ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns

The system certificate authority CA store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle...

-CVE-2017-0785-BlueBorne-PoC

-CVE-2017-0785-BlueBorne-PoC CVE-2017-0785 BlueBorne PoC General Overview Armis Labs revealed a new attack vector endangering major mobile, desktop, and IoT operating systems, including Android, iOS, Windows, and Linux, and the devices using them. The new vector is dubbed “BlueBorne”, as it sprea...

amt_auth_bypass_poc

Intel AMT authentication bypass example This is a Proof-of-Concept code that demonstrates the exploitation of the CVE-2017-5689 vulnerability. It is essentialy a mitmproxy script that simply blanks an Authorization header "response" field. Example usage: mitmdump -p 8080 -dd --no-http2 -s...

MemorizingTrustManager

MemorizingTrustManager - Private Cloud Support for Your App MemorizingTrustManager MTM is a project to enable smarter and more secure use of SSL on Android. If it encounters an unknown SSL certificate, it asks the user whether to accept the certificate once, permanently or to abort the connection...

evilginx2

Evilginx 3.0 Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which in turn allows to bypass 2-factor authentication protection. This tool is a successor to Evilginx, released in 2017, which used a custom version of nginx HTTP server...

wifipumpkin3

Wifipumpkin3 Powerful framework for rogue access point attack. Overview wifipumpkin3 is powerful framework for rogue access point attack, written in Python, that allow and offer to security researchers, red teamers and reverse engineers to mount a wireless network to conduct a man-in-the-middle...

k8s-cve-2020-8554-mitigations

Prisma Cloud Compute Mitigations for Kubernetes CVE-2020-8554 This repository contains Prisma Cloud Compute Admission rules that mitigate exploitation of CVE-2020-8554, an unpatched Kubernetes vulnerability. To ensure correct usage, please follow the instructions provided in the 'Prisma Cloud...

btlejuice

BtleJuice Framework Introduction BtleJuice is a complete framework to perform Man-in-the-Middle attacks on Bluetooth Smart devices also known as Bluetooth Low Energy. It is composed of: an interception core an interception proxy a dedicated web interface Python and Node.js bindings How to install...

MITMer

MITMer This tool can do the following: MITM attack on a specific host or all LAN hosts. Show HTTP and DNS activity of attacked hosts. Drop DNS queries asking about a website and redirects them to your PC. Convert that website into a fake page and host it on your PC. Dependencies: python2 scapy...

pretender

pretender Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing pretender is a tool developed by RedTeam Pentesting to obtain machine-in-the-middle positions via spoofed local name resolution and DHCPv6 DNS takeover attacks. pretender...

sslnuke

sslnuke -- SSL without verification isn't secure! We have all heard over and over that SSL without verification is not secure. If an SSL connection is not verified with a cached certificate, it can easily be hijacked