vboxdie-cracker

Virtual Box Disk Image Encryption password cracker Requirements 1. PHP = 5.5.0 2. OpenSSL = 1.0.1 XTS support Algorithm description User password is stored using a combination of PBKDF2 and AES-XTS as following shown values are fixed at the moment, but they can be controlled inside the file forma...

jwt_tool

The JSON Web Token Toolkit v2 jwttool.py is a toolkit for validating, forging, scanning and tampering JWTs JSON Web Tokens. Its functionality includes: Checking the validity of a token Testing for known exploits: CVE-2015-2951 The alg=none signature-bypass vulnerability CVE-2016-10555 The RS/HS25...

bash-cve-2014-6271-fixes

CVE-2014-6271 patches for bash The original mailing list post only lets you fetch the patches over unauthenticated HTTP. Sigh I've downloaded these over HTTP and put them into a git repository that you can fetch over HTTPS and check independently. I have not checked whether these files are...

SHA256-CDP

SHA256-CDP: Cyclic Digit-sum Projection GPU-accelerated rainbow table implementation of the CDP structural analysis framework for SHA-256. Built on the findings of the CDP paper DOI: 10.5281/zenodo.20627240, this repository provides a complete, working implementation of CDP-based rainbow chain...

BlackBerryC2

BlackBerryC2 2.0.0-beta BlackBerryC2 is an encrypted remote administration and C2 framework designed exclusively for educational use, security research, and controlled laboratory environments. The project demonstrates how to build a custom command-and-control server with application-layer...

terrier

Terrier Terrier is a Image and Container analysis tool that can be used to scan OCI images and Containers to identify and verify the presence of specific files according to their hashes. A detailed writeup of Terrier can be found on the Heroku blog,...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

Grafana-Password-Decryptor

Grafana Password Decryptor Python toolkit for decrypting and cracking Grafana passwords from multiple formats. Coded by: strikoder What Does This Tool Do? Handles two types of Grafana password storage: 🔐 AES-256 Base64 datasource table → Decrypt directly with AESDecrypt.py 🔨 PBKDF2HMACSHA256 user...

Matroschka

Матрёшка Acerca de Matroshka es una herramienta de esteganografía de línea de comandos escrita en Python puro. Puedes usarla para ocultar y cifrar imágenes o texto en los bits menos significativos de los píxeles de una imagen. Cifrado El cifrado utiliza HMAC-SHA256 para autenticar los datos...

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

subcrawl

SubCrawl SubCrawl is a framework developed by Patrick Schläpfer, Josh Stroschein and Alex Holland of HP Inc’s Threat Research team. SubCrawl is designed to find, scan and analyze open directories. The framework is modular, consisting of four components: input modules, processing modules, output...

CVE-2015-9235_JWT_key_confusion

ENGLISH Description This application allows you to replace a value in a JSON Web Token JWT using the HMAC-SHA256 method to recalculate the signature. It takes as input a token, a key to replace, and the new value associated with that key. Usage Clone or download the application's source code...

Ollama - Remote Code Execution

Ollama before 0.1.34 does not validate the format of the digest sha256 with 64 hex digits when getting the model path, and thus mishandles the TestGetBlobsPath test cases such as fewer than 64 hex digits, more than 64 hex digits, or an initial ../ substring. id: CVE-2024-37032 info: name: Ollama ...

check_38077

Dateiname: check38077.exe MD5: 3083C2EA88558D2853FC12214BD3C714 SHA1: 1DF92598CA45B788BA9ED841F5A529AD3F6F85CB SHA256: 7B8AB88220D02A125ACB02E38AF3F4DE71FD6425B2C48D310ABE11603BA633B9 CRC32: F444BBAC...

HTTPSignatures

Estensione Burp Suite HTTPSignatures HTTPSignatures è un'estensione Burp Suite che implementa la bozza di specifica Signing HTTP Messages draft-ietf-httpbis-message-signatures-01. Ciò consente agli utenti di Burp Suite di testare senza soluzione di continuità applicazioni che richiedono le HTTP...

CVE-2026-81689 openssl_encrypt before 1.4.9 Weak Pepper Key Derivation

opensslencrypt versions before 1.4.9 derive the remote-pepper wrap key using unsalted HKDF-SHA256 or bare SHA-256 of the password, allowing identical keys across all users and files. Attackers with access to wrapped pepper blobs can precompute a single dictionary table and perform fleet-wide...

CVE-2026-81689

openssl_encrypt versions before 1.4.9 derive the remote-pepper wrap key using unsalted HKDF-SHA256 or bare SHA-256 of the password, resulting in identical keys across all users and files. An attacker with access to wrapped pepper blobs can precompute a single dictionary table and perform fleet-wi...

CVE-2026-81689 openssl_encrypt before 1.4.9 Weak Pepper Key Derivation

opensslencrypt versions before 1.4.9 derive the remote-pepper wrap key using unsalted HKDF-SHA256 or bare SHA-256 of the password, allowing identical keys across all users and files. Attackers with access to wrapped pepper blobs can precompute a single dictionary table and perform fleet-wide...

Astra Linux – Vulnerability in libssh2

In libssh2 before version 1.9.0, the kexmethoddiffiehellmangroupexchangesha256keyexchange function in kex.c contains an integer overflow that could lead to an out-of-bounds read when packets are read from the server. A remote attacker who compromises an SSH server may be able to disclose sensitiv...

CVE-2026-75589

Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify. Each of the three compares the signature carried in the message against the locally computed one with the eq operator, which returns as soon as the two...