “struct key” keyring...
CVE-2026-57262
A vulnerability has been identified in LOGO! Soft Comfort All versions V9. Affected products use a static, hardcoded AES master key to encrypt project files. This could allow a local attacker to extract the master key from the application files or memory and use it to decrypt project files or...
EUVD-2026-56013
An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to retrieve any contact record via the getcontact Parse cloud function. The function executes with useMasterKey and performs no authentication or authorization checks...
CVE-2026-57262: Use of Hard-coded Cryptographic Key
A vulnerability has been identified in LOGO! Soft Comfort All versions V9. Affected products use a static, hardcoded AES master key to encrypt project files. This could allow a local attacker to extract the master key from the application files or memory and use it to decrypt project files or...
CVE-2026-72691
An authentication bypass vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to mint MASTERKEY-signed file access tokens for arbitrary stored files via the getsignedurl Parse cloud function. The function skips its isAuthenticated check whenever an...
CVE-2026-68148 fscrypt: Add missing superblock check in find_or_insert_direct_key()
In the Linux kernel, the following vulnerability has been resolved: fscrypt: Add missing superblock check in findorinsertdirectkey The legacy 'fscryptdirectkeys' table caches master keys that are used by v1 encryption policies that have FSCRYPTPOLICYFLAGDIRECTKEY. It's just a global table for all...
CVE-2026-72691
OpenSignLabs opensignserver (up to version 2.37.0) has an authentication bypass vulnerability. An unauthenticated remote attacker can mint MASTER_KEY-signed file access tokens for arbitrary stored files via the getsignedurl cloud function. The function bypasses its isAuthenticated check when any ...
EUVD-2026-55531
An authentication bypass vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to mint MASTERKEY-signed file access tokens for arbitrary stored files via the getsignedurl Parse cloud function. The function skips its isAuthenticated check whenever an...
CVE-2026-72691
An authentication bypass vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to mint MASTERKEY-signed file access tokens for arbitrary stored files via the getsignedurl Parse cloud function. The function skips its isAuthenticated check whenever an...
CVE-2026-72689
OpenSignLabs opensignserver prior to 2.37.0 is affected by a Broken Object-Level Authorization issue. The getDocument Parse cloud function fetches documents using useMasterKey, bypassing object ACLs and returning full contract records, including sender and signer PII and a pre-signed document dow...