CVE-2023-33242

CVE-2023-33242 CVE-2023-33242 PoC The simulated Lindell17 protocol is vulnerable to a bit extraction exploit, allowing an attacker to recover the private key by iteratively extracting individual bits of the key. The protocol is designed to generate ECDSA signatures in a client-server model, with...

certsync

certsync certsync is a new technique in order to dump NTDS remotely, but this time without DRSUAPI : it uses golden certificate and UnPAC the hash. It works in several steps: 1. Dump user list, CA informations and CRL from LDAP 2. Dump CA certificate and private key 3. Forge offline a certificate...

Bluetooth-Attacks-CVE-2025-27840

This paper discusses how an attacker can introduce a hidden list of vulnerabilities through module updates, which can lead to compromise of ESP32 devices and gaining unauthorized access to private keys, affecting billions of devices using this microcontroller. One of the key issues is the...

CVE-2014-2734

CVE-2014-2734 Ruby OpenSSL CA秘密鍵のなりすまし ============= Ruby opensslには、公開鍵が秘密鍵に書き込まれる前に発行され、スクリプトの実行中に再度開かれると、CAの秘密鍵をなりすます脆弱性があります。 PoCスクリプト https://gist.github.com/10446549 Mitre: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2014-2734 SecurityFocus: http://www.securityfocus.com/bid/66956...

RsaCtfTool

RsaCtfTool Herramienta de múltiples ataques RSA que descifra datos a partir de claves públicas débiles y recupera claves privadas. Descripción general Esta herramienta es una utilidad diseñada para descifrar datos a partir de claves públicas débiles e intentar recuperar la clave privada...

CVE-2026-46395-haxcms-hmac-key-leak

CVE-2026-46395 - HAXcms Node.js Private Key Disclosure via Broken HMAC CWE-321 / CWE-200 Proof-of-concept for authorized security testing and research only. The vulnerability described here is fixed in the latest release of HAXcms. This PoC is published so that defenders and researchers can verif...

SSH-Private-Key-Looting-Wordlists

LFI for Lateral Movement? Gain SSH Access? root@kitploit: ?file=../../../../../../../../home/user/.ssh/idrsa ?file=../../../../../../../../home/user/.ssh/idrsa-cert SSH Private Key Looting Wordlists 🔒🗝️ This repository contains a collection of wordlists to aid in locating or brute-forcing SSH...

roca

ROCA detection tool This tool is related to ACM CCS 2017 conference paper 124 Return of the Coppersmith’s Attack: Practical Factorization of Widely Used RSA Moduli. It enables you to test public RSA keys for a presence of the described vulnerability. Update 4.11.2017 : Python 2.7, 3.4+ supported...

curveball

curveball CVE-2020-0601 curveball — Калькулятор альтернативных ключей Сборка Windows Visual Studio 2012 или новее, затем соберите решение. Linux / Unix cc altkey.c -lcrypto -o altkey Использование Использование: altkey ecpubliccertificate.pem ecnewprivatekey.pem Пример root@kitploit:...

JKS-private-key-cracker-hashcat

JKS private key cracker - Nail in the JKS coffin The Java Key Store JKS is the Java way of storing one or several cryptographic private and public keys for asymmetric cryptography in a file. While there are various key store formats, Java and Android still default to the JKS file format. JKS is o...

ForgeCert

ForgeCert ForgeCert uses the BouncyCastle C API and a stolen Certificate Authority CA certificate + private key to forge certificates for arbitrary users capable of authentication to Active Directory. This attack is codified as DPERSIST1 in our "Certified Pre-Owned" whitepaper. This code base was...

WhatsDump

Rewriting entire project. WIP WhatsDump Extract WhatsApp private key from any Android device Android 7+ supported. This tool spawns a clean Android 6 emulator and attempts to register with your number to extract msgstore private key. NOTE: this tool is in beta stage and might not be stable. You'r...

gpg_reaper

GPG Reaper TL;DR: Получение/Кража/Восстановление закрытых ключей GPG из кэша/памяти gpg-agent Этот POC демонстрирует метод получения закрытых ключей GPG из памяти gpg-agent в Windows. Обычно это возможно только в течение 10 минут значение --default-cache-ttl. К сожалению, функция housekeeping...

ed25519-unsafe-libs

ed25519-unsafe-libs Ed25519 に対する二重公開鍵署名関数オラクル攻撃 署名関数の入力として秘密鍵と公開鍵を独立して受け取る公開APIを備えた、潜在的に安全でない ed25519 署名ライブラリのリストです。これらの公開APIを誤用すると、秘密鍵が漏えいする可能性があります。 私たちの分析で対象となったリポジトリのほとんどは、IANIX :: Things that use Ed25519 に掲載されています。 影響を受けるライブラリの数: 45 アナウンス後に問題を修正したライブラリの数: 8 最終更新日: 2023年5月4日 この潜在的なエクスプロイトを実証す...

secret-regex-list

Secret Regex List List of regex for scraping secret API keys and juicy information. You can directly copy this and put into your python code, some regexes might require three quotes or else it will break the code. root@kitploit: "Cloudinary" : "cloudinary://.", "Firebase URL": ".firebaseio.com",...

mallory

mallory HTTP/HTTPS proxy over SSH. Installation Local machine: go install github.com/justmao945/mallory/cmd/mallory@latest Remote server: need our old friend sshd Configuration Config file Default path is $HOME/.config/mallory.json, can be set when start program root@kitploit: mallory -config...

CVE-2022-20866

RSA Key Checker for CVE-2022-20866 A vulnerability in the handling of RSA keys on devices running the Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software could allow an unauthenticated, remote attacker to retrieve the RSA private key. This vulnerability is due to a...

CVE-2022-2274

OpenSSL-src: повреждение кучи в памяти при операции с закрытым ключом RSA : CVE-2022-2274 Сводка OpenSSL-src-rust — это исходный код и логика для сборки OpenSSL из исходников, написанные на языке Rust и упакованные в виде крейта. В настоящее время поддерживаются две ветки, соответствующие двум...

walletool

walletool a tool for reading wallet.dat files A utility for extracting cryptocurrency wallet data from wallet.dat files. To set up the software on Windows or macOS, Windows or Linux? Refer to the manual below. On macOS? Use the DMG file. Make sure Git and Python are available on Windows. Git for...

ecdsa-private-key-recovery

ecdsa-key-recovery Execute ataques de recuperação de chave privada por reutilização de nonce em ECDSA e DSA Uma ferramenta de pesquisa criptográfica para analisar vulnerabilidades em assinaturas Vamos recuperar a chave privada de duas assinaturas que compartilham o mesmo nonce k. Observe como...