sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

sops

SOPS: Secrets OPerationS SOPS is an editor of encrypted files that supports YAML, JSON, ENV, INI and BINARY formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault, HuaweiCloud KMS, age, and PGP. demo .. image:: https://i.imgur.com/X0TM5NI.gif .. image::...

CVE-2020-10759-poc

Summary Exploits CVE-2020-10759 - fwupd PGP signature verification bypass. See https://github.com/justinsteven/advisories/blob/master/2020fwupddanglings3bucketandCVE-2020-10759signatureverificationbypass.md for more details. Requirements Note: You need to install python3-gpg from your OS vendor...

PGP-Tools

PGP Tools Open-source browser extension for PGP encryption, decryption, and signing. Built with Rust/WebAssembly. Private keys never touch the JS heap unless they have to. Get it here Why PGP Tools? Open source and transparent. Most PGP browser extensions are closed source. You shouldn't trust a...

gasmask

gasmask All in one Information gathering tool - OSINT For a full list of our tools, please visit our websitehttps://www.twelvesec.com/ Written by: maldevel twitter mikismaos xvass ndamoulianos sbrb Dependencies Python 3.x validators python-whois dnspython requests shodan censys mmap pprint...

CVE-2026-2005

CVE-2026-2005 - PostgreSQL pgcrypto Heap Overflow Exploit PoC exploit for a heap-based buffer overflow in the PostgreSQL pgcrypto extension's PGP session key parsing, leading to arbitrary memory read/write and privilege escalation to superuser. For full technical details, see the Zeroday Cloud...

pgpdump

pgpdump: a PGP packet visualizer Kazu Yamamoto [email protected] August 16, 2010 Overview pgpdump is a PGP packet visualizer which displays the packet format of OpenPGP RFC 4880 and PGP version 2 RFC 1991. Here is an example: root@kitploit: % pgpdump test/sig1 Old: Marker Packettag 103 bytes...

OTRS-4.0.1-6.0.1-Remote-Command-Execution

OTRS-4.0.1-6.0.1 Remote Command Execution This exploit is developed based on https://www.exploit-db.com/exploits/43853 It will perform the authentication against OTRS panel and provide a reverse shell. Usage: python3 CVE-2017-16921.py CVE-2017-16921: In OTRS 6.0.x up to and including 6.0.1, OTRS...

roca

ROCA detection tool This tool is related to ACM CCS 2017 conference paper 124 Return of the Coppersmith’s Attack: Practical Factorization of Widely Used RSA Moduli. It enables you to test public RSA keys for a presence of the described vulnerability. Update 4.11.2017 : Python 2.7, 3.4+ supported...

qubes-secpack

Paquete de seguridad de Qubes qubes-secpack El paquete de seguridad de Qubes qubes-secpack es un repositorio git que contiene información relacionada con la seguridad del Proyecto Qubes OS. Incluye lo siguiente: Claves PGP de Qubes keys/ Boletines de seguridad de Qubes QSBs/ Canarios de Qubes...

disclosures

Cylance 漏洞研究 - 披露仓库 此仓库用于存放 Cylance 漏洞研究团队的所有公开漏洞披露。 我们的漏洞研究团队电子邮件的公钥如下： root@kitploit: -----BEGIN PGP PUBLIC KEY BLOCK----- mQINBFefjgEBEADU4TbsgjzHzlBp3OFrSP8imXtlEonjRxk+J3SKdtro5WOWPyBe TLWA/BzLeBNgpWhBMYGmqE90quw3Arbl5B2P5RE35lW0V742VD+BGtx9dkfTuLvk...

CVE-2026-2005

CVE-2026-2005 — PostgreSQL pgcrypto Heap Buffer Overflow Target commit: 4b324845ba5d24682b9b3708a769f00d160afbd7 PostgreSQL 18.1 — vulnerable Summary Field| Detail ---|--- CVE| CVE-2026-2005 Type| Heap buffer overflow Component| contrib/pgcrypto/pgp-pubdec.c — pgpparsepubencsesskey Impact| RCE as...

EulerOS 2.0 SP10 : libsolv (EulerOS-SA-2026-3700)

According to the versions of the libsolv packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handlin...

EulerOS 2.0 SP15 : libsolv (EulerOS-SA-2026-3784)

According to the versions of the libsolv packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handlin...

EulerOS 2.0 SP10 : libsolv (EulerOS-SA-2026-3748)

According to the versions of the libsolv packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handlin...

CVE-2026-92914

AVideo LoginControl contains an authentication bypass vulnerability in the PGP second factor verification that compares challenge responses using loose equality against an uninitialized session variable. Attackers with a victim's password can bypass the second factor by sending a parameter-less G...

EUVD-2026-81436

AVideo LoginControl contains an authentication bypass vulnerability in the PGP second factor verification that compares challenge responses using loose equality against an uninitialized session variable. Attackers with a victim's password can bypass the second factor by sending a parameter-less G...

EulerOS 2.0 SP15 : libsolv (EulerOS-SA-2026-3809)

According to the versions of the libsolv packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect length handlin...

CVE-2026-42784

A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an...

Dark_Ledger

暗黑账本 本仓库作为暗网市场信息的存档，包括： 供应商列表 供应商 PGP 密钥 商品列表及描述 市场结构及其他相关数据 CDN 如果你想从 Gwern.net 下载 “暗网市场档案” ，但发现现有选项（rsync 和 torrent）速度太慢，你可以直接从我的 CDN 下载： 🔗 DarkWebInformer CDN 这提供了比 Gwern 的选项更快、更可靠的替代方案。 目的 本项目旨在保存暗网市场数据，用于研究、情报收集和历史参考。所有数据均来自公开来源，仅供信息参考之用。 免责声明 本仓库仅用于教育和研究目的。不提倡任何非法活动。请负责任地使用这些信息。 贡献...