fulcio

Fulcio A Free-to-Use CA For Code Signing Fulcio is a free-to-use certificate authority for issuing code signing certificates for an OpenID Connect OIDC identity, such as email address. Fulcio only issues short-lived certificates that are valid for 10 minutes. Public Instance Fulcio is in General...

test-certs-site

test-certs-site Introduction This is a purpose-built webserver for hosting the test pages required by the CA/Browser forum Baseline Requirements. They contain the following requirement: The CA SHALL host test Web pages that allow Application Software Suppliers to test their software with Subscrib...

PathFinder

Web Path Finder Web Path Finder es un programa en Python que proporciona información sobre un sitio web. Recupera varios detalles como el título de la página, la fecha de la última actualización, información DNS, subdominios, nombres de cortafuegos, tecnologías utilizadas, información del...

py_certificate_extractor

pycertificateextractor A veces es necesario extraer información de certificados de un archivo con firma digital. Utiliza esta herramienta cuando eso ocurra. Puedes completarlo fácilmente. Házmelo saber si se requieren cambios o si necesitas funciones adicionales. Características Extrae la...

ephemera

Ephemera : Zero-Trust SSH Certificate Authority Ephemera is a lightweight, self-hosted SSH Certificate Authority designed to enforce Zero-Trust access for infrastructure. It replaces static SSH keys with short-lived certificates, integrates hardware-backed WebAuthn MFA, and maintains...

CVE-2026-86247

A flaw was found in Apache Tomcat Native. A race condition within a thread allows client certificate verification requirements to be down-graded for certain configurations. This could enable an attacker to bypass stricter authentication requirements, potentially leading to unauthorized access or...

CVE-2022-26923

CVE-2022-26923 – Certifried Exploit AD CS Abuse Automated exploitation of CVE-2022-26923 Certifried , enabling privilege escalation through abuse of Active Directory Certificate Services AD CS, with an automatic fallback to Resource-Based Constrained Delegation RBCD, ultimately dumping the NTLM...

CVE-2022-30216

CVE-2022-30216 A Zeek package which raises notices for attempts and exploits of CVE-2022-30216, a technique used against Windows Server to force an NTLM authorization to an arbitrary server. An attacker can reuse the NTLM token to generate a client certificate, enabling them to request a Kerberos...

rustbuster

rustbuster A Comprehensive Web Fuzzer and Content Discovery Tool Introduction Check the blog post: Introducing Rustbuster — A Comprehensive Web Fuzzer and Content Discovery Tool Download You can download prebuilt binaries from here. Installation root@kitploit: installrustbuster echo "Installing...

CVE-2026-101916

A flaw was found in grpc-js. In configurations where client certificates are optional, the authentication context lookup fails to distinguish between authorized and unauthorized peer certificates. A remote attacker can exploit this vulnerability by presenting an untrusted certificate, allowing th...

Shwmae

Shwmae Shwmae shuh-my is a Windows Hello abuse tool that was released during DEF CON 32 as part of the Abusing Windows Hello Without a Severed Hand talk. The purpose of the tool is to abuse Windows Hello from a privileged user context. root@kitploit: Shwmae Copyright C 2024 Shwmae enum Default Ve...

clone-cert

clone-cert.sh Este es un script de shell simple que recupera el certificado X.509 asociado a un puerto TCP envuelto en TLS y utiliza openssl para crear un certificado similar reemplazando la clave pública y corrigiendo la firma. Esto es particularmente útil si desea demostrar por qué los...

CVE-2026-8932

🚨 CVE-2026-8932 - The Oldest libcurl Security Bug Incomplete mTLS Configuration Matching in libcurl The oldest security vulnerability ever fixed in libcurl—remaining unnoticed for over 25 years. 📖 Overview CVE-2026-8932 is a security vulnerability in libcurl where the library may incorrectly reus...

badecparams

BADECPARAMS Proof of Concept for CVE-2020-0601. badecparams.py generates an intermediate certificate authority that exploits the vulnerability, then issues Authenticode and TLS certificates. The TLS certificates have Extended Validation in Microsoft Edge and Internet Explorer. httpd.py serves the...

mkchain

mkchain Herramienta de código abierto para ayudarte a construir una cadena de certificados SSL válida. Descripción • Cómo usar • Parámetros • Cómo funciona • Requisitos • Otros • Licencia Descripción Es una herramienta de código abierto para ayudarte a construir una cadena de certificados SSL...

certdepot

Certificate Depot A free online tool for generating self-signed SSL/TLS certificates in seconds. No signup required. Website: cert-depot.com Features Generate self-signed certificates with RSA 2048/4096 or ECDSA P-256/P-384 keys Download as ZIP PEM key + certificate or PFX PKCS12 Automatic SAN...

CloudRecon

CloudRecon ¡Encuentra activos de certificados! ¡Escanea la web! Herramienta presentada en @DEFCON 31 POR Gunnar Andrews @G0LDENinfosec Jason Haddix @Jhaddix...

universal-flutter-ssl-pinning

universal-flutter-ssl-pinning Ingeniería inversa de libflutter.so con PyGhidra para localizar la función de verificación del certificado SSL, luego genera scripts de omisión listos para usar tanto para Frida como para Renef. Cómo funciona 1. PyGhidra carga libflutter.so sin interfaz gráfica y...

CertificateDsc

CertificateDsc Code of Conduct This project has adopted this code of conduct. Releases For each merge to the branch main a preview release will be deployed to PowerShell Gallery. Periodically a release version tag will be pushed which will deploy a full release to PowerShell Gallery. Contributing...

gringotts

CVE-2020-0601 proof of concept A fun proof of concept to create your own root CA and signed certificate based on the CVE-2020-0601 vulnerability in Windows 10. The basis for the issue is the CertGetCertificateChain method improperly validated root certificate authorities. Since the search for a...