steganography

Image Steganography Tool Simple C++ Encryption and Steganography tool that uses Password-Protected-Encryption to secure a file's contents, and then proceeds to embed it insde an image's pixel-data using Least-Significant-Bit encoding. For Linux, MacOS, and Windows systems. Encoding root@kitploit:...

private-landing

Private Landing Learn authentication by building it right. Live Demo · Threat Model · Auth Flows · ADRs Demo note: The login endpoint is protected by adaptive PoW challenges — repeated failures return increasing proof-of-work difficulty. Cache-backed rate limiting is implemented and tested but no...

hcxtools

hcxtools A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper. These tools are 100% compatible with Hashcat and John the Ripper and are endorsed by Hashcat. Brief Description The main purpose of hcxtools is to detect weak points within...

pmkidcracker

PMKID WPA2 Cracker This program is a tool written in Python to recover the pre-shared key of a WPA2 WiFi network without any de-authentication or requiring any clients to be on the network. It targets the weakness of certain access points advertising the PMKID value in EAPOL message 1. Program...

CryptHook

CryptHook CryptHook 是一个模块化实现，可通过对称分组密码加密保护现有应用程序。它通过挂钩网络通信的基础系统调用 send/sendto 和 recv/recvfrom 来工作。Crypthook 适用于任何依赖这些系统调用的现有应用程序。 加密 CryptHook 依赖采用 256 位密钥的 AES-GCM 模式。密钥通过 PBKDF2 从口令生成。IV 使用随机数据字节即时构建，并利用相同的密钥派生技术在接收端重建初始化向量，以将开销保持在最低限度。每个数据包的认证也会得到验证。 免责声明...

vboxdie-cracker

Virtual Box ディスクイメージ暗号化パスワードクラッカー 必要条件 1. PHP = 5.5.0 2. OpenSSL = 1.0.1 XTS サポート アルゴリズムの説明 ユーザーパスワードは、PBKDF2 と AES-XTS の組み合わせで保存されます。以下に示します（現在表示されている値は固定ですが、ファイルフォーマット内で制御可能です）。 root@kitploit: 32 for AES-XTS128-PLAIN64 64 for AES-XTS256-PLAIN64 AESkeylength = 32 | 64 AES-password =...

vboxdie-cracker

Virtual Box Disk Image Encryption password cracker Requirements 1. PHP = 5.5.0 2. OpenSSL = 1.0.1 XTS support Algorithm description User password is stored using a combination of PBKDF2 and AES-XTS as following shown values are fixed at the moment, but they can be controlled inside the file forma...

Grafana-CVE-2021-43798

CVE-2021-43798 Grafana の未認証の任意ファイル読み取り脆弱性 8.3.1 2021-12-07 セキュリティ: CVE-2021-43798 を修正しました。詳細については、ブログをご覧ください https://grafana.com/blog/2021/12/07/grafana-8.3.1-8.2.7-8.1.8-and-8.0.7-released-with-high-severity-security-fix/ 例: DBパスワードを取得 /var/lib/grafana/grafana.db ソルト付きパスワードの平文検証...

ios_Restriction_PassCode_Crack---Python-version

ios Restriction PassCode Crack -Python version Overview ios Restriction PassCode Cracker , this version of the application is written with Python programming language,which is used to crack the Restriction PassCode of iphone/ipad. iphone/ipad 访问限制密码破解 Methodthe same as C version bruce crack 1 .ge...

sandy

sandy Copyright 2013 Sandy Written by: Laszlo Toth, Ferenc Spala Description Sandy is an open-source Samsung phone encryption assessment framework. Sandy has different modules that allow you to carry out different attack scenarios against encrypted Samsung phones. For the details check our Derbyc...

CVE-2025-11187

CVE-2025-11187 PKCS12 PBMAC1 PBKDF2 keylength 中的栈缓冲区溢出（OpenSSL 3.X） 大约一年前发现了这个栈缓冲区溢出，后来发现它是重复的（CVE-2025-11187） 问题发生在 libcrypto 的 PKCS PBMAC1 处理中，当 PBKDF2 的 keylength 受攻击者控制时，会在 pkcs12genmac（crypto/pkcs12/p12mutl.c）中对固定栈缓冲区进行写入越界（已在 OpenSSL 3.6.0 上测试） 组件：libcrypto（PKCS12 MAC）、providers（PBKDF2）...

Steganography-Online-Codec-JavaScript

Steganography Online Codec SDK for JavaScript & NPM Steganographic Online Codec 允许您使用 AES 加密算法（采用 256 位 PBKDF2 派生密钥）将密码加密的消息隐藏在图像和照片中。 您可以免费使用它，访问地址： https://www.pelock.com/products/steganography-online-codec 该 SDK 通过 WebAPI 接口提供对编解码器及其编码和解码功能的编程访问。 什么是隐写术及其工作原理？...

jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication

A flaw was found in pgjdbc, an open-source PostgreSQL JDBC Driver. A malicious server can exploit this vulnerability by instructing the driver to perform SCRAM-SHA-256 Salted Challenge Response Authentication Mechanism Secure Hash Algorithm 256 authentication with an excessively large iteration...

jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication

A flaw was found in pgjdbc, an open-source PostgreSQL JDBC Driver. A malicious server can exploit this vulnerability by instructing the driver to perform SCRAM-SHA-256 Salted Challenge Response Authentication Mechanism Secure Hash Algorithm 256 authentication with an excessively large iteration...

Grafana-Password-Decryptor

Grafana 密码解密工具 用于从多种格式解密和破解 Grafana 密码的 Python 工具包。 代码作者：strikoder 该工具能做什么？ 处理 两种类型 的 Grafana 密码存储： 🔐 AES-256 Base64 （datasource 表）→ 使用 AESDecrypt.py 直接解密 🔨 PBKDF2HMACSHA256 （user 表）→ 使用 grafana2hashcat.py 转换为 Hashcat 格式 完美适用于 CVE-2021-43798 路径遍历漏洞的后利用阶段。 什么是 CVE-2021-43798？ 一个存在于 Grafana...

CVE-2026-81718

opensslencrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-force wrapping password...

CVE-2026-81718 openssl_encrypt before 1.4.9 Weak Cryptographic Parameters

opensslencrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-force wrapping password...

EUVD-2026-67068

opensslencrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-force wrapping password...

CVE-2026-81718

openssl_encrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 key derivation, employing only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-f...

CVE-2026-81718 openssl_encrypt before 1.4.9 Weak Cryptographic Parameters

opensslencrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password verification. Attackers who obtain keyfiles or encrypted files can brute-force wrapping password...