cve-2021-34558

CVE-2021-34558 的 POC root@kitploit: Run the malicious TLS server go run main.go -mode server Run a normal http.Get client call against the server which panics go run main.go -mode client 对 ./vendor/github.com/refraction-networking/utls/handshakeserver.go 做了微小修改，以允许发送证书/密码套件不匹配的恶意握手。 看起来像这样：...