CVE-2020-0601

CVE-2020-0601 : CurveBall CVE exploitation This ruby script can be used to spoof a legit certificate authority and generat a certificate that will be considered valid for Windows computer affected by the CurveBall vulnerability. You need to get a certificate comming from the certificate authority...

cve-2020-0601_poc

Basic Info The source code of this tool is supposed to help with understanding of CVE-2020-0601 vulnerability discovered in Windows Crypto API, see CERT's overview. The tool itself can be used to produce a certificate for an arbitrary domain which will be signed by an evil certificate authority...

CVE-2020-0601

Este repositorio no tiene un README...

twoplustwo

twoplustwo Implementing CVE-2020-0601...

chainoffools

CryptoAPI CVE-2020-0601: Windows CryptoAPI Spoofing Vulnerability exploitation. More information in our blog post. Install requirements root@kitploit: pip install -U -r requirements.txt The certificate generation works with OpenSSL verion up to 1.0.2u. CA certificate We used the USERTrust ECC...

chainoffools

CryptoAPI CVE-2020-0601: Explotación de la vulnerabilidad de suplantación de CryptoAPI de Windows. Más información en nuestro artículo de blog. Requisitos de instalación root@kitploit: pip install -U -r requirements.txt La generación de certificados funciona con OpenSSL versión hasta 1.0.2u...

CVE-2018-20250-WinRAR

CVE-2018-20250-WinRAR This resource is the author's reproduction of the WinRAR vulnerability CVE-2020-0601, implemented by combining related resources and articles. It is recommended to combine the author's blog to reproduce this vulnerability and understand the principle of malware self-start...

CVE-2020-0601

CVE-2020-0601 CVE-2020-0601 - Un exploit criptográfico de Windows...

CVE-2020-0601-spoofkey

CVE-2020-0601-spoofkey To see how to Make Spoofed Key and Signing the code REQ: openssl, main.rbwhich i uplaoded VISIT : https://twitter.com/exploitblizzard...

gringotts

CVE-2020-0601 proof of concept A fun proof of concept to create your own root CA and signed certificate based on the CVE-2020-0601 vulnerability in Windows 10. The basis for the issue is the CertGetCertificateChain method improperly validated root certificate authorities. Since the search for a...

CVE-2020-0601

CVE-2020-0601 This script is checking if the hotfix for CVE-2020-0601 is applied according to your Windows version. Furthermore it checks if there is a attempt to exploit the known vulnerability. The .xml file is for ControlUp Users. Import the XML file to your Script Based Actions as usual. All...

curveball_lua

curveballlua Repo containing lua scripts and PCAP to find CVE-2020-0601 exploit attempts via network traffic...

cve-2020-0601

Zeek test script for CVE-2020-0601 Este script puede detectar intentos de explotación de CVE-2020-0601. Realiza una comprobación simple para ver si se utiliza una curva conocida en un certificado; si no es el caso, se genera una notificación. Ejemplo de notificación en notice.log: root@kitploit:...

badecparams

BADECPARAMS Prueba de concepto para CVE-2020-0601. badecparams.py genera una autoridad de certificación intermedia que explota la vulnerabilidad y luego emite certificados Authenticode y TLS Los certificados TLS tienen Validación Extendida en Microsoft Edge e Internet Explorer. httpd.py sirve el...

CurveballCertTool

CurveballCertTool CVE-2020-0601 This automated bash script for Code Signing was created using this repository: https://github.com/ollypwn/CurveBall Please use this script for educational purposes only. Requirements openssl ruby osslsigncode Usage ./CurveballCertTool.sh -c: Create new "legit"...

CurveBall

CurveBall CVE-2020-0601 - PoC CVE-2020-0601, or commonly referred to as CurveBall, is a vulnerability in which the signature of certificates using elliptic curve cryptography ECC is not correctly verified. ECC relies on different parameters. These parameters are standardized for many curves...

CVE-2020-0601_PoC

Basado en los POC de https://github.com/ly4k/CurveBall https://research.kudelskisecurity.com/2020/01/15/cve-2020-0601-the-chainoffools-attack-explained-with-poc/ https://github.com/kudelskisecurity/chainoffools?tab=readme-ov-file REQUISITOS/SOFTWARE UTILIZADO...

curveball-plus

curveball-plus experimento de simulación de ataques Curveball CVE-2020-0601 bajo certificados implícitos ECQV con verificadores similares a Windows ¡Este archivo se actualiza constantemente!...

cve-2020-0601-utils

Este repositorio no tiene un README...

cve-2020-0601-plugin

Zeek test script para CVE-2020-0601 Este script puede detectar intentos de explotación para CVE-2020-0601. Realiza una comprobación para ver si se utiliza una curva conocida en un certificado; si no es el caso, se genera una notificación. Ejemplo de notificación en notice.log: root@kitploit:...