getaltname

GSAN - 获取主题备用名称 GSAN 是一个可以从 HTTPS 服务器直接提取 SSL 证书中的主题备用名称 SAN 的工具，这些名称可以提供 DNS 名称（子域名）或虚拟服务器。 它不依赖于证书透明度日志，而是直接连接到服务器并从证书中提取 SAN，这在分析内部服务器或自签名证书时尤其有用。 安装 使用 pip（或推荐用 pipx）以避免用大量依赖项污染系统。 $ pipx install --user gsan 你也可以使用 Docker 安装并运行它。 $ docker run --rm -i francc3sco/gsan 用法 基本用法是直接将 HTTPS...

Authentication flaw

EMC Avamar Data Store ADS and Avamar Virtual Edition AVE 6.x and 7.0.x through 7.0.2-43 do not require authentication for Java API calls, which allows remote attackers to discover grid MCUser and GSAN passwords via a crafted call...

CVE-2014-4624

EMC Avamar Data Store ADS and Avamar Virtual Edition AVE 6.x and 7.0.x through 7.0.2-43 do not require authentication for Java API calls, which allows remote attackers to discover grid MCUser and GSAN passwords via a crafted call...

CVE-2010-1919: Undefined Security Weakness

Unspecified vulnerability in EMC Avamar 4.1.x and 5.0 before SP1 allows remote attackers to cause a denial of service gsan service hang by sending a crafted message using TCP...