Skip to content

TCPK v2.3.0

Choose a tag to compare

View all tags
@V33RU V33RU released this 10 Jul 20:39
· 391 commits to main since this release
v2.3.0
This tag was signed with the committer’s verified signature.
V33RU `Mr-IoT`
SSH Key Fingerprint: DZ9JlqaQiOgCS1eBAl5Jqtj9O46NcfPo7P3xI/F3Kz8
Verified
Learn about vigilant mode.
e1091ac
This commit was signed with the committer’s verified signature.
V33RU `Mr-IoT`
SSH Key Fingerprint: DZ9JlqaQiOgCS1eBAl5Jqtj9O46NcfPo7P3xI/F3Kz8
Verified
Learn about vigilant mode.

First step from static auditor toward pentest tooling, plus a stronger autonomous agent.

Exploitation (new)

  • Invoke-TcpkSecretRecovery and a new Confirmed (exploit) evidence tier. When an app ships a symmetric key + IV + ciphertext together, TCPK decrypts with the shipped key/IV (AES/TripleDES/DES x CBC/ECB x PKCS7) and recovers the plaintext secret, collapsing three Inferred findings into one demonstrated recovery (exploit.secret-recovered, CRITICAL, CWE-321/798/312). Lab-safe: reads local artifacts, launches nothing, no network. Masked unless -Reveal.
  • Verified end to end on the DVTA testbed: recovers the AES-256-CBC sa password from DVTA.exe.config.

Autonomous agent

  • Read-only call-graph + taint-trace tools: get_taint_trace (the prover's source->sink verdict per method), get_callers, get_callees. submit_finding now records the taint verdict.
  • A deterministic prover verification gate partitions the agent's findings into confirmed / review / refuted.

Portability

  • The managed-analysis test suite runs under PowerShell on Linux (cross-platform temp dir).

Full details in CHANGELOG.md. Authorized testing only.

Assets 2
Loading