153 matches found
Curveball
Curveball A PoC for CVE-2020-0601. A detailed blog post can be found here. This exploit allows you to create a fake trusted certificate by abusing how CryptoAPI handles certain parameters on ECC based certificates. Setup Clone the repository and open it in Visual Studio 2019. Switch to Release an...
CurveBall
CurveBall CVE-2020-0601 - PoC CVE-2020-0601: Also known as CurveBall or ChainOffFools, is a vulnerability in the Microsoft CryptoApi specificly in Crypt32.dll where elliptic curve signatures ECDSA of certificates is not correctly verified. There is a very nice blog post here which explains the...
CVE-2020-0601
CVE-2020-0601 PoC for CVE-2020-0601- Windows CryptoAPI Crypt32.dll POC: https://github.com/ollypwn/CurveBall On kali: 1.Make PKCS12 file openssl req -new -x509 -key spoofedca.key -out spoofedca.crt openssl ecparam -name secp384r1 -genkey -noout -out Microsoft.key openssl req -new -key Microsoft.k...
chainoffools
CryptoAPI CVE-2020-0601: Explotación de la vulnerabilidad de suplantación de CryptoAPI de Windows. Más información en nuestro artículo de blog. Requisitos de instalación pip install -U -r requirements.txt La generación de certificados funciona con OpenSSL versión hasta 1.0.2u. Certificado CA Usam...
CLEANSTART-2025-WA86088 spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32
Security vulnerability affects the containerd package. A spoofing vulnerability exists in the way Windows CryptoAPI Crypt32...
REcon 2024 Conference Slides
REcon 2024 conference slides for topics:JTAG Debug of Windows Hyper-V / Secure Kernel with WinDbg and DCI/EXDIPath of rev.ng-ance: From Raw Bytes to CodeQL on Decompiled CodeHypervisor-enforced Paging Translation - The End of Non Data-driven Kernel Exploits?Control Flow Intergrity on IBM iTips &...
CVE-2026-55144
Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...
CVE-2026-55144
Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...
Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability
Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...
PT-2026-58256
Name of the Vulnerable Software and Affected Versions Windows CryptoAPI affected versions not specified Description A missing cryptographic step in the Windows CryptoAPI allows an authorized attacker to perform local tampering, which can affect the system. Recommendations At the moment, there is ...
CVE-2026-55144: Missing Cryptographic Step
Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...
FP-Predictor - False Positive Prediction for Static Analysis Reports
Static Application Security Testing SAST tools play a vital role in modern software development by automatically detecting potential vulnerabilities in source code. However, their effectiveness is often limited by a high rate of false positives, which wastes developer's effort and undermines trus...
EUVD-2023-28924
Malicious code in bioql PyPI...
EUVD-2021-7146
Malicious code in bioql PyPI...
EUVD-2023-28925
Malicious code in bioql PyPI...
EUVD-2023-39342
Malicious code in bioql PyPI...
BIT-GOLANG-2020-0601
A spoofing vulnerability exists in the way Windows CryptoAPI Crypt32.dll validates Elliptic Curve Cryptography ECC certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted,...
CVE-2023-35339
Windows CryptoAPI Denial of Service Vulnerability...
