cve-2021-40444-analysis

CVE-2021-40444 Analysis This repository contains the deobfuscated exploit code for CVE-2021-40444 as recovered by Immersive Labs during their analysis. This repository supports the blog article that can be found at https://immersivelabs.com/resources/blog/analyzing-the-cve-2021-40444-exploit/...

ESLockDecryptor

ESLockDecryptor ESLockDecryptor is a command-line tool designed to recover and decrypt files encrypted by ES File Explorer files with the .eslock extension. It supports processing both individual files and entire directories. !WARNING FOR LEGAL USE ONLY! This software is designed for educational...

CVE-2023-0748

CVE-2023-0748 BTCPayServer 1.7.5 and lower version is vulnerable for Open Redirection attack. Step to Reproduce 1. Login your account on https://mainnet.demo.btcpayserver.org/login 2. Then Click the link below...

drupal-exploit

drupal-exploit CVE-2018-7600 Este script explotará la vulnerabilidad CVE-2018-7600 en Drupal 7 : drupal.py https://drupaldomain/drupal/ uid=33www-data gid=33www-data groups=33www-data https://nvd.nist.gov/vuln/detail/CVE-2018-7600 https://www.drupal.org/sa-core-2018-002...

JWT_Brute

JWTBrute Example eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VyIjoibmFuYSIsImFjdGlvbiI6InVwbG9hZCJ9.56wwCrB9tIgmUnYpLPxkO8GYj1soCjuuskTlbHGg8 root@kitploit: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9 base64 decode "alg":"HS256","typ":"JWT" eyJ1c2VyIjoibmFuYSIsImFjdGlvbiI6InVwbG9hZCJ9 base64 decode...

android-reverse-engineering-skill

Ingeniería inversa de Android y extracción de API — Habilidad de Claude Code Una habilidad de Claude Code que descompila archivos APK/XAPK/JAR/AAR de Android y extrae las API HTTP utilizadas por la aplicación — endpoints de Retrofit, llamadas OkHttp, URLs hardcodeadas, patrones de autenticación —...

lsawhisper-bof

LSA Whisperer BOF A Cobalt Strike Beacon Object File BOF port of LSA Whisperer — the tool that talks directly to Windows authentication packages through the LSA untrusted/trusted client interface, without touching LSASS process memory even when PPL and Credential Guard is enabled. Why This Exists...

mfoc

MFOC is an open source implementation of "offline nested" attack by Nethemba. This program allow to recover authentication keys from MIFARE Classic card. Please note MFOC is able to recover keys from target only if it have a known key: default one hardcoded in MFOC or custom one user provided usi...

CVE-2024-29855

CVE-2024-29855 Veeam Recovery Orchestrator Authentication Bypass CVE-2024-29855 by Sina Kheirkhah @SinSinology of SummoningTeam @SummoningTeam Technical Analysis A root cause analysis of the vulnerability can be found on my blog Summary Veeam published a CVSS 9 advisory for a authentication bypas...

keepass_dump

Keepass-Dumper This is my PoC implementation for CVE-2023-32784 My version is a python port of @vdohney's PoC along with a few changes and additional features. Changes One change, was to use known strings that can be found within the dump file in order to more accurately jump to the location of t...

PoC_CurveBall

CVE-2020-0601 - CurveBall Highlights PoC for CVE-2020-0601 Trivial solution for private-key of 1 Non-trivial solution for 1 private-key curve-order Written in C, uses OpenSSL's libcrypto Requirements Linux of some variety apt install libssl libssl-dev Or whatever package mananger you use Compilin...

UnConfuserEx

UnConfuserEx Enhanced fork of UnconfuserEx with improved support for modern ConfuserEx2 variants, anti-tamper recovery, compressor removal, control-flow restoration, and resource reconstruction. https://github.com/user-attachments/assets/de2c7fd9-6736-4f39-83c0-3c25aa9c1f24 If u ever played with...

CVE-2024-29868

CVE-2024-29868: Use of Cryptographically Weak PRNG in Recovery Token Generation This repository contains the proof of concept related to CVE-2024-29868 that affects Apache StreamPipes from v0.69.0 through 0.93.0. Description : Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...

BlackHole

BlackHole C RAT Remote Adminitration Tool Educational purposes only Technologies protobuf-net : message serialization/deserialization in slavemaster protocol NetMQ : network library used for the slavemaster system clientserver Lz4.Net : compression library ILMerge : packaging assemblies into a...

CVE-2023-33242

CVE-2023-33242 CVE-2023-33242 PoC The simulated Lindell17 protocol is vulnerable to a bit extraction exploit, allowing an attacker to recover the private key by iteratively extracting individual bits of the key. The protocol is designed to generate ECDSA signatures in a client-server model, with...

fatcat

fatcat Esta herramienta está diseñada para manipular sistemas de archivos FAT, con el fin de explorar, extraer, reparar, recuperar y realizar análisis forense de los mismos. Actualmente soporta FAT12, FAT16 y FAT32. Tutoriales y ejemplos Construcción e instalación Puedes compilar fatcat de esta...

alaniz-cipher

El Cifrado Alaniz v3 Cifrado Post-Cuántico Basado en Haces mediante Permutaciones Vectoriales de Cuerpos Finitos Una primitiva criptográfica basada en el Problema de Inversión de Morfismos de Haces No Lineales NL-SMIP: un sistema polinomial con coeficientes secretos acoplados por cohomología de...

ExtractBitlockerKeys

Un script de administración de sistemas o post-explotación para extraer automáticamente las claves de recuperación de BitLocker de un dominio. Características Obtiene automáticamente la lista de todos los equipos del LDAP del controlador de dominio. Conexiones multihilo para extraer claves de...

kcmdump

KCM dumper Quick script to dump the KCM database used by SSSD and recover Kerberos tickets in the CCACHE format. Initially based on SSSDKCMExtractor and KCMTicketFormatter. Description Since version 2.0.0 2018-08-13, the back end storage of the KCM responder of SSSD does not encrypt the database...

crestron_getsudopwd

crestrongetsudopwd Basado en el descubrimiento de Ricky Lawshae en dispositivos Crestron TSW-X60 y MC3, esta herramienta tiene como objetivo explotar la CVE-2018-13341. Usando la dirección MAC del dispositivo objetivo, puedes recuperar la contraseña de la cuenta oculta "crengsuperuser" que tiene...