Tools

badkeys/debianopenssl

Private keys vulnerable to Debian OpenSSL bug (CVE-2008-0166)

akabe1/kr00ker

An experimental script PoC for Kr00k vulnerability (CVE-2019-15126)

chrisjd20/hikvision_cve-2017-7921_auth_bypass_config_decryptor

This python file will decrypt the configurationFile used by hikvision cameras vulnerable to CVE-2017-7921.

nccgroup/dotnetpaddingoracle

Python Implementation of a .NET Padding Oracle Assessment Tool

yryz/heartbleed.js

openssl Heartbleed bug(CVE-2014-0160) check for Node.js

spring-io/cve-2022-22976-bcrypt-skips-salt

CLI tool to detect and update BCrypt password hashes with vulnerable work factor 31, integrating with Spring Security databases for CVE-2022-xxxx…

regent8sh/panosexploitmultitool

Exploitation and Post-Exploitation Multitool for Palo Alto PAN-OS Systems affected by vulnerabilities CVE-2024-0012 and CVE-2024-9474

lva/infineon-cve-2017-15361

Simple PowerShell script to check whether a computer is using an Infineon TPM chip that is vulnerable to CVE-2017-15361.

yucaerin/cve-2024-55555

Laravel Crypto Killer Mass Scanner (CVE-2024-55555)

p4tq/hikvision_cve-2017-7921_auth_bypass_config_decryptor

Decrypts Hikvision IP camera configuration files extracted via CVE-2017-7921 authentication bypass, revealing user credentials and device settings.

sic4rio/grafana-decryptor-for-cve-2021-43798

Decrypts Grafana DataSource passwords by exploiting CVE-2021-43798 directory traversal to retrieve configuration files and derive encryption keys.

lastvocher/hikvision-cve-2017-7921-decryptor

Decrypts Hikvision IP camera configuration files extracted via CVE-2017-7921 authentication bypass, recovering user credentials from weakly encrypted…

titanous/rocacheck

Go package that checks if RSA keys are vulnerable to ROCA / CVE-2017-15361

badkeys/keypairvuln

Private keys generated with vulnerable keypair versions (CVE-2021-41117)

pandora-research/cve-2018-0114-exploit

Exploit for CVE-2018-0114: re-signs JWT tokens by embedding an attacker-controlled public key in the JWS header, bypassing authentication in…

mauricelambert/gpp-encrypt

This little script encrypts password to gpp cpassword. It useful to create vulnerable lab AD (CVE-2014-1812).