49 matches found
curveball-plus
curveball-plus simulation experiment of Curveball CVE-2020-0601 attacks under ECQV implicit certificates with Windows-like verifiers This file is constantly updated!...
CVE-2020-0601
CVE-2020-0601 CVE-2020-0601 - A Windows Crypto Exploit...
gringotts
CVE-2020-0601 proof of concept A fun proof of concept to create your own root CA and signed certificate based on the CVE-2020-0601 vulnerability in Windows 10. The basis for the issue is the CertGetCertificateChain method improperly validated root certificate authorities. Since the search for a...
CVE-2020-0601
This repository does not have a README...
cve-2020-0601
Zeek test script for CVE-2020-0601 This script can detect exploit attempts for CVE-2020-0601. It performs a simple check to see if a known curve is used in a certificate - if this is not the case a notice is raised. Example notice in notice.log: 1579043477.791522 CHhAvVGS1DHFjwGM9 192.241.209.49...
CVE-2020-0601
CVE-2020-0601 Remote Code Execution Exploit CVE-2020-0601- Citrix Application Delivery Controller & Gateway...
CVE-2020-0601
CVE-2020-0601 : CurveBall CVE exploitation This ruby script can be used to spoof a legit certificate authority and generat a certificate that will be considered valid for Windows computer affected by the CurveBall vulnerability. You need to get a certificate comming from the certificate authority...
Windows10_Cumulative_Updates_PowerShell
Just use this - https://github.com/aaronparker/LatestUpdate Updates everything if ENTERPRISE or EDU Win 10. If PRO only 1809 , 1903 & 1909 are patched. Windows10CumulativeUpdatesPowerShell This powershell script can be ran on a system and will identify if a system is patched for CVE-2020-0601...
CurveBall
CurveBall CVE-2020-0601 - PoC CVE-2020-0601, or commonly referred to as CurveBall, is a vulnerability in which the signature of certificates using elliptic curve cryptography ECC is not correctly verified. ECC relies on different parameters. These parameters are standardized for many curves...
badecparams
BADECPARAMS Proof of Concept for CVE-2020-0601. badecparams.py generates an intermediate certificate authority that exploits the vulnerability, then issues Authenticode and TLS certificates. The TLS certificates have Extended Validation in Microsoft Edge and Internet Explorer. httpd.py serves the...
cve-2020-0601-plugin
Zeek test script for CVE-2020-0601 This script can detect exploit attempts for CVE-2020-0601. It performs a check to see if a known curve is used in a certificate - if this is not the case a notice is raised. Example notice in notice.log: 1579043477.791522 CHhAvVGS1DHFjwGM9 192.241.209.49 46110...
Awesome-CVE-2020-0601
Awesome-CVE-2020-0601 ✔ 😂 An awesome curated list of repos for CVE-2020-0601. PoC Ruby ollypwn/CVE-2020-0601 https://github.com/ollypwn/cve-2020-0601 Python kudelskisecurity/chainoffools https://github.com/kudelskisecurity/chainoffools Python saleemrashid/badecparams...
cve-2020-0601_poc
Basic Info The source code of this tool is supposed to help with understanding of CVE-2020-0601 vulnerability discovered in Windows Crypto API, see CERT's overview. The tool itself can be used to produce a certificate for an arbitrary domain which will be signed by an evil certificate authority...
CVE-2018-20250-WinRAR
CVE-2018-20250-WinRAR This resource is the author's reproduction of the WinRAR vulnerability CVE-2020-0601, implemented by combining related resources and articles. It is recommended to combine the author's blog to reproduce this vulnerability and understand the principle of malware self-start...
CurveBallDetection
CurveBallDetection Resources related to CurveBall CVE-2020-0601 detection. See https://medium.com/zengo/hitting-a-curveball-like-a-pro-129c1dca427c...
CVE-2020-0601
This repository does not have a README...
CurveballCertTool
CurveballCertTool CVE-2020-0601 This automated bash script for Code Signing was created using this repository: https://github.com/ollypwn/CurveBall Please use this script for educational purposes only. Requirements openssl ruby osslsigncode Usage ./CurveballCertTool.sh -c: Create new "legit"...
CVE-2020-0601
CVE-2020-0601 This script is checking if the hotfix for CVE-2020-0601 is applied according to your Windows version. Furthermore it checks if there is a attempt to exploit the known vulnerability. The .xml file is for ControlUp Users. Import the XML file to your Script Based Actions as usual. All...