steganography

Bild-Steganographie-Tool Einfaches C++ Verschlüsselungs- und Steganographie -Tool, das passwortgeschützte Verschlüsselung verwendet, um den Inhalt einer Datei zu sichern, und diesen dann mithilfe der Least-Significant-Bit-Kodierung in die Pixeldaten eines Bildes einbettet. Für Linux-, MacOS- und...

hcxtools

hcxtools Eine kleine Sammlung von Werkzeugen, um Pakete aus Mitschriften in Hash-Dateien zur Verwendung mit Hashcat oder John the Ripper zu konvertieren. Diese Werkzeuge sind 100% kompatibel mit Hashcat und John the Ripper und werden von Hashcat empfohlen. Kurzbeschreibung Der Hauptzweck von...

ROOT-APP-NPM-CVE-2025-6545 CVE-2025-6545 in pbkdf2 - Patched by Root

Root has patched CVE-2025-6545 in the pbkdf2 package for Root:npm. Multiple fixed versions available...

CryptHook

CryptHook CryptHook ist eine modulare Implementierung zur Sicherung bestehender Anwendungen mit symmetrischer Blockchiffrierung. Sie funktioniert, indem sie die grundlegenden Systemaufrufe für die Netzwerkkommunikation send/sendto und recv/recvfrom hookt. Crypthook funktioniert mit jeder...

vboxdie-cracker

Virtual Box Disk Image Encryption password cracker Requirements 1. PHP = 5.5.0 2. OpenSSL = 1.0.1 XTS support Algorithm description User password is stored using a combination of PBKDF2 and AES-XTS as following shown values are fixed at the moment, but they can be controlled inside the file forma...

vboxdie-cracker

Quebrador de senha de criptografia de imagem de disco do Virtual Box Requisitos 1. PHP = 5.5.0 2. OpenSSL = 1.0.1 suporte a XTS Descrição do algoritmo A senha do usuário é armazenada usando uma combinação de PBKDF2 e AES-XTS da seguinte forma os valores mostrados são fixos no momento, mas podem s...

sandy

sandy Copyright 2013 Sandy Written by: Laszlo Toth, Ferenc Spala Description Sandy is an open-source Samsung phone encryption assessment framework. Sandy has different modules that allow you to carry out different attack scenarios against encrypted Samsung phones. For the details check our Derbyc...

private-landing

Private Landing Lerne Authentifizierung, indem du sie richtig implementierst. Live Demo · Threat Model · Auth Flows · ADRs Demo-Hinweis: Der Login-Endpunkt ist durch adaptive PoW-Herausforderungen geschützt – wiederholte Fehlversuche erhöhen den Proof-of-Work-Schwierigkeitsgrad. Cache-gestütztes...

ios_Restriction_PassCode_Crack---Python-version

iOS-Einschränkungscode-Knacker - Python-Version Übersicht iOS-Einschränkungscode-Knacker , diese Version der Anwendung ist in der Programmiersprache Python geschrieben und wird verwendet, um den Einschränkungscode von iPhone/iPad zu knacken. iPhone/iPad Einschränkungscode-Knacker Methode wie in d...

Grafana-CVE-2021-43798

CVE-2021-43798 Vulnerabilità di lettura arbitraria di file non autorizzata in Grafana 8.3.1 2021-12-07 Sicurezza: Risolve CVE-2021-43798. Per maggiori informazioni, consulta il nostro blog...

Grafana-Password-Decryptor

Decifratore di Password Grafana Toolkit Python per decifrare e craccare le password di Grafana da più formati. Realizzato da: strikoder Cosa Fa Questo Strumento? Gestisce due tipi di archiviazione delle password di Grafana: 🔐 AES-256 Base64 tabella datasource → Decifra direttamente con...

CVE-2025-11187

CVE-2025-11187 Stack buffer overflow in PKCS12 PBMAC1 PBKDF2 keylength OpenSSL 3.X Ho trovato questo stack buffer overflow circa un anno fa, si è rivelato un duplicato CVE-2025-11187 Il problema si verifica nella gestione di PKCS PBMAC1 di libcrypto quando il keylength di PBKDF2 è controllato...

pmkidcracker

PMKID WPA2 Cracker This program is a tool written in Python to recover the pre-shared key of a WPA2 WiFi network without any de-authentication or requiring any clients to be on the network. It targets the weakness of certain access points advertising the PMKID value in EAPOL message 1. Program...

jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication

A flaw was found in pgjdbc, an open-source PostgreSQL JDBC Driver. A malicious server can exploit this vulnerability by instructing the driver to perform SCRAM-SHA-256 Salted Challenge Response Authentication Mechanism Secure Hash Algorithm 256 authentication with an excessively large iteration...

GHSA-5X78-73V4-XG6W postgres-protocol: Unbounded SCRAM iteration count allows a malicious server to cause CPU-exhaustion denial of service

A malicious, compromised, or man-in-the-middle server can supply an arbitrarily large SCRAM-SHA-256 PBKDF2 iteration count during authentication. The client runs it inline with no upper bound, pinning a tokio worker thread for minutes per connection, possibly stalling the whole async runtime...

CVE-2026-53762

VeraCrypt provides disk encryption with strong security based on TrueCrypt. Prior to 1.26.29, non-default builds created with WOLFCRYPT=1 and WOLFCRYPTBACKEND route SHA-256 and SHA-512 volume-header key derivation through derivekeysha256 and derivekeysha512 in src/Crypto/wolfCrypt.c, where the...

CVE-2026-53762

VeraCrypt non-default builds compiled with WOLFCRYPT=1 and WOLFCRYPT_BACKEND contain a key-derivation flaw in src/Crypto/wolfCrypt.c. The functions derive_key_sha256 and derive_key_sha512 discard the configured iteration count and substitute wc_HKDF for PBKDF2-HMAC , meaning increasing the PIM or...

CVE-2026-53762 VeraCryp: wolfCrypt backend bypasses VeraCrypt PBKDF2 iteration count (non-default WOLFCRYPT=1 builds)

VeraCrypt provides disk encryption with strong security based on TrueCrypt. Prior to 1.26.29, non-default builds created with WOLFCRYPT=1 and WOLFCRYPTBACKEND route SHA-256 and SHA-512 volume-header key derivation through derivekeysha256 and derivekeysha512 in src/Crypto/wolfCrypt.c, where the...

CVE-2026-53762 VeraCryp: wolfCrypt backend bypasses VeraCrypt PBKDF2 iteration count (non-default WOLFCRYPT=1 builds)

VeraCrypt provides disk encryption with strong security based on TrueCrypt. Prior to 1.26.29, non-default builds created with WOLFCRYPT=1 and WOLFCRYPTBACKEND route SHA-256 and SHA-512 volume-header key derivation through derivekeysha256 and derivekeysha512 in src/Crypto/wolfCrypt.c, where the...

GO-2026-6168 WITHDRAWN: Unbounded iteration count causes CPU denial of service in github.com/lib/pq/scram

This report has been withdrawn with reason: "Report mistakenly added without having CVE / GHSA associated". The SCRAM client in github.com/lib/pq/scram accepts an attacker-controlled iteration count with no upper bound and immediately performs that many PBKDF2-style HMAC rounds. A PostgreSQL...