Lucene search
+L

3631 matches found

Kitploit
Kitploit
added 2026/08/31 6:18 p.m.3 views

JKS-private-key-cracker-hashcat

JKS private key cracker - Nail in the JKS coffin The Java Key Store JKS is the Java way of storing one or several cryptographic private and public keys for asymmetric cryptography in a file. While there are various key store formats, Java and Android still default to the JKS file format. JKS is o...

5.8AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/08/31 6:05 p.m.4 views

CVE-2022-20866

RSA Key Checker for CVE-2022-20866 A vulnerability in the handling of RSA keys on devices running the Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software could allow an unauthenticated, remote attacker to retrieve the RSA private key. This vulnerability is due to a...

7.5CVSS7.2AI score0.17313EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 5:10 p.m.3 views

CVE-2024-24919

Intro Simple POC Python script that check & leverage Check Point CVE-2024-24919 vulnerability Wrong Check Point; vulnerable to arbitrary file reading. Requirements Python 3 Pip Required Library/Module Install via PIP requests urllib3 tqdm How To Run root@kitploit: PS C:\ python CVE-2024-24919.py...

8.6CVSS7.3AI score0.99978EPSS
SaveExploits53
Kitploit
Kitploit
added 2026/08/31 4:47 p.m.4 views

gpg_reaper

GPG Reaper TL;DR: Obtener/Robar/Restaurar Claves Privadas GPG de la caché/memoria de gpg-agent Este POC demuestra un método para obtener claves privadas GPG de la memoria de gpg-agent en Windows. Normalmente esto solo debería ser posible dentro de un período de 10 minutos valor de...

5.8AI score
SaveExploits0References7
Kitploit
Kitploit
added 2026/08/31 4:03 p.m.2 views

WhatsDump

Rewriting entire project. WIP WhatsDump Extract WhatsApp private key from any Android device Android 7+ supported. This tool spawns a clean Android 6 emulator and attempts to register with your number to extract msgstore private key. NOTE: this tool is in beta stage and might not be stable. You'r...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/31 4:00 p.m.5 views

RsaCtfTool

RsaCtfTool RSA multi-attack tool that decrypts data from weak public keys and recovers private keys. Overview This tool is a utility designed to decrypt data from weak public keys and attempt to recover the corresponding private key. It offers a comprehensive range of attack options for cracking...

5.7AI score
SaveExploits0References14
Kitploit
Kitploit
added 2026/08/31 2:34 p.m.4 views

CVE-2023-33242

CVE-2023-33242 CVE-2023-33242 PoC The simulated Lindell17 protocol is vulnerable to a bit extraction exploit, allowing an attacker to recover the private key by iteratively extracting individual bits of the key. The protocol is designed to generate ECDSA signatures in a client-server model, with...

9.6CVSS7.4AI score0.01506EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/31 2:16 p.m.84 views

mallory

mallory HTTP/HTTPS proxy over SSH. Installation Local machine: go install github.com/justmao945/mallory/cmd/mallory@latest Remote server: need our old friend sshd Configuration Config file Default path is $HOME/.config/mallory.json, can be set when start program root@kitploit: mallory -config...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 8:16 a.m.34 views

certsync

certsync certsync is a new technique in order to dump NTDS remotely, but this time without DRSUAPI : it uses golden certificate and UnPAC the hash. It works in several steps: 1. Dump user list, CA informations and CRL from LDAP 2. Dump CA certificate and private key 3. Forge offline a certificate...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/08/31 8:13 a.m.3 views

Bluetooth-Attacks-CVE-2025-27840

This paper discusses how an attacker can introduce a hidden list of vulnerabilities through module updates, which can lead to compromise of ESP32 devices and gaining unauthorized access to private keys, affecting billions of devices using this microcontroller. One of the key issues is the...

