vboxdie-cracker

Virtual Box Disk Image Encryption password cracker Requirements 1. PHP = 5.5.0 2. OpenSSL = 1.0.1 XTS support Algorithm description User password is stored using a combination of PBKDF2 and AES-XTS as following shown values are fixed at the moment, but they can be controlled inside the file forma...

private-landing

Private Landing Learn authentication by building it right. Live Demo · Threat Model · Auth Flows · ADRs Demo note: The login endpoint is protected by adaptive PoW challenges — repeated failures return increasing proof-of-work difficulty. Cache-backed rate limiting is implemented and tested but no...

ios_Restriction_PassCode_Crack---Python-version

ios Restriction PassCode Crack -Python version Overview ios Restriction PassCode Cracker , this version of the application is written with Python programming language,which is used to crack the Restriction PassCode of iphone/ipad. iphone/ipad 访问限制密码破解 Methodthe same as C version bruce crack 1 .ge...

steganography

Image Steganography Tool Simple C++ Encryption and Steganography tool that uses Password-Protected-Encryption to secure a file's contents, and then proceeds to embed it insde an image's pixel-data using Least-Significant-Bit encoding. For Linux, MacOS, and Windows systems. Encoding $...

sandy

sandy Copyright 2013 Sandy Written by: Laszlo Toth, Ferenc Spala Description Sandy is an open-source Samsung phone encryption assessment framework. Sandy has different modules that allow you to carry out different attack scenarios against encrypted Samsung phones. For the details check our Derbyc...

hcxtools

hcxtools Небольшой набор инструментов для преобразования пакетов из файлов захвата в хэш-файлы, пригодные для использования с Hashcat или John the Ripper. Эти инструменты на 100% совместимы с Hashcat и John the Ripper и одобрены сообществом Hashcat. Краткое описание Основная цель hcxtools —...

Grafana-CVE-2021-43798

CVE-2021-43798 Grafana Unauthorized arbitrary file reading vulnerability 8.3.1 2021-12-07 Security: Fixes CVE-2021-43798 . For more information, see our blog https://grafana.com/blog/2021/12/07/grafana-8.3.1-8.2.7-8.1.8-and-8.0.7-released-with-high-severity-security-fix/ Example: get db password...

pmkidcracker

PMKID WPA2 Cracker This program is a tool written in Python to recover the pre-shared key of a WPA2 WiFi network without any de-authentication or requiring any clients to be on the network. It targets the weakness of certain access points advertising the PMKID value in EAPOL message 1. Program...

CryptHook

CryptHook CryptHook은 기존 애플리케이션을 대칭 블록 암호화로 보호하는 모듈식 구현체입니다. 네트워크 통신용 기본 시스템 호출인 send/sendto 및 recv/recvfrom을 후킹하는 방식으로 동작합니다. Crypthook은 이러한 시스템 호출에 의존하는 모든 기존 애플리케이션에서 작동합니다. 암호화 CryptHook은 256비트 키를 사용하는 AES GCM 모드를 사용합니다. 키는 PBKDF2를 사용하여 패스프레이즈에서 생성됩니다. IV는 무작위 바이트 데이터로 즉석에서 구성되며, 수신 측에서는 동일한 키...

vboxdie-cracker

Взломщик пароля шифрования образа диска Virtual Box Требования 1. PHP = 5.5.0 2. OpenSSL = 1.0.1 поддержка XTS Описание алгоритма Пароль пользователя хранится с помощью комбинации PBKDF2 и AES-XTS следующим образом приведенные значения фиксированы на данный момент, но их можно контролировать внут...

Grafana-Password-Decryptor

Grafana Password Decryptor Python toolkit for decrypting and cracking Grafana passwords from multiple formats. Coded by: strikoder What Does This Tool Do? Handles two types of Grafana password storage: 🔐 AES-256 Base64 datasource table → Decrypt directly with AESDecrypt.py 🔨 PBKDF2HMACSHA256 user...

Linux Distros Unpatched Vulnerability : CVE-2026-102414

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pbkdf2 through 3.1.6 re-hashes passwords longer than the digest's block size on every iteration in its JavaScript fallback lib/sync.js. A password longer than t...

AlmaLinux 9.2 [TuxCare] Security Update: postgresql-jdbc / postgresql-jdbc-javadoc (ALMALINUX9.2:CLSA-2026:1781092532)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1781092532 advisory. - pgjdbc is an open source postgresql JDBC Driver. From version 42.2.0 to before version 42.7.11, pgjdbc is vulnerable to a client-side denia...

Rocky Linux 9.6 [TuxCare] Security Update: postgresql-jdbc / postgresql-jdbc-javadoc (ALMALINUX9.6:CLSA-2026:1781608329)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1781608329 advisory. - pgjdbc is an open source postgresql JDBC Driver. From version 42.2.0 to before version 42.7.11, pgjdbc is vulnerable to a client-side...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the pbkdf2 function in lib/sync.js, which passes the raw password to createHmac on every PBKDF2 iteration. Because HMAC rehashes any key longer than the digest's block size per RF...

CVE-2026-102414

pbkdf2 through 3.1.6 re-hashes passwords longer than the digest's block size on every iteration in its JavaScript fallback lib/sync.js. A password longer than the block size 64 bytes, or 128 bytes for sha384 and sha512 is passed to HMAC as the key on every iteration, and HMAC hashes such keys in...

DEBIAN-CVE-2026-102414

pbkdf2 through 3.1.6 re-hashes passwords longer than the digest's block size on every iteration in its JavaScript fallback lib/sync.js. A password longer than the block size 64 bytes, or 128 bytes for sha384 and sha512 is passed to HMAC as the key on every iteration, and HMAC hashes such keys in...

UBUNTU-CVE-2026-102414

pbkdf2 through 3.1.6 re-hashes passwords longer than the digest's block size on every iteration in its JavaScript fallback lib/sync.js. A password longer than the block size 64 bytes, or 128 bytes for sha384 and sha512 is passed to HMAC as the key on every iteration, and HMAC hashes such keys in...

CVE-2026-102414 pbkdf2 rehashes long passwords on every iteration, enabling denial of service

pbkdf2 through 3.1.6 re-hashes passwords longer than the digest's block size on every iteration in its JavaScript fallback lib/sync.js. A password longer than the block size 64 bytes, or 128 bytes for sha384 and sha512 is passed to HMAC as the key on every iteration, and HMAC hashes such keys in...

CVE-2026-102414

The pbkdf2 library (versions through 3.1.6 ) contains a vulnerability where passwords exceeding the digest's block size (64 bytes, or 128 bytes for sha384/sha512) are re-hashed on every iteration within the JavaScript fallback (lib/sync.js ). This results in a computational cost of O(iterations ×...