Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

31 results

crackle

mikeryan/crackle

Crack and decrypt BLE encryption

bluetooth-securitycryptographyencryption-decryption-tools+2

9745 years ago

doublepulsar-c2-traffic-decryptor

withsecurelabs/doublepulsar-c2-traffic-decryptor

A python2 script for processing a PCAP file to decrypt C2 traffic sent to DOUBLEPULSAR implant

command-and-controlencryption-decryption-toolsexploitation+3

2259 years ago

DecryptTeamViewer

v1v1/decryptteamviewer

Enumerate and decrypt TeamViewer credentials from Windows registry

exploitationpassword-attackspost-exploitation+1

2374 years ago

grafanaExp

a-d-team/grafanaexp

A exploit tool for Grafana Unauthorized arbitrary file reading vulnerability (CVE-2021-43798), it can burst plugins / extract secret_key / decrypt…

encryption-decryption-toolsexploitationinformation-gathering+3

26911 months ago

cve-2019-6693

saladandonionrings/cve-2019-6693

An authorized remote user with access or knowledge of the standard encryption key can gain access and decrypt the FortiOS backup files and all…

educationencryption-decryption-toolsexploitation+2

302 years ago

laravel_cookie_killer

synacktiv/laravel_cookie_killer

Decrypt and re-encrypt Laravel session cookies to exploit insecure PHP deserialization for remote code execution.

encryption-decryption-toolsexploitationpayload-development+4

283 years ago

CVE-2020-9289

synacktiv/cve-2020-9289

Decrypt reversible secrets encrypted using the default hardcoded key related to CVE-2020-9289 on FortiAnalyzer/FortiManager (the only difference with…

configuration-auditingcryptographyencryption-decryption-tools+3

113 years ago

cve-2024-21980-poc

freax13/cve-2024-21980-poc

Exploit for CVE-2024-21980 targeting AMD SEV firmware to decrypt arbitrary memory of decommissioned SEV-SNP guests via a command buffer enforcement…

binary-exploitationencryption-decryption-toolsexploitation+3

82 years ago

CVE-2026-11119-Padding-Oracle-Attack-on-CBC-Mode-Encryption

george0papasotiriou/cve-2026-11119-padding-oracle-attack-on-cbc-mode-encryption

Demonstrates a padding oracle attack against AES-CBC encryption using a vulnerable Flask decrypt endpoint and a Python exploit script to decrypt…

cryptographyeducationexploitation+3

1 month ago

CVE-2024-5764

fin3ss3g0d/cve-2024-5764

Python script to decrypt data encrypted by the Java PasswordCipher class, exploiting CVE-2024-5764's static encryption key in Sonatype Nexus…

encryption-decryption-toolsexploitationpenetration-testing+2

11 year ago

moveit-payload-decrypt-CVE-2023-34362

toorandom/moveit-payload-decrypt-cve-2023-34362

This shellscript given the OrgKey 0 will parse the header of the base64 artifacts found in MOVEit Logs and decrypt the Serialized object used a…

encryption-decryption-toolsexploitationforensics+3

13 years ago

CVE-2024-21754-Forti-RCE

cybersecuritist/cve-2024-21754-forti-rce

Exploit for CVE-2024-21754 targeting insufficient password hashing in FortiOS and FortiProxy, enabling privileged attackers to decrypt backup files…

exploitationnetwork-securitypassword-cracking+2

22 years ago

CVE-2026-26012

dulieno/cve-2026-26012

Proof-of-concept exploit for CVE-2026-26012, a broken access control in Vaultwarden that allows any organization member to enumerate and decrypt all…

cryptographyeducationexploitation+3

17 months ago

CVE-2023-48034

aprkr/cve-2023-48034

Weak encryption in Acer Wireless Keyboard SK-9662 allows attacker in physical proximity to both decrypt wireless keystrokes and inject wireless…

bluetooth-securitycryptographyembedded-systems-security+6

12 years ago

kcmd

aseemjakhar/kcmd

Kankun Smart Socket Hijacker and Sniffer. The kankun smart socket and its mobile app use a hardcoded AES 256 bit key to encrypt and decrypt…

cryptographyexploitationhardware-iot-security+4

11 years ago

CVE-2024-43044-jenkins-creds

dacc4/cve-2024-43044-jenkins-creds

Exploit for CVE-2024-43044 enabling arbitrary file read from Jenkins controller to extract and decrypt credentials.xml using secret keys.

encryption-decryption-toolsexploitationpenetration-testing+2

1 year ago

CVE-2024-44541

pointedsec/cve-2024-44541

This repository details a SQL Injection vulnerability in Inventio Lite v4's, including exploitation steps and a Python script to automate the attack.…

educationexploitationpassword-cracking+3

1 year ago

Archived

Ivy

optiv/ivy

Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by utilizing…

exploitationpayload-developmentpayload-generation+4

7413 years ago