6.8CVSS6.8AI score0.01341EPSS
SaveExploits1References18
Kitploit
Kitploit
added 2026/08/31 5:59 a.m.4 views

CVE-2014-2734

CVE-2014-2734 Ruby OpenSSL CA Private Key Spoofing ============= Ruby openssl has a vulnerability when a public key is a issued prior writing to private key and is reopened during a script it spoofs a CA private key. PoC script https://gist.github.com/10446549 Mitre:...

5.8CVSS7.2AI score0.05349EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/08/31 5:04 a.m.5 views

CVE-2026-46395-haxcms-hmac-key-leak

CVE-2026-46395 - HAXcms Node.js Private Key Disclosure via Broken HMAC CWE-321 / CWE-200 Proof-of-concept for authorized security testing and research only. The vulnerability described here is fixed in the latest release of HAXcms. This PoC is published so that defenders and researchers can verif...

9.3CVSS5.9AI score0.00295EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/31 3:33 a.m.2 views

SSH-Private-Key-Looting-Wordlists

LFI for Lateral Movement? Gain SSH Access? root@kitploit: ?file=../../../../../../../../home/user/.ssh/idrsa ?file=../../../../../../../../home/user/.ssh/idrsa-cert SSH Private Key Looting Wordlists 🔒🗝️ This repository contains a collection of wordlists to aid in locating or brute-forcing SSH...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/31 3:29 a.m.30 views

roca

ROCA detection tool This tool is related to ACM CCS 2017 conference paper 124 Return of the Coppersmith’s Attack: Practical Factorization of Widely Used RSA Moduli. It enables you to test public RSA keys for a presence of the described vulnerability. Update 4.11.2017 : Python 2.7, 3.4+ supported...

5.8AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/30 9:55 p.m.7 views

curveball

curveball CVE-2020-0601 curveball — Калькулятор альтернативных ключей Сборка Windows Visual Studio 2012 или новее, затем соберите решение. Linux / Unix cc altkey.c -lcrypto -o altkey Использование Использование: altkey ecpubliccertificate.pem ecnewprivatekey.pem Пример root@kitploit:...

8.1CVSS7AI score0.89436EPSS
SaveExploits15
Kitploit
Kitploit
added 2026/08/30 7:54 p.m.3 views

ForgeCert

ForgeCert ForgeCert uses the BouncyCastle C API and a stolen Certificate Authority CA certificate + private key to forge certificates for arbitrary users capable of authentication to Active Directory. This attack is codified as DPERSIST1 in our "Certified Pre-Owned" whitepaper. This code base was...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/30 4:55 p.m.2 views

ed25519-unsafe-libs

ed25519-unsafe-libs Double Public Key Signing Function Oracle Attack on Ed25519 A list of potentially unsafe ed25519 signature libraries that allow a public api where secret and public key can be provided independently as signing function inputs. Misuse of these public apis can result to private...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/30 4:42 p.m.5 views

secret-regex-list

Secret Regex List List of regex for scraping secret API keys and juicy information. You can directly copy this and put into your python code, some regexes might require three quotes or else it will break the code. root@kitploit: "Cloudinary" : "cloudinary://.", "Firebase URL": ".firebaseio.com",...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/30 2:13 p.m.4 views

CVE-2022-2274

Corrupción de Memoria Heap en OpenSSL-src con Operación de Clave Privada RSA : CVE-2022-2274 Resumen OpenSSL-src-rust es un código fuente y lógica para compilar OpenSSL desde el código fuente escrito en Rust y empaquetado como una crate. Actualmente hay dos ramas mantenidas, que corresponden a la...

10CVSS6.9AI score0.4705EPSS
SaveExploits3References9
Kitploit
Kitploit
added 2026/08/30 6:17 a.m.9 views

walletool

walletool a tool for reading wallet.dat files A utility for extracting cryptocurrency wallet data from wallet.dat files. To set up the software on Windows or macOS, Windows or Linux? Refer to the manual below. On macOS? Use the DMG file. Make sure Git and Python are available on Windows. Git for...

5.9AI score
SaveExploits0References1
Rows per page
Query Builder