mkchain

mkchain Open source tool to help you build a valid SSL certificate chain. Description • How To Use • Parameters • How it works • Requirements • Other • License Description Is an open source tool to help you build a valid SSL certificate chain. Also can help you fix the incomplete chain and downlo...

ecapture

汉字 | English eCapture旁观者: capture SSL/TLS text content without a CA certificate using eBPF. !IMPORTANT Supports Linux/Android on x8664 kernel 4.18+ and aarch64 kernel 5.5+. Kernel version requirements apply per CPU architecture for both Linux and Android. Need ROOT permission or specific Linux...

hyperfox

Hyperfox Hyperfox is a security auditing tool that proxies and records HTTP and HTTPS traffic between two points. Installation You can install the latest version of hyperfox to /usr/local/bin with the following command requires admin privileges: root@kitploit: curl -sL...

test-certs-site

test-certs-site Introduction This is a purpose-built webserver for hosting the test pages required by the CA/Browser forum Baseline Requirements. They contain the following requirement: The CA SHALL host test Web pages that allow Application Software Suppliers to test their software with Subscrib...

CVE-2026-91841

A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege...

EUVD-2026-87251

A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege...

CVE-2026-91841 Networkmanager-vpnc: networkmanager-vpnc: incomplete fix for cve-2018-10900 allows root privilege escalation via ca-file path newline injection

A flaw was found in NetworkManager-vpnc, a VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by injecting a newline character into the CA-File path. This manipulation allows the user to execute arbitrary commands as the root user, leading to local privilege...

gringotts

CVE-2020-0601 prueba de concepto Una divertida prueba de concepto para crear tu propia CA raíz y certificado firmado basada en la vulnerabilidad CVE-2020-0601 en Windows 10. La base del problema es que el método CertGetCertificateChain validaba incorrectamente las autoridades de certificados raíz...

ROOT-APP-MAVEN-CVE-2026-55470 CVE-2026-55470 in ca.uhn.hapi.fhir:org.hl7.fhir.validation - Patched by Root

Root has patched CVE-2026-55470 in the ca.uhn.hapi.fhir:org.hl7.fhir.validation package for Root:Maven. Multiple fixed versions available...

ForgeCert

ForgeCert ForgeCert uses the BouncyCastle C API and a stolen Certificate Authority CA certificate + private key to forge certificates for arbitrary users capable of authentication to Active Directory. This attack is codified as DPERSIST1 in our "Certified Pre-Owned" whitepaper. This code base was...

certsync

certsync certsync is a new technique in order to dump NTDS remotely, but this time without DRSUAPI : it uses golden certificate and UnPAC the hash. It works in several steps: 1. Dump user list, CA informations and CRL from LDAP 2. Dump CA certificate and private key 3. Forge offline a certificate...

CVE-2020-0601

CVE-2020-0601 : CurveBall CVE exploitation This ruby script can be used to spoof a legit certificate authority and generat a certificate that will be considered valid for Windows computer affected by the CurveBall vulnerability. You need to get a certificate comming from the certificate authority...

CVE-2022-1292

CVE-2022-1292 POC Description root@kitploit: The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute...

CVE-2022-1292

CVE-2022-1292 POC Description root@kitploit: The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute...

phishlulz

PhishLulz PhishLulz 是一套 Ruby 工具集，旨在实现钓鱼活动的自动化。 当你开始一次钓鱼活动时，会启动一个专用的 Amazon EC2（Debian 7）实例。该虚拟机集成了多种开源工具，主要包含以下两个组件： PhishingFrenzy https://github.com/pentestgeek/phishing-frenzy BeEF https://github.com/beefproject/beef PhishLulz 自带自签名 CA：这是为 PhishingFrenzy 管理界面生成自签名证书所必需的。你还会发现一些很酷的钓鱼模板（这些不在 PF...

chainoffools

CryptoAPI CVE-2020-0601: Explotación de la vulnerabilidad de suplantación de CryptoAPI de Windows. Más información en nuestro artículo de blog. Requisitos de instalación root@kitploit: pip install -U -r requirements.txt La generación de certificados funciona con OpenSSL versión hasta 1.0.2u...

ca-clone

Scripts de Clonación de CA Scripts para clonar certificados de CA para su uso en ataques a clientes HTTPS. Actualmente se incluyen scripts para clonar una CA raíz de Comodo y una CA de Digicert, ambas ampliamente confiables en dispositivos IoT. Uso Ejecute cualquiera de los scripts directamente...

CVE-2026-29114

CVE-2026-29114 — Certificado raíz CA del dispositivo Dahua expuesto Tipo de aviso: Divulgación de seguridad coordinada con el proveedor ID de CVE: CVE-2026-29114 Proveedor: Dahua Technology Publicado: 2026-06-10T05:44:50 UTC Última modificación: 2026-06-10T05:44:50 UTC Fuente: Centro de confianza...

InfraTest

DO NOT DEPLOY UNLESS FOR LEARNING ABOUT AWS!!! Currently vulnerable to CVE-2024-39689. We need to update Certifi. Check dependabot before deploying. Trusting an unverified Certificate Authority can have major loss of customer trust issues...

ejbca-pqc-lab

EJBCA Pure PQC Lab — ML-DSA-65 Two-Tier PKI Hierarchy A hands-on implementation of NIST FIPS 204 ML-DSA in a two-tier PKI hierarchy using EJBCA Community Edition. 📖 Full walkthrough: Building a Post-Quantum PKI: How I Signed a Root CA and Sub CA Using ML-DSA on EJBCA What This Lab Builds A comple...