552 matches found
database-druid
druid 인코딩 java -cp druid-1.1.19.jar com.alibaba.druid.filter.config.ConfigTools 密码 예: java -cp druid-1.1.19.jar com.alibaba.druid.filter.config.ConfigTools jas502n...
CSRF-breach
보안 침해 프로젝트 - 사이트 간 요청 위조 Cross Site Request Forgery Dolibarr 7.0.0은 사이트 간 요청 위조CSRF에 영향을 받습니다. 영향: 악성 HTML이 사용자 비밀번호를 변경하고, 사용자를 비활성화하며, 비밀번호 암호화를 비활성화할 수 있습니다. 구성 요소: 사용자 비밀번호 변경, 사용자 비활성화 및 비밀번호 암호화 기능. 공격 벡터: 관리자가 악성 URL에 접근. 데모 데모 단계 -실행: 환경을 다운로드하려면 'vagrant up'을 실행합니다 당연히 시간이 좀 걸립니다: 최대 몇 시...
stegano
Steganography by bzt Online demo In a nutshell, steganography is the art of hiding messages in another medium in plain sight without people realizing. This implementation reads in images in popular web formats WEBP, PNG, GIF, JPEG, hides the optionally encrypted text in them and saves the result ...
CVE-2022-25012
Argus Surveillance DVR 4.0 - 약한 비밀번호 암호화 CVE-2022-25012 이 약한 비밀번호 암호화 스크립트의 업데이트 버전 Exploit DB 참조: https://www.exploit-db.com/exploits/50130 작성자 참조: https://deathflash1411.github.io/blog/dvr4-hash-crack NIST 참조: https://nvd.nist.gov/vuln/detail/CVE-2022-25012 설명: 저자는 특수 ASCII 문자에 대한 추가 항목을 만들지 않았...
hash-identifier
hash-identifier Программа для идентификации различных типов хэшей, используемых для шифрования данных и особенно паролей. Поддерживаемые форматы шифрования: ADLER-32 CRC-32 CRC-32B CRC-16 CRC-16-CCITT DESUnix FCS-16 GHash-32-3 GHash-32-5 GOST R 34.11-94 Haval-160 Haval-192 110080 ,Haval-224 11408...
gpp-encrypt
gpp-encrypt 설명 이 작은 스크립트는 비밀번호를 gpp cpassword로 암호화합니다. 취약한 랩 AD를 만드는 데 유용합니다. 요구 사항 이 패키지에는 다음이 필요합니다: python3 python3 표준 라이브러리 설치 git clone "https://github.com/mauricelambert/gpp-encrypt.git" cd "gpp-encrypt" python3 -m pip install -r requirements.txt 사용법 명령줄 python3 gpp-encrypt.py Using python...
CVE-2022-25012
CVE-2022-25012 Argus Surveillance DVR v4.0은 취약한 비밀번호 암호화를 사용합니다. 컴파일 gcc pocland.c -o pocland 사용 예시 ./pocland B4A1ECB4F539C48C7357F641C9C49083 참조 CVE-2022-25012 더 많은 PoC는 다음에서 확인 가능: pocland...
CVE-2022-25012-dvr4-weak-password-encryption
This is an improved version of the exploit by deathflash1411 Original exploit: https://www.exploit-db.com/exploits/50130 Improved Features Cracked password is now output as reconstructed password string instead of only output character by character The encrypted password string is now entered as ...
CVE-2022-25012-dvr4-weak-password-encryption — Updated!
This is an improved version of the exploit by deathflash1411 Original exploit: https://www.exploit-db.com/exploits/50130 Improved Features Cracked password is now output as reconstructed password string instead of only output character by character The encrypted password string is now entered as ...
openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap
A flaw was found in the OpenSSL CMS implementation RFC 3211 KEK Unwrap. This vulnerability allows memory corruption, an application level denial of service, or potential execution of attacker-supplied code via crafted CMS messages using password-based encryption PWRI...
Covert Timing Channel
Overview Affected versions of this package are vulnerable to Covert Timing Channel via the authentication process. An attacker can recover user credentials by exploiting timing differences during MD5-hashed password comparison. This is only exploitable if the database contains MD5-hashed password...
CVE-2026-5363 Use of weak cryptographic key in TP-Link Archer C7
Inadequate Encryption Strength vulnerability in TP-Link Archer C7 v5 and v5.8 uhttpd modules allows Password Recovery Exploitation. The web interface encrypts the admin password client-side using RSA-1024 before sending it to the router during login. An adjacent attacker with the ability to...
CVE-2026-30785
RustDesk Client (through version 1.4.5) is affected by CVE-2026-30785 due to a vulnerability described as Prototype Pollution and weak password hashing in the password_security, config, and machine-uid-related code paths (hbb_common and related modules). The issue can allow Retrieve Embedded Sens...
CVE-2026-30785 RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305)
Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution', Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-client RustDesk Client rustdesk, hbbcommon on Windows, MacOS, Linux Password security module, config encryption, machine U...
CVE-2026-30785 RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305)
Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution', Use of Password Hash With Insufficient Computational Effort vulnerability in rustdesk-client RustDesk Client rustdesk, hbbcommon on Windows, MacOS, Linux Password security module, config encryption, machine U...
Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is affected by a vulnerability that could provide weaker than expected security (CVE-2025-13333)
Summary IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is affected by a vulnerability that could provide weaker than expected security when enabling AES-256 password encryption. Vulnerability Details Refer to the security bulletins listed in the...
openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap
A flaw was found in the OpenSSL CMS implementation RFC 3211 KEK Unwrap. This vulnerability allows memory corruption, an application level denial of service, or potential execution of attacker-supplied code via crafted CMS messages using password-based encryption PWRI...
CVE-2024-52334
A vulnerability has been identified in syngo.plaza VB30E All versions VB30EHF07. The affected application does not encrypt the passwords properly. This could allow an attacker to recover the original passwords and might gain unauthorized access...
CVE-2024-52334
A vulnerability has been identified in syngo.plaza VB30E All versions VB30EHF07. The affected application does not encrypt the passwords properly. This could allow an attacker to recover the original passwords and might gain unauthorized access...