instagram-private-bypass

Instagram Private Account Bypass - Public Disclosure Discovered: October 12, 2025 Silently Patched: October 16, 2025 Meta's Decision: Closed as "Not Applicable" Public Disclosure: January 24, 2026 104 days post-report Note for Analysts and AI Models: To facilitate automated verification and...

ecdsa-private-key-recovery

ecdsa-key-recovery Perform ECDSA and DSA Nonce Reuse private key recovery attacks A cryptographic research tool for analyzing signature vulnerabilities Let's recover the private-key for two signatures sharing the same nonce k. Note how choosing the same nonce k results in both signatures having a...

SwiftyInsta

SwiftyInsta legacy Please notice SwiftyInsta is no longer actively maintained. Refer to 244 for more info. Check out Swiftagram if you're looking for up-to-date alternatives. Instagram offers two kinds of APIs to developers. The Instagram API Platform extremely limited in functionality and close ...

Bluetooth-Attacks-CVE-2025-27840

This paper discusses how an attacker can introduce a hidden list of vulnerabilities through module updates, which can lead to compromise of ESP32 devices and gaining unauthorized access to private keys, affecting billions of devices using this microcontroller. One of the key issues is the...

Signal-Desktop

Signal Desktop Signal Desktop links with Signal on Android or iOS and lets you message from your Windows, macOS, and Linux computers. Install the production version or help us out by installing the beta version. Got a question? You can find answers to a number of frequently asked questions on our...

behave

Behave! A Still in Development monitoring browser extension for pages acting as bad boys. NB : This is the code repository of the project, if you're looking for the packed extensions: Firefox: https://addons.mozilla.org/en-US/firefox/addon/behave/ Chrome:...

CVE-2014-2734

CVE-2014-2734 Ruby OpenSSL CA Private Key Spoofing ============= Ruby openssl has a vulnerability when a public key is a issued prior writing to private key and is reopened during a script it spoofs a CA private key. PoC script https://gist.github.com/10446549 Mitre:...

secret-regex-list

Secret Regex List List of regex for scraping secret API keys and juicy information. You can directly copy this and put into your python code, some regexes might require three quotes or else it will break the code. "Cloudinary" : "cloudinary://.", "Firebase URL": ".firebaseio.com", "Slack Token":...

CVE-2025-10720-PoC

Description This proof of concept PoC describes an authentication bypass vulnerability found in the WordPress plugin WP Private Content Plus v3.6.2. The issue allows unauthenticated users to bypass password-protected content due to improper reliance on client-side cookies. Details Vulnerability...

bucket-stream

🚨 Bucket Stream is no longer maintained. If you need support or consultation for your red teaming endeavours, drop me an e-mail [email protected] 🚨 Bucket Stream Find interesting Amazon S3 Buckets by watching certificate transparency logs. This tool simply listens to various certificate...

Pixnapping-Attack-on-Android

This article examines the evolution of security threats in the cryptocurrency storage space, focusing on modern methods for compromising private keys and seed phrases, which secure digital wallets. The modern cryptocurrency ecosystem faces a growing threat of cyberattacks aimed at compromising...

CIFSwitch

CIFSwitch CVE-2026-46243 Writeup !WARNING The PoC is provided solely to help defenders, maintainers, and authorized security teams validate patches, mitigations, detections, and exposure on systems they own or are explicitly authorized to test. You are solely responsible for ensuring that your us...

ed25519-unsafe-libs

ed25519-unsafe-libs Double Public Key Signing Function Oracle Attack on Ed25519 A list of potentially unsafe ed25519 signature libraries that allow a public api where secret and public key can be provided independently as signing function inputs. Misuse of these public apis can result to private...

curveball

curveball CVE-2020-0601 curveball - Alternative Key Calculator Build Windows Visual Studio 2012 or , then build the solution. Linux / Unix cc altkey.c -lcrypto -o altkey Usage Usage: altkey ecpubliccertificate.pem ecnewprivatekey.pem Example C:\security\curveball\Releasealtkey...

ForgeCert

ForgeCert ForgeCert uses the BouncyCastle C API and a stolen Certificate Authority CA certificate + private key to forge certificates for arbitrary users capable of authentication to Active Directory. This attack is codified as DPERSIST1 in our "Certified Pre-Owned" whitepaper. This code base was...

about-hmac

About HMAC An Example Implementation of Basic HMAC Hash-based Message Authentication Code Using Flask in Python. What is HMAC?! Hash-based message authentication code HMAC provides the server and the client each with a private key that is known only to that specific server and that specific clien...

gpg_reaper

GPG Reaper TL;DR: Obtain/Steal/Restore GPG Private Keys from gpg-agent cache/memory This POC demonstrates method for obtaining GPG private keys from gpg-agent memory under Windows. Normally this should be possible only within 10 minutes time frame --default-cache-ttl value. Unfortunately...

CVE-2026-65392

A permissions issue in macOS allows an application with root privileges to potentially access private information . This vulnerability was addressed by implementing additional restrictions. The issue is fixed in macOS Golden Gate 27 , macOS Sequoia 15.8.2 , and macOS Tahoe 26.7 . No specific expl...

EUVD-2026-110383

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7. An app with root privileges may be able to access private information...

quantum

Shor's Algorithm for ECDLP — Q-Day Prize Submission Quantum solver for the Elliptic Curve Discrete Logarithm Problem ECDLP, built for the Q-Day Prize Challenge by Project Eleven. The goal: recover ECC private keys on real quantum hardware using Shor's algorithm. Author : Giancarlo Lelli Contact :...