ibmsecurity

IBM 示例代码 此仓库包含用于通过各自 REST API 管理 IBM 安全设备的 Python 代码。 ISAM 设备的代码最为成熟。 ISDS 设备的代码正在开发中。 ISVG 设备的代码是全新的（仅针对 10.0.1.0 及更高版本测试过）。 要求 此软件包需要 Python v3.9 或更高版本。 以下 Python 软件包是必需的： 1. requests - 用于发起 REST API 调用 2. PyYAML - 用于示例代码的运行 3. jmespath - 示例代码所需 以下 Python 软件包是可选的： 1. cryptography - 用于对证书执行操作（用于...

sslnuke

sslnuke —— 未经验证的 SSL 并不安全！ 我们都不止一次地听说过，未经验证的 SSL 并不安全。 如果 SSL 连接没有使用缓存的证书进行验证，那么任何攻击者都可以轻易地劫持它。 因此，在 2013 年，人们可能会认为我们已经彻底解决了这个问题。 浏览器会缓存证书，并在站点提供自验证证书（不应被信任）时非常醒目地警告用户， 浏览器厂商基本上已经解决了这个问题。然而，HTTPS 并不是唯一使用 SSL 的协议。 不幸的是，许多其他协议的客户端默认不进行验证，即使它们进行了验证，也无法保证证书的安全传输。 毕竟，有多少人愿意为自己的 FTPS 服务器花 50 美元购买 SSL...

universal-flutter-ssl-pinning

universal-flutter-ssl-pinning 使用 PyGhidra 对 libflutter.so 进行逆向工程，定位 SSL 证书验证函数，然后生成即开即用的绕过脚本，适用于 Frida 和 Renef 。 工作原理 1. PyGhidra 以无头模式加载 libflutter.so，并扫描所有已定义的字符串，寻找 sslclient 2. 解析该字符串的交叉引用，定位到其所属的函数 3. 对每个函数进行反编译，获取准确的参数个数 4. 选择具有 3 个参数的函数——这就是 sslcryptox509sessionverifycertchain 5. 将其 RVA...

pwnage24mtk

pwnage24mtk 针对MTK设备的证书利用。MTK证书验证过程中存在逻辑缺陷。类似于CVE-2023-20696。 已修补。 CVE-2023-20696 CVE-2025-20730 架构检测存在一些问题。等我有空时需要修复。或者任何人都可以提交pull request。 这是一个vibe编码的版本，我稍后会重写。但目前是可用的。 免责声明 本项目仅用于研究目的。 请确保在使用前已获得授权。 不允许用于非法用途。 不允许使用此漏洞提供付费服务。 对于MTK设备，preloader验证bl2ext/lk/atf，然后跳转到该镜像。 这些镜像是使用ASN.1证书签名的。...

CURL-CVE-2026-80230 OpenSSL pinning bypass

When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...

Check Point IKEv1 Remote-Access VPN - Certificate Authentication Bypass

IKEv1 key exchange contains a broken authentication caused by logic flow weakness in Remote Access and Mobile Access certificate validation, letting unauthenticated remote attackers bypass user authentication and establish VPN connections without valid passwords, exploit requires use of deprecate...

poc-CVE-2026-0073

CVE-2026-0073 PoC Wireless ADB TLS Auth Bypass Dieses Verzeichnis enthält einen Python Proof-of-Concept für CVE-2026-0073. Das Skript wurde unter Verwendung KI-gestützter Codegenerierungstechniken erstellt. Zusammenfassung CVE-2026-0073 ist ein logisches Problem in der ADB-Daemon-Zertifikatsprüfu...

CVE-2026-55856

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, when a Java application connects with sslMode=verify-full or sslMode=verify-ca, supplies a password, and does not configure serverSslCert or trustStore,...

nogotofail

nogotofail Nogotofail è uno strumento di test della sicurezza di rete progettato per aiutare sviluppatori e ricercatori di sicurezza a individuare e correggere connessioni TLS/SSL deboli e traffico in chiaro sensibile su dispositivi e applicazioni in modo flessibile, scalabile e potente. Include...

p5-ssl-tools

Raccolta di Strumenti SSL Questo repository contiene vari strumenti, pensati per eseguire il debug o analizzare problemi relativi a SSL/TLS. Analisi dello stato di TLS analyze-ssl.pl verifica il supporto per varie versioni di SSL/TLS verifica quali cifrari sono supportati verifica il certificato...

CVE-2026-54876

A flaw was found in OpenSSL. A malicious TLS Transport Layer Security server can exploit this vulnerability by sending a specially crafted OCSP Online Certificate Status Protocol response during the X.509 certificate chain verification process. This can lead to a memory leak in client application...

CVE-2026-19854

CVE-2026-19854 affects the ClickHouse plugin (Grafana) when it uses the Native protocol (the default) together with PDC or secure SOCKS . The root cause is that the underlying connection library requests TLS but then ignores it, resulting in plaintext communication with ClickHouse. Concretely, us...

CVE-2026-19854 CVE-2026-19854 CVE Record

When the ClickHouse plugin uses Native protocol the default with PDC or secure SOCKS, it asks for TLS but the connection library ignores that and talks to ClickHouse in the clear. Username, password, queries, and results can be read on the hop after the proxy. The server certificate is never...

poc-CVE-2026-0073

CVE-2026-0073 PoC Wireless ADB TLS Auth Bypass Dieses Verzeichnis enthält einen Python-Proof-of-Concept für CVE-2026-0073. Das Skript wurde mit KI-gestützten Codegenerierungstechniken erstellt. Zusammenfassung CVE-2026-0073 ist ein Logikfehler in der Zertifikatsprüfung des ADB-Daemons...

CVE-2026-81034

Netmaker disables certificate verification on the connection to the configured mail server. The sender in pro/email/smtp.go assigns a TLS configuration whose skip-verify field is set to true unconditionally, directly beneath a comment stating that the setting should be false in production. No...

crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries

A flaw was found in the crypto/x509 package of golang. This vulnerability allows a remote attacker to cause a Denial of Service DoS by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name SAN entries. The certificate verification process, specifical...

Astra Linux – Vulnerability in requests

Requests is an HTTP library. Prior to version 2.32.0, when making requests through a Requests Session, if the first request was made with verify=False to disable certificate verification, all subsequent requests to the same host would continue to ignore certificate verification, regardless of...

Astra Linux – Vulnerability in PostgresSQL 11

When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries during the initial establishment of a connection, despite the use of SSL certificate verification and encryption...

Astra Linux – Vulnerability in Twisted

In words.protocols.jabber.xmlstream in Twisted through version 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to intercept connections...

Astra Linux – Vulnerability in curl

When performing multi-threaded LDAPS transfers LDAP over TLS with libcurl, changing TLS options in one thread will inadvertently change them globally, and thus may also affect other concurrently running transfers. Disabling certificate verification for a specific transfer can unintentionally...