175 matches found
CVE-2020-0601-EXP
CVE-2020-0601-EXP 这资源是作者复现微软签字证书漏洞CVE-2020-0601，结合相关资源及文章实现。推荐大家结合作者博客，理解ECC算法、Windows验证机制，并尝试自己复现可执行文件签名证书和HTTPS劫持的例子。作为网络安全初学者，自己确实很菜，但希望坚持下去，加油！ 这篇文章将分享微软证书漏洞CVE-2020-0601，并讲解ECC算法、Windows验证机制，复现可执行文件签名证书的例子。希望这篇基础文章对您有所帮助，更希望大家提高安全意识，学会相关防范，也欢迎大家讨论。 网络安全自学篇 四十六.微软证书漏洞CVE-2020-0601...
cve-2020-0601_poc
基本信息 此工具源代码旨在帮助理解 Windows Crypto API 中发现的 CVE-2020-0601 漏洞，请参阅 CERT 的概述。 该工具本身可用于为任意域名生成证书，该证书将由恶意证书颁发机构签名。此工具生成的恶意 CA 与命令行提供的公钥相同。 当易受攻击的 Windows 系统的网络浏览器访问此证书时，该证书将被视为受信任的证书。因此，位置合适的网络攻击者可以拦截受害者的流量。 用法简述 启动工具并提供受信任 Windows 证书的路径： ./cve-2020-0601poc /path/to/USERTrustECCCertificationAuthority.cr...
CVE-2020-0601
CVE-2020-0601 : CurveBall CVE 利用 该 Ruby 脚本可用于伪造合法证书颁发机构，并生成一个在受 CurveBall 漏洞影响的 Windows 计算机上被视为有效的证书。 你需要获取一个来自你想伪造的证书颁发机构的证书。 然后，你可以使用以下命令运行该脚本： ruby gen-rogue-cert.rb -in=ca.crt -subj="/C=France/ST=IleDeFrance/L=Paris/O=YoannDqr" -out=certrb.p12 -exe=DoNotDebugMe.exe -sh -type=exe -sh | bash...
ForgeCert
ForgeCert ForgeCertは、BouncyCastle C APIと、侵害した認証局（CA）の証明書と秘密鍵を使用して、Active Directoryに対して認証可能な任意のユーザーの証明書を偽造します。 この攻撃は、私たちの「Certified Pre-Owned」ホワイトペーパーにおいてDPERSIST1として体系化されています。このコードベースは、ホワイトペーパー公開から約45日後にリリースされました。 @tifkinはForgeCertの主な作者です。 @tifkinと@harmj0yは、関連するActive...
-CVE-2020-0601-ECC---EXPLOIT
CurveBall CVE-2020-0601 - ECC/Po2 漏洞利用 CVE-2020-0601，通常被称为CurveBall，是一个漏洞，其中使用椭圆曲线密码学（ECC）的证书签名并未被正确验证。 ECC依赖于不同的参数。许多曲线使用标准化参数。然而，微软并没有像他们那样的天才一样检查所有这些参数……参数 G（生成元）并未被检查，因此攻击者可以提供自定义的生成元，这样当微软尝试验证证书是否来自受信任的CA时，它只会查找匹配的公钥，然后嘣，它就会使用证书中的生成元。 NSA清楚地解释了此漏洞的破坏性影响以及更多信息，请参见此处。准备好就开始吧！...
CurveBall
CurveBall CVE-2020-0601 - PoC CVE-2020-0601：又称 CurveBall 或 ChainOffFools，是 Microsoft CryptoApi（特别是 Crypt32.dll）中的一个漏洞，证书的椭圆曲线签名（ECDSA）未被正确验证。 有一篇非常好的博客文章这里，其中非常清楚地解释了这个漏洞。 这仅应用于教育和研究目的！ 使用方法 向控制台应用程序提供椭圆曲线证书的路径。 CurveBall.exe 'PathToCA.cer' 该程序将输出一个 .p12 文件，其中包含一个与原始证书具有相同公钥和序列号的证书，包括一个密钥。 可以使用...
