25 matches found
rewerse-engineering
rewerse engineering Un cliente no oficial de la API de REWE en Go y Python. Implementa los endpoints de acceso público sin autenticación que la aplicación REWE utiliza para consultar descuentos actuales Angebote, productos, mercados y retiradas de productos. Versión de APK compatible actual: 5.16...
py_certificate_extractor
pycertificateextractor 有时需要从数字签名文件中提取证书信息。 当这种情况发生时，使用此工具，你可以轻松完成。 如果有任何变更或所需的新功能，请告知。 功能 从数字签名文件中提取证书信息并导出（另存为）证书文件。仅此而已。 v1.0.0 https://github.com/password123456/digitalsignedpefilecertificateextractor/blob/main/Changes 预览...
cipherscan
CipherScan CipherScan 测试给定目标上所有主要 SSL 和 TLS 版本的密码套件排序。它还提取一些证书信息、TLS 选项、OCSP 装订等。CipherScan 是 openssl sclient 命令行的封装。 CipherScan 旨在运行于所有类 Unix 系统。它自带针对 Linux/64 和 Darwin/64 的 OpenSSL 构建。在其他平台上，它将使用操作系统提供的 openssl 版本（可能支持的密码有限），或通过 -o 命令行标志提供您自己的版本。 示例 基本测试： root@kitploit: $ ./cipherscan google.co...
Driver-SoulExtraction
SoulExtraction SoulExtraction es una biblioteca de controladores de Windows para extraer información de certificados en controladores de Windows Compilar Visual Studio 2022 & WDK10 llvm-msvc enlace Créditos linux BackEngineerLab https://git.back.engineering/gmh5225/Driver-SoulExtraction Algunas...
certificate-ripper
Certificate Ripper 🔐 A CLI tool to extract server certificates...
rewerse-engineering v1.4.0
rewerse engineering An unofficial REWE API client in Go and Python. It implements the publicly accessible unauthenticated endpoints the REWE app uses for querying current discounts Angebote, products, markets and recalls. Current supported APK version: 5.16.2 as of 06.08.26 !CAUTION The...
CVE-2026-33753
A flaw was found in rfc3161-client, a Python library implementing the Time-Stamp Protocol TSP. This authorization bypass vulnerability allows a remote attacker to impersonate a trusted TimeStamping Authority TSA. The flaw exists in the library's signature verification process, specifically in how...
rfc3161-client Has Improper Certificate Validation
Summary An Authorization Bypass vulnerability in rfc3161-client's signature verification allows any attacker to impersonate a trusted TimeStamping Authority TSA. By exploiting a logic flaw in how the library extracts the leaf certificate from an unordered PKCS7 bag of certificates, an attacker ca...
GHSA-3XXC-PWJ6-JGRJ rfc3161-client Has Improper Certificate Validation
Summary An Authorization Bypass vulnerability in rfc3161-client's signature verification allows any attacker to impersonate a trusted TimeStamping Authority TSA. By exploiting a logic flaw in how the library extracts the leaf certificate from an unordered PKCS7 bag of certificates, an attacker ca...
CVE-2026-33753 Improper Certificate Validation in rfc3161-client
rfc3161-client is a Python library implementing the Time-Stamp Protocol TSP described in RFC 3161. Prior to 1.0.6, an Authorization Bypass vulnerability in rfc3161-client's signature verification allows any attacker to impersonate a trusted TimeStamping Authority TSA. By exploiting a logic flaw i...
CVE-2026-0754
An embedded test key and certificate could be extracted from a Poly Voice device using specialized reverse engineering tools. This extracted certificate could be accepted by a SIP service provider if the service provider does not perform proper validation of the device certificate...
CVE-2026-0754
An embedded test key and certificate could be extracted from a Poly Voice device using specialized reverse engineering tools. This extracted certificate could be accepted by a SIP service provider if the service provider does not perform proper validation of the device certificate...
SIP Service Providers – Possible Impersonation of Poly Voice Device
An embedded test key and certificate could be extracted from a Poly Voice device using specialized reverse engineering tools. This extracted certificate could be accepted by a SIP service provider if the service provider does not perform proper validation of the device certificate. Service...
EUVD-2025-199605
An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO3.7L3.1.02-240517 allowing attackers to exctract the SSL Private Key, CA Certificate, SSL Certificate, and Client Certificates in .pem format in firmware in etc folder...
EUVD-2019-5553
Malware in sbrugna...
CVE-2019-14334
An issue was discovered on D-Link 6600-AP, DWL-3600AP, and DWL-8610AP Ax 4.2.0.14 21/03/2019 devices. There is post-authenticated Certificate and RSA Private Key extraction through an insecure sslcert-get.cgi HTTP command...
SSRF in sliver teamserver
Summary The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the sliver teamserver without verifying if the operator instructed the implant to do so Reproduction steps Run server wget...
CVE-2022-28371
On Verizon 5G Home LVSKIHP InDoorUnit IDU 3.4.66.162 and OutDoorUnit ODU 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a static certificate for access control. This certificate is embedded in the firmware, and is identical across the fleet of devices. An attacker need only download...
Verizon 5G Home LVSKIHP 信任管理问题漏洞
The Verizon 5G Home LVSKIHP is an all-in-one integrated modem and router from Verizon USA. It provides access to Verizon Wireless 5G wireless home Internet service. A security vulnerability exists in the Verizon 5G Home LVSKIHP InDoorUnit IDU version 3.4.66.162 and OutDoorUnit ODU version...
CVE-2019-14334
An issue was discovered on D-Link 6600-AP, DWL-3600AP, and DWL-8610AP Ax 4.2.0.14 21/03/2019 devices. There is post-authenticated Certificate and RSA Private Key extraction through an insecure sslcert-get.cgi HTTP command...