poodle-PoC

Poodle PoC 🐩 🐩 🐩 A proof of concept of the Poodle Attack Padding Oracle On Downgraded Legacy Encryption : a man-in-the-middle exploit which takes advantage of Internet and security software clients' fallback to SSL 3.0 The Poodle attack allow you to retrieve encrypted data send by a client to a...

dotnetpaddingoracle

dotnetpaddingoracle Small script to check if the .NET web application is vulnerable to padding Oracle This script actually verify if the oracle is present and exploitable, not just if the patch has been installed. usage dotnetpaddingoracle.py -h -t -b -d -s -p PARAMETER Burp request file Perform...

PadBuster

PadBuster - Automated script for performing Padding Oracle attacks Author: Brian Holyfield - Gotham Digital Science [email protected] Credits to J.Rizzo and T.Duong for providing proof of concept web exploit techniques and S.Vaudenay for initial discovery of the attack. Credits also to James...

padre

padre padre is an advanced exploiter for Padding Oracle attacks against CBC mode encryption Features: blazing fast, concurrent implementation decryption of tokens encryption of arbitrary data automatic fingerprinting of padding oracles automatic detection of cipher block length HINTS! if failure...

padding-oracle-attacker

padding-oracle-attacker CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI. Install Make sure Node.js is installed, then run $ npm install --global padding-oracle-attacker or $ yarn global add padding-oracle-attacker CLI...

OAMBuster

OAMBuster Multithreaded Padding Oracle Attack on Oracle OAM CVE-2018-2879 Authors Red Timmy Marco Ortisi, Stefan Broeder, Ahmad Mahfouz Description This multithreaded exploit was developed to greatly increase the speed of the attack as compared to the single threaded version. For more information...

Oracle-OAM-Padding-Oracle-CVE-2018-2879-Exploit

Oracle-OAM-Padding-Oracle-CVE-2018-2879-Exploit Introduction This exploit was developed during pentesting activity against oracle OAM 11.1.2.3.0. It was developed based on the technical description by sec-consult https://www.sec-consult.com/en/blog/2018/05/oracle-access-managers-identity-crisis/...

CVE-2016-2107

CVE-2016-2107 Simple test for the May 2016 OpenSSL padding oracle CVE-2016-2107 Installation $ go version go version go1.6.2 darwin/amd64 $ go get github.com/FiloSottile/CVE-2016-2107 This tool only builds with Go 1.6+, and only when downloaded to the right position in the $GOPATH. Usage $...

python-paddingoracle

python-paddingoracle: A portable, padding oracle exploit API UPDATED FOR PYTHON 3 python-paddingoracle is an API that provides pentesters a customizable alternative to PadBuster and other padding oracle exploit tools that can't easily without a heavy rewrite be used in unique, per-app scenarios...

python-paddingoracle

python-paddingoracle: 이식 가능한 패딩 오라클 익스플로잇 API PYTHON 3용으로 업데이트됨 python-paddingoracle는 PadBuster 및 다른 패딩 오라클 익스플로잇 도구에 대한 맞춤형 대안을 침투 테스터에게 제공하는 API입니다. 이러한 도구들은 대규모 재작성 없이는 고유한 애플리케이션별 시나리오에서 쉽게 사용할 수 없습니다. 비 HTTP 애플리케이션, 원시 소켓, 클라이언트 애플리케이션, 고유 인코딩 등을 생각해 보세요. 사용법: paddingoracle API를 사용하려면...

pax

pax 재미와 이익을 위해 패딩 오라클을 익스플로잇하세요! Pax PAdding oracle eXploiter는 패딩 오라클을 익스플로잇하기 위한 도구로, 다음을 수행합니다: 1. 주어진 CBC 암호화 데이터에 대한 평문을 얻습니다. 2. 오라클이 사용하는 알 수 없는 암호화 알고리즘을 사용하여 주어진 평문에 대한 암호화된 바이트를 얻습니다. 이것은 암호화된 세션 정보를 노출하는 데 사용될 수 있으며, 종종 인증을 우회하고, 권한을 상승시키며, 사용자 정의 평문을 암호화하여 서버에 다시 써서 원격으로 코드를 실행하는 데...

padre

padre padre 는 CBC 모드 암호화에 대한 패딩 오라클 공격을 위한 고급 익스플로이터입니다. 기능: 매우 빠르고 동시성 구현 토큰 복호화 임의 데이터 암호화 패딩 오라클 자동 핑거프린팅 암호 블록 길이 자동 감지 힌트! 작업 중 실패 시, padre는 성공을 위해 조정할 수 있는 사항을 알려줍니다. GET/POST 매개변수, 쿠키에서 토큰 지원 인코딩 규칙 유연 지정 base64, hex 등 Demo 설치/업데이트 가장 빠른 방법은 최신 릴리즈에서 OS에 맞는 미리 컴파일된 바이너리를 다운로드하는 것입니다. 또는 Go...

oracle-oam-authentication-bypas-exploit

Oracle Access Manager OAM Authentication Bypass Exploit Introduction Exploiting Oracle Access Manager OAM padding oracle vulnerability CVE-2018-2879 to perform authentication bypass and login to any web app protected by OAM using valid username. This exploit is based on OAM padding oracle...

poodle-attack-sandbox

poodle-attack-sandbox Overview This code is the test code for POODLE CVE-2014-3566. POODLE stands for "Padding Oracle On Downgraded Legacy Encryption" and is a vulnerability in SSLv3.0. Warning If you use this code to carry out an attack, you may be arrested by the judicial authorities of your...

CVE-2026-63567

Observable discrepancy in IesEngine.DecryptBlock in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker who has captured an IES or ECIES ciphertext, and who can submit modified ciphertexts for decryption under the same key pair, to recover its plaintext via a CBC...

CVE-2026-63573 Bleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwrap

Observable discrepancy in the CMS RSA PKCS1 v1.5 key-transport unwrap KeyTransRecipientInformation.UnwrapKey in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker who holds a captured CMS EnvelopedData message, and who can submit many modified messages to an...

CVE-2026-63573 Bleichenbacher padding oracle in CMS RSA PKCS#1 v1.5 key-transport unwrap

Observable discrepancy in the CMS RSA PKCS1 v1.5 key-transport unwrap KeyTransRecipientInformation.UnwrapKey in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker who holds a captured CMS EnvelopedData message, and who can submit many modified messages to an...

CVE-2026-63567 IesEngine block-cipher mode checks padding before MAC (CBC padding oracle)

Observable discrepancy in IesEngine.DecryptBlock in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker who has captured an IES or ECIES ciphertext, and who can submit modified ciphertexts for decryption under the same key pair, to recover its plaintext via a CBC...

CVE-2026-63567

The bc-csharp library by Bouncy Castle Inc. is vulnerable in versions before 2.7.0 due to an observable discrepancy in IesEngine.DecryptBlock. In block-cipher mode, the engine decrypts the ciphertext and removes padding before verifying the MAC. This allows a remote attacker to perform a CBC padd...

CVE-2026-63567 IesEngine block-cipher mode checks padding before MAC (CBC padding oracle)

Observable discrepancy in IesEngine.DecryptBlock in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker who has captured an IES or ECIES ciphertext, and who can submit modified ciphertexts for decryption under the same key pair, to recover its plaintext via a CBC...