Lucene search
+L

215 matches found

Kitploit
Kitploit
added 2026/08/31 4:35 a.m.4 views

sslscan

SSLScan SSLScan は、HTTPS などの SSL サービスに問い合わせを行い、サポートされている暗号スイートを特定します。SSLScan は、簡潔で軽量かつ高速になるように設計されています。 出力には、SSL サービスの優先暗号スイート、証明書が含まれ、テキスト形式と XML 形式で出力されます。 機能 SSL サービスへの問い合わせ 対応暗号化プロトコル: SSLv2、SSLv3、TLS 1.0、TLS 1.1、TLS 1.2 使用する OpenSSL ライブラリに依存 FTP、IMAP、POP3、SMTP、XMPP での STARTTLS サポート HTTP 接続の実行...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/30 2:56 p.m.4 views

CVE-2017-3730

CVE-2017-3730 OpenSSL CVE-2017-3730 概念実証 OpenSSH をプロキシとして使用し、DH 値をその場でパッチする DHE-PSK-WITH-AES-256-GCM-SHA384 のような暗号スイートを使用して SSL サーバーを作成します。ここでは 10.0.2.2 のポート 8899 で実行するとします。 openssh-7.4p1 を取得します パッチを適用します ビルドします 次のように実行します: root@kitploit: ./ssh -vvv -N -D 1085 -o TCPKeepAlive=yes -o...

7.5CVSS7.1AI score0.55294EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/27 6:49 p.m.3 views

tlsenum

tlsenum tlsenum è uno strumento di enumerazione TLS da riga di comando che tenta di enumerare quali suite di cifratura TLS un server supporta e di elencarle in ordine di priorità. Funziona inviando messaggi TLS ClientHello e analizzando le risposte ServerHello del server. tlsenum presume che sia ...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/27 1:06 a.m.3 views

CosmicRakp

CosmicRakp Sommario Introduzione CVE-2013-4786 Installazione Utilizzo Crediti Licenza Introduzione CosmicRakp è un potente strumento scritto in Go che consente a red teamer e penetration tester di estrarre gli hash IPMI. Questo progetto mira a essere efficiente, veloce e facile da usare...

7.8CVSS8.1AI score0.7857EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/08/27 12:19 a.m.3 views

CryptoLyzer

CryptoLyzer is a fast, flexible, and comprehensive server cryptographic protocol TLS, SSL, SSH, IKE, DNSSEC and related setting HTTP headers, DNS records analyzer and fingerprint JA3, HASSH generator with and interfaces...

5.4AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/27 12:19 a.m.4 views

CryptoLyzer

CryptoLyzer is a fast, flexible, and comprehensive server cryptographic protocol TLS, SSL, SSH, IKE, DNSSEC and related setting HTTP headers, DNS records analyzer and fingerprint JA3, HASSH generator with API and CLI interfaces. Use CryptoLyzer when you need to audit TLS/SSL cipher suites — unlik...

5.5AI score
SaveExploits0References2
OSV
OSV
added 2026/07/27 4:17 p.m.6 views

AZL-94196 CVE-2026-55953 affecting package erlang for versions less than 26.2.5.21-4

The Erlang/OTP ssl TLS 1.2 and earlier and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client in ClientHello. The client-side tlshandshake:hello/5 handler validates the negotiated protocol version and the downgrade...

9.1CVSS5.9AI score0.00234EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/27 3:21 p.m.12 views

CVE-2026-55953

The Erlang/OTP ssl TLS 1.2 and earlier and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client in ClientHello. The client-side tlshandshake:hello/5 handler validates the negotiated protocol version and the downgrade...

9.1CVSS5.5AI score0.00234EPSS
SaveExploits0References8Affected Software1
Vulnrichment
Vulnrichment
added 2026/07/27 3:21 p.m.10 views

CVE-2026-55953 TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication

The Erlang/OTP ssl TLS 1.2 and earlier and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client in ClientHello. The client-side tlshandshake:hello/5 handler validates the negotiated protocol version and the downgrade...

9.1CVSS5.4AI score0.00234EPSS
SaveExploits0References7
CVE
CVE
added 2026/05/11 5:52 a.m.51 views

CVE-2026-1677

CVE-2026-1677 concerns Zephyr: sockets created with IPPROTO_TLS_1_3 may still negotiate TLS 1.2 when both TLS versions are enabled, because socket‑level protocol selection isn’t propagated to mbedTLS (e.g., via mbedtls_ssl_conf_min_tls_version). The ClientHello can advertise both TLS 1.2 and TLS ...

