446 matches found
HashCheck
PasswordHashCheck This project aims to assist in the search for leaked passwords while maintaining a high level of privacy using the k-anonymity method. To achieve this, the APIs of different services are used, sending only a part of the Hash of the password we want to check, for example, the fir...
openssl
Welcome to the OpenSSL Project OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations are based on a full-strength general purpose cryptographic library, which...
rainbowcrackalack
Rainbow Crackalack Author: Joe Testa @therealjoetesta About This project produces open-source code to generate rainbow tables as well as use them to look up password hashes. While the current release only supports NTLM, future releases may support MD5, SHA-1, SHA-256, and possibly more. Both Linu...
CVE-2025-51726
As requested, I have now demonstrated both vulnerabilities BA2022 & BA2015 with practical exploitation scenarios and PoC evidence, which shows how an attacker could abuse these issues in a real-world context. 📌 1. BA2022 Weak Hash in Code Signing – SHA-1 Exploitation Demonstration Although the...
hash-identifier
hash-identifier Software to identify the different types of hashes used to encrypt data and especially passwords. Encryption formats supported: ADLER-32 CRC-32 CRC-32B CRC-16 CRC-16-CCITT DESUnix FCS-16 GHash-32-3 GHash-32-5 GOST R 34.11-94 Haval-160 Haval-192 110080 ,Haval-224 114080 ,Haval-256...
cryptovenom
CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...
git-dump
git-dump 该脚本是一个工具，用于从网站递归下载 '.git' 目录的内容。该脚本使用 Python 以及 'requests' 和 'BeautifulSoup' 等库，检查目录结构、下载文件，并识别 Git 文件中的 SHA-1 哈希值。 功能 从网站递归下载 ".git" 目录的内容。 使用 Python 以及 "requests" 和 "BeautifulSoup" 等库进行网络抓取。 检查目录结构并从网站下载文件。 识别并从 Git 文件中提取 SHA-1 哈希值。 支持多线程，实现高效的文件下载。 包含用于处理失败 HTTP 请求的重试逻辑。 允许在下载的目录中手动执行...
hashes
魔法哈希 – PHP 哈希“碰撞” 使用 密码 1 注册，然后使用 密码 2 登录。如果你能成功登录，则说明存储使用指定算法对密码进行哈希，并且 PHP 使用 == 来比较它们（适用于 MD5、SHA-1 和明文）。 MD5、SHA-1、SHA-224、SHA-256 及其他 对于 MD5 、SHA-1 和 SHA-2 系列 ，它利用了众所周知的技巧（这实际上是一个有文档记载的特性，参见 PHP 类型比较表 和 浮点数）：在 PHP 中 '0e1' == '00e2' == '0'。这只是将其用于 实际 用途。任何密码都 匹配 列表中的任何其他密码。这与 整数字符串溢出为浮点数...
CVE-2021-36460
CVE-2021-36460 NVD CVE-2021-36460: https://nvd.nist.gov/vuln/detail/CVE-2021-36460 MITRE CVE-2021-36460: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-36460 CWE-836: 使用密码哈希代替密码进行身份验证 VeryFitPro 应用（Android: com.veryfit2hr.second，iOS）=3.3.7 在设备本地使用 SHA-1 对账户密码进行哈希处理，并在与后端 API...
EulerOS Virtualization 2.13.1 : python-paramiko (EulerOS-SA-2026-3191)
According to the versions of the python-paramiko packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the...
EulerOS Virtualization 2.13.0 : python-paramiko (EulerOS-SA-2026-3231)
According to the versions of the python-paramiko packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the...
CVE-2026-47191 kas checks out SHA-like git branches as valid commits
kas is a setup tool for bitbake based projects. Prior to version 5.3, when relying solely on a git commit ID SHA-1 or SHA-256 to qualify if a checkout of a repository is equivalent to the state validated while adding its commit ID to a kas configuration, users may be tricked to check out a branch...
Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by use of a broken cryptographic algorithm vulnerability due to Paramiko
Summary Paramiko is used by IBM Cloud Pak for Data System 1.0 as a Python implementation of the SSH protocol for secure remote connections and file transfers. CVE-2026-44405 affects Paramiko's RSA key handling in rsakey.py, where the SHA-1 algorithm is permitted for cryptographic operations despi...
PYSEC-2026-2858 Paramiko rsakey.py allows the SHA-1 algorithm
In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm...
CVE-2026-6412
Technical details about CVE-2026-6412 are not publicly available in the provided documents. Monitor for updates from the cited sources (WolfSSL, NVD, Debian tracker, CVE List, OSV, EUVD, etc.).
CoreWCF: WS-Security Reference DigestMethod Algorithm-Suite Bypass
Impact CoreWCF’s WS-Security 1.0 receive pipeline validates the SignatureMethod of an incoming ds:SignedInfo against the configured SecurityAlgorithmSuite, but does not validate the DigestMethod declared on each ds:Reference. As a result, a sender can populate ds:SignedInfo with SignatureMethod...
phpMyFAQ 安全漏洞
phpMyFAQ is a multilingual FAQ system developed by Thorsten Rinne. It is entirely database-driven. Versions of phpMyFAQ prior to 4.1.4 contained a security vulnerability. This vulnerability stemmed from the use of the SHA-1 hash algorithm for handling attachments. The SHA-1 algorithm is vulnerabl...
CVE-2026-8889 CVE-2026-8889
Version 3.0.7 of the Securly Chrome Extension uses deprecated SHA-1 hashing for IWF CSAM URL matching 25,020 hashes and CIPA blocklist matching 12,352 hashes...
CVE-2026-8878
Version 3.0.7 of the Securly Chrome Extension exposes multiple publicly accessible endpoints that allow unauthenticated access to sensitive data. The exposed information consists of SHA-1 hashes that are inadequately obfuscated using a simple Caesar cipher, which can be easily reversed to recover...