CVE-2026-50751
CVE-2026-50751 — PoC Certificate authentication bypass in Check Point Remote-Access VPN IKEv1. Description CVE-2026-50751 is an authentication bypass in Check Point's iked process, present in versions R81.10, R82, and R82.10 without hotfix sk185033. The flaw allows authenticating as any provision...
CVE-2026-73251
A flaw was found in Mongoose. When configured with a Certificate Authority CA bundle, the built-in Transport Layer Security TLS implementation matches server certificates by name without verifying their cryptographic signatures. A remote network attacker can exploit this vulnerability by presenti...
Linux Distros Unpatched Vulnerability : CVE-2026-89102
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate...
DEBIAN-CVE-2026-89102
In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate forgery. When a wolfSSL client enables OCSP stapling with the HAVECERTIFICATESTATUSREQUESTV2 feature and calls wolfSSLUseOCSPStaplingV2ssl...
AZL-105188 CVE-2026-89102 affecting package mariadb 10.11.19-1
In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate forgery. When a wolfSSL client enables OCSP stapling with the HAVECERTIFICATESTATUSREQUESTV2 feature and calls wolfSSLUseOCSPStaplingV2ssl...
CVE-2026-89102
In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate forgery. When a wolfSSL client enables OCSP stapling with the HAVECERTIFICATESTATUSREQUESTV2 feature and calls wolfSSLUseOCSPStaplingV2ssl...
UBUNTU-CVE-2026-89102
In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate forgery. When a wolfSSL client enables OCSP stapling with the HAVECERTIFICATESTATUSREQUESTV2 feature and calls wolfSSLUseOCSPStaplingV2ssl...
CVE-2026-89102
In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate forgery. When a wolfSSL client enables OCSP stapling with the HAVECERTIFICATESTATUSREQUESTV2 feature and calls wolfSSLUseOCSPStaplingV2ssl...
EUVD-2026-87923
In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate forgery. When a wolfSSL client enables OCSP stapling with the HAVECERTIFICATESTATUSREQUESTV2 feature and calls wolfSSLUseOCSPStaplingV2ssl...
CVE-2026-89102 OCSP stapling v2 multi accepts non-CA chain certificates as issuers
In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate forgery. When a wolfSSL client enables OCSP stapling with the HAVECERTIFICATESTATUSREQUESTV2 feature and calls wolfSSLUseOCSPStaplingV2ssl...
CVE-2026-89102
WolfSSL versions 5.7.2 through 5.9.2 contain a client-side implementation flaw in RFC 6961 regarding multiple OCSP response stapling. When the HAVE_CERTIFICATE_STATUS_REQUEST_V2 feature is enabled and the client calls wolfSSL_UseOCSPStaplingV2 with WOLFSSL_CSR2_OCSP_MULTI , the client fails to ve...
CVE-2026-89102
In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate forgery. When a wolfSSL client enables OCSP stapling with the HAVECERTIFICATESTATUSREQUESTV2 feature and calls wolfSSLUseOCSPStaplingV2ssl...
CVE-2026-89102 OCSP stapling v2 multi accepts non-CA chain certificates as issuers
In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate forgery. When a wolfSSL client enables OCSP stapling with the HAVECERTIFICATESTATUSREQUESTV2 feature and calls wolfSSLUseOCSPStaplingV2ssl...
CVE-2026-89102 OCSP stapling v2 multi accepts non-CA chain certificates as issuers
In wolfSSL versions 5.7.2 through 5.9.2 there is a client-side implementation flaw in RFC 6961, multiple OCSP response stapling, which can lead to certificate forgery. When a wolfSSL client enables OCSP stapling with the HAVECERTIFICATESTATUSREQUESTV2 feature and calls wolfSSLUseOCSPStaplingV2ssl...