5.3CVSS5.8AI score0.00243EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/11 12:00 a.m.34 views

PT-2026-39574

Zephyr sockets created with IPPROTO TLS 1 3 can still negotiate a TLS 1.2 connection when both TLS versions are enabled in Kconfig, because the socket-level protocol selection is not propagated to mbedTLS e.g. via mbedtls ssl conf min tls version. The ClientHello advertises both versions and the...

5.3CVSS5.8AI score0.00243EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
added 2026/02/21 12:23 a.m.9 views

SUSE CVE-2026-27017

uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting resistance while still using it for the handshake. Versions 1.6.0 through 1.8.0 contain a fingerprint mismatch with Chrome when using GREASE ECH, related to cipher suite selection. When Chrome selects the preferred...

5.3CVSS5.7AI score0.00154EPSS
SaveExploits0References4
OSV
OSV
added 2026/02/20 3:16 a.m.14 views

UBUNTU-CVE-2026-27017

uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting resistance while still using it for the handshake. Versions 1.6.0 through 1.8.0 contain a fingerprint mismatch with Chrome when using GREASE ECH, related to cipher suite selection. When Chrome selects the preferred...

5.3CVSS5.8AI score0.00154EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/02/20 3:16 a.m.9 views

CVE-2026-27017

uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting resistance while still using it for the handshake. Versions 1.6.0 through 1.8.0 contain a fingerprint mismatch with Chrome when using GREASE ECH, related to cipher suite selection. When Chrome selects the preferred...

5.3CVSS5.8AI score0.00154EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/02/20 2:47 a.m.6 views

CVE-2026-27017 uTLS has a Chrome Parrot Fingerprint Vulnerability due to GREASE ECH Cipher Suite Mismatch

uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting resistance while still using it for the handshake. Versions 1.6.0 through 1.8.0 contain a fingerprint mismatch with Chrome when using GREASE ECH, related to cipher suite selection. When Chrome selects the preferred...

2.3CVSS5.5AI score0.00154EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/20 2:47 a.m.4 views

CVE-2026-27017

uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting resistance while still using it for the handshake. Versions 1.6.0 through 1.8.0 contain a fingerprint mismatch with Chrome when using GREASE ECH, related to cipher suite selection. When Chrome selects the preferred...

2.3CVSS5.5AI score0.00154EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/02/20 2:47 a.m.57 views

CVE-2026-27017

CVE-2026-27017 affects the uTLS fork of crypto/tls ( Versions 1.6.0–1.8.0 ) with GREASE ECH, causing a fingerprint mismatch with Chrome due to inconsistent cipher-suite selection between the outer ClientHello and ECH. Specifically, uTLS hardcodes AES for the outer cipher suite while randomly sele...

5.3CVSS5.5AI score0.00154EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2026/02/20 2:47 a.m.37 views

CVE-2026-27017 uTLS has a Chrome Parrot Fingerprint Vulnerability due to GREASE ECH Cipher Suite Mismatch

uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting resistance while still using it for the handshake. Versions 1.6.0 through 1.8.0 contain a fingerprint mismatch with Chrome when using GREASE ECH, related to cipher suite selection. When Chrome selects the preferred...

2.3CVSS5.4AI score
SaveExploits0References3
Cvelist
Cvelist
added 2026/02/20 2:47 a.m.32 views

CVE-2026-27017 uTLS has a Chrome Parrot Fingerprint Vulnerability due to GREASE ECH Cipher Suite Mismatch

uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting resistance while still using it for the handshake. Versions 1.6.0 through 1.8.0 contain a fingerprint mismatch with Chrome when using GREASE ECH, related to cipher suite selection. When Chrome selects the preferred...

2.3CVSS0.00154EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/18 12:00 a.m.15 views

PT-2026-20995

Name of the Vulnerable Software and Affected Versions uTLS versions 1.6.0 through 1.8.0 Description uTLS is a customized version of crypto/tls designed for fingerprinting resistance during the handshake process. Versions 1.6.0 through 1.8.0 exhibit a fingerprint mismatch with Chrome when utilizin...

5.3CVSS5.2AI score0.00154EPSS
SaveExploits0
Rows per page
Query Builder