hyperfox

Hyperfox Hyperfox is a security auditing tool that proxies and records HTTP and HTTPS traffic between two points. Installation You can install the latest version of hyperfox to /usr/local/bin with the following command requires admin privileges: curl -sL...

ecapture

eCapture 旁观者 Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. English · 汉字 !IMPORTANT Supports Linux on x8664 kernel 4.18+, aarch64 kernel 5.5+, and LoongArch64 loong64 kernel 6.6+. Android supports x8664 and aarch64 with the existing kernel minimums. Requires root...

certsync

certsync certsync is a new technique in order to dump NTDS remotely, but this time without DRSUAPI : it uses golden certificate and UnPAC the hash. It works in several steps: 1. Dump user list, CA informations and CRL from LDAP 2. Dump CA certificate and private key 3. Forge offline a certificate...

ForgeCert

ForgeCert ForgeCert uses the BouncyCastle C API and a stolen Certificate Authority CA certificate + private key to forge certificates for arbitrary users capable of authentication to Active Directory. This attack is codified as DPERSIST1 in our "Certified Pre-Owned" whitepaper. This code base was...

mkchain

mkchain Open source tool to help you build a valid SSL certificate chain. Description • How To Use • Parameters • How it works • Requirements • Other • License Description Is an open source tool to help you build a valid SSL certificate chain. Also can help you fix the incomplete chain and downlo...

ca-clone

CA Cloning Scripts Scripts to clone CA certificates for use in HTTPS client attacks. Currently includes scripts to clone a root Comodo CA, and a Digicert CA, both of which are fairly widely trusted in IoT devices. Usage Run either script in place to automatically generate a key and certificate. I...

CVE-2022-1292

CVE-2022-1292 POC Description The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary comman...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.16.36 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.16.36 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.16.36 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-9792: Use Azure Storage Account GPv2 DFBUGS-9382: Backport to odf-4.16.z Backport to 4.22 Backport CA...

EUVD-2026-102112

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.10, the Trust module stores attacker-controlled certificate authority and certificate refid values and interpolates them into XPath expressions in src/opnsense/mvc/app/models/OPNsense/Trust/FieldTypes/CAsField.php an...

CVE-2026-53582 OPNsense: XPATH Injection can disclose any secret in config.xml

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.10, the Trust module stores attacker-controlled certificate authority and certificate refid values and interpolates them into XPath expressions in src/opnsense/mvc/app/models/OPNsense/Trust/FieldTypes/CAsField.php an...

CVE-2026-53582 OPNsense: XPATH Injection can disclose any secret in config.xml

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.10, the Trust module stores attacker-controlled certificate authority and certificate refid values and interpolates them into XPath expressions in src/opnsense/mvc/app/models/OPNsense/Trust/FieldTypes/CAsField.php an...

CVE-2026-29114

CVE-2026-29114 — Dahua Exposed Device CA Root Certificate Advisory type: Vendor-coordinated security disclosure CVE ID: CVE-2026-29114 Vendor: Dahua Technology Published: 2026-06-10T05:44:50 UTC Last Modified: 2026-06-10T05:44:50 UTC Source: Dahua Product Security Incident PSI Trust Center Table ...

InfraTest

DO NOT DEPLOY UNLESS FOR LEARNING ABOUT AWS!!! Currently vulnerable to CVE-2024-39689. We need to update Certifi. Check dependabot before deploying. Trusting an unverified Certificate Authority can have major loss of customer trust issues...

gringotts

CVE-2020-0601 proof of concept A fun proof of concept to create your own root CA and signed certificate based on the CVE-2020-0601 vulnerability in Windows 10. The basis for the issue is the CertGetCertificateChain method improperly validated root certificate authorities. Since the search for a...

CVE-2020-0601

CVE-2020-0601 : CurveBall CVE exploitation This ruby script can be used to spoof a legit certificate authority and generat a certificate that will be considered valid for Windows computer affected by the CurveBall vulnerability. You need to get a certificate comming from the certificate authority...

test-certs-site

test-certs-site Introduction This is a purpose-built webserver for hosting the test pages required by the CA/Browser forum Baseline Requirements. They contain the following requirement: The CA SHALL host test Web pages that allow Application Software Suppliers to test their software with Subscrib...

ejbca-pqc-lab

EJBCA Pure PQC Lab — ML-DSA-65 Two-Tier PKI Hierarchy A hands-on implementation of NIST FIPS 204 ML-DSA in a two-tier PKI hierarchy using EJBCA Community Edition. 📖 Full walkthrough: Building a Post-Quantum PKI: How I Signed a Root CA and Sub CA Using ML-DSA on EJBCA What This Lab Builds A comple...

CVE-2022-1292

CVE-2022-1292 POC Description The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary comman...

CLEANSTART-2026-NT44530 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation

CVE-2026-42508 affects multiple packages. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. See references for individual vulnerability details...

CVE-2026-95208

An issue in the ConfirmNameConstraints function wolfcrypt/src/asn.c of wolfSSL v5.9.1 and v5.9.2 allows attackers to cause a Denial of Service DoS via providing crafted Certificate Authority certificates, leading to valid certificates without SAN to be incorrectly rejected by wolfSSL-based TLS...