← 输入框|github.com|刷新
Skip to content

Switch (optional) encryption of identified passwords from ncrack to use AGE #2311

Closed

Description

@J12934

➹ New Feature implementation request

Is your feature request related to a problem?

Currently the ncrack parser has a optional feature to encrypt the passwords that were identified using RSA.
This is potentially dangerous as RSA has a lot of potentials to do something wrong and void the encryption.

Describe the solution you'd like

Switch encryption a state of the art encryption mechanism like age.

Describe alternatives you've considered

Additional context

Came up during the CVE-2023-46809 in node. (https://nodejs.org/en/blog/vulnerability/february-2024-security-releases#nodejs-is-vulnerable-to-the-marvin-attack-timing-variant-of-the-bleichenbacher-attack-against-pkcs1-v15-padding-cve-2023-46809---medium)

Activity

  1. moved this from Backlog to Todo in secureCodeBoxon Jul 9, 2025
  2. self-assigned this
    on Aug 18, 2025
  3. moved this from Todo to In Progress in secureCodeBoxon Aug 19, 2025
  4. moved this from In Progress to Done in secureCodeBoxon Aug 28, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Type

No type

Projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions