keypair

keypair 从纯 JavaScript 生成 RSA PEM 密钥对 用法 root@kitploit: var keypair = require'keypair'; var pair = keypair; console.logpair; 输出 root@kitploit: $ node example.js public: '-----BEGIN RSA PUBLIC...

heartbleed-tools

OpenSSL Heartbleed CVE-2014-0160 취약점 스캐너, 데이터 마이너 및 RSA 키 복원 도구 저자: Einar Otto Stangvik / @einaros / https://hacking.ventures 이미 비밀이 오래전에 드러났고, 다른 사람들도 자신의 도구를 공개하기 시작했으므로, 저도 제 도구를 공개합니다. 이 도구가 아직 서버를 패치하거나 업그레이드하지 않은 사람들에게 압박을 가하는 데 도움이 되길 바랍니다. 다른 사람들은 교육적 가치가 있다고 생각할 수도 있습니다. 다른 많은 Heartbleed...

openssl

Welcome to the OpenSSL Project OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations are based on a full-strength general purpose cryptographic library, which...

CryKeX

Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges optional Limitations: AES and RSA keys only Fails most...

tp-link-decrypt

注意: 2025年10月5日時点で、このプロジェクトは非推奨となりました。 Nate Robbins 氏が引き継いでくださり、スイッチの復号機能が追加されました - https://github.com/robbins/tp-link-decrypt ====================================================================================================== このツールが役立った場合は、[email protected] または GitHub でお知らせください : 1. 任意...

CVE-2026-0073

ADB TLS 인증 우회 익스플로잇 CVE-2026-0073 CVE-2026-0073 에 대한 자동화된 네트워크 스캐너 및 익스플로잇 도구입니다. 이 취약점은 Android Debug Bridge 데몬adbd의 취약점으로, 무선 디버깅을 통해 인증되지 않은 원격 코드 실행RCE 및 대화형 셸 액세스를 허용합니다. 이 도구는 현대 Android 기기Android 13+에 특별히 최적화되어 있으며, mDNS 자동 검색 을 통해 무작위화된 ADB 포트를 찾고 완전한 대화형 raw PTY 셸 을 제공합니다. 🚨 취약점 요약 Andro...

rocacheck

rocacheck rocacheck 包是 密钥指纹算法 的 Go 实现，用于检查 RSA 密钥是否由有缺陷的 Infineon 代码生成，并容易通过 Coppersmith 攻击回归 ROCA / CVE-2017-15361 进行因式分解。...

Astra Linux – Vulnerability in nss

During RSA key generation, bignum implementations used a variant of the Binary Extended Euclidean Algorithm, which involved significant input-dependent processes. This allowed attackers to perform electromagnetic-based side-channel attacks to capture traces that could lead to the recovery of secr...

Astra Linux – Vulnerability in Firefox and Thunderbird

When importing an SPKI RSA public key as an ECDSA P-256 key, the key is handled incorrectly, causing the tab to crash. This vulnerability affects Firefox 110, Thunderbird 102.8, and Firefox ESR 102.8...

Detect-CVE-2017-15361-TPM

CVE-2017-15361 の脆弱性があるトラステッド プラットフォーム モジュールを検出する このリポジトリは、DoD管理者が有効なトラステッド プラットフォーム モジュール TPM のうち CVE-2017-15361 の脆弱性があるシステムを検出するのを支援するためのコンテンツを提供し、情報保証勧告 RSA Key Generation Vulnerability Affecting Trusted Platform Modules の補足資料です。このリポジトリのファイルは、こちらから zip ファイルとしてダウンロードできます here。...

jwt-spoof-tool

jwt-spoof-tool Tool Description : このツールは、学習目的と、burpsuite に依存せずに jwt トークンハイジャックを自動化するために作成しました。 コードは十分にドキュメント化されており、理解しやすい内容になっています。 CVE-2018-0114 に基づいています。 この脆弱性は、バックエンドでサーバーが jwt ヘッダー内に埋め込まれた jwk オブジェクトをチェックするために発生します。jwk オブジェクトには、公開鍵を形成するために使用される 2 つのパラメータである n と e が含まれています。 How to exploit : 1...

CVE-2026-29000---pac4j-jwt-Authentication-Bypass-PoC

CVE-2026-29000 - pac4j-jwt 認証バイパス PoC 注記: これは私のオリジナルの作品ではありません。参考用としてここに保管しています。 動作方法: root@kitploit: python3 exploit.py http://IP:PORT Fetching JWKS... + Got RSA public key kid: enc-key-1 Crafted PlainJWT with sub=admin, role=ROLEADMIN + Forged JWE token created Accessing /api/dashboard... +...

ROCA-attack-on-vulnerability-CVE-2017-15361

ROCA-attack-on-vulnerability-CVE-2017-15361 本仓库包含了我在都灵理工大学数学工程专业学士学位期间开发的论文。这是一个基于 Python 和 Sage 的脚本。 该脚本的目标是生成一个 RSA 密钥，评估其是否容易受到 ROCA 攻击，并执行 ROCA 攻击。 脚本中的注释为意大利语。 文件夹结构 root@kitploit: . └── Attacco-ROCA-sulla-vulnerabilita-CVE-2017-15361 包含此仓库的文件夹 └──Program ├── Main.py 主文件 ├── Keygen.py 密钥生成 ├...

MikroTik router flaws allow takeover without a password

CERT Polska warns that attackers are actively exploiting a chain of critical MikroTik RouterOS flaws to seize control of routers exposed to the internet. Although the warning comes from Poland’s national cybersecurity response team, MikroTik routers are sold worldwide, including in the US. The...

Vulnerabilities in MikroTik RouterOS

MikroTik has addressed several vulnerabilities in RouterOS. The first vulnerability relates to a flaw in the SSH authentication mechanism, where the exponent of RSA keys was not verified. As a result, attackers can forge RSA signatures and gain unauthorized access via SSH. The second vulnerabilit...

CVE-2026-67276

RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the exponent. Because signature verification uses the client-supplied key, an attacker knowing an authorized RSA modulus can...

EUVD-2026-72024

RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the exponent. Because signature verification uses the client-supplied key, an attacker knowing an authorized RSA modulus can...

CVE-2026-67276 SSH user impersonation possible in Mikrotik RouterOS

RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the exponent. Because signature verification uses the client-supplied key, an attacker knowing an authorized RSA modulus can...

VulnCheck KEV: CVE-2026-67276

RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the exponent. Because signature verification uses the client-supplied key, an attacker knowing an authorized RSA modulus can...

EUVD-2026-70819

A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who captures an HTTP login session may use the known shared RSA private key to decrypt the administrator password; the weakened AES session key further reduces the effort required to...