Untrue

Untrue Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Richard Turnbull, richard dot turnbull at nccgroup dot com http://www.github.com/nccgroup/untrue Released under AGPL, see LICENSE for more information Description Untrue is a tool for checking passwords agains...

inception

Note: This tool is no longer under active development, please look at PCILeech instead. INCEPTION Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe HW interfaces...

truehunter

Truehunter Truehunter 的目标是使用快速且内存高效的方法检测加密容器，无需任何外部依赖，便于移植。它被设计用于检测 Truecrypt 和 Veracrypt 容器，但也可能检测到任何其“头部”不在数据库中包含的加密文件。 Truehunter 执行以下检查： 1. 将文件的前 8 个字节与其自身数据库进行比对。 2. 文件大小模 64 必须为零。 3. 计算文件的熵。 Truehunter 是 BlackArch 取证工具的一部分。 https://blackarch.org/forensic.html 安装 任何 Python 版本从 2.7 到 3.7...

truehunter

Truehunter The goal of Truehunter is to detect encrypted containers using a fast and memory efficient approach without any external dependencies for ease of portability. It was designed to detect Truecrypt and Veracrypt containers, however it may detect any encrypted file with a 'header' not...

EUVD-2016-2380

Malware in sbrugna...

EUVD-2014-2908

Malware in sbrugna...

EUVD-2015-7282

Malware in sbrugna...

EUVD-2015-7283

Malware in sbrugna...

EUVD-2007-1583

Malware in sbrugna...

EUVD-2006-2184

Malware in sbrugna...

EUVD-2007-1732

Malware in sbrugna...

EUVD-2008-3885

Malware in sbrugna...

EUVD-2014-2909

Malware in sbrugna...

CVE-2019-1010208

IDRIX, Truecrypt Veracrypt, Truecrypt Prior to 1.23-Hotfix-1 Veracrypt, all versions Truecrypt is affected by: Buffer Overflow. The impact is: Minor information disclosure of kernel stack. The component is: Veracrypt NT Driver veracrypt.sys. The attack vector is: Locally executed code, IOCTL...

CVE-2019-1010208

IDRIX, Truecrypt Veracrypt, Truecrypt Prior to 1.23-Hotfix-1 Veracrypt, all versions Truecrypt is affected by: Buffer Overflow. The impact is: Minor information disclosure of kernel stack. The component is: Veracrypt NT Driver veracrypt.sys. The attack vector is: Locally executed code, IOCTL...

CVE-2019-1010208

IDRIX, Truecrypt Veracrypt, Truecrypt Prior to 1.23-Hotfix-1 Veracrypt, all versions Truecrypt is affected by: Buffer Overflow. The impact is: Minor information disclosure of kernel stack. The component is: Veracrypt NT Driver veracrypt.sys. The attack vector is: Locally executed code, IOCTL...

CVE-2019-1010208

CVE-2019-1010208 affects Veracrypt/NT Driver (veracrypt.sys) and prior Truecrypt/IDRIX implementations. Root cause: Buffer Overflow in the Veracrypt NT Driver leading to information disclosure on the kernel stack. Impact stated as partial kernel stack information disclosure; attack vector is loca...

CVE-2019-1010208

IDRIX, Truecrypt Veracrypt, Truecrypt Prior to 1.23-Hotfix-1 Veracrypt, all versions Truecrypt is affected by: Buffer Overflow. The impact is: Minor information disclosure of kernel stack. The component is: Veracrypt NT Driver veracrypt.sys. The attack vector is: Locally executed code, IOCTL...

CVE-2019-1010208: Improper Restriction of Operations within the Bounds of a Memory Buffer

IDRIX, Truecrypt Veracrypt, Truecrypt Prior to 1.23-Hotfix-1 Veracrypt, all versions Truecrypt is affected by: Buffer Overflow. The impact is: Minor information disclosure of kernel stack. The component is: Veracrypt NT Driver veracrypt.sys. The attack vector is: Locally executed code, IOCTL...

StrongPity APT Changes Tactics to Stay Stealthy

The APT group behind the sophisticated malware known as StrongPity a.k.a. Promethium has changed its tactics, after various research groups analyzed the malware and exposed its methods of deployment. The efforts have allowed the group to return to hidden status, even after being labeled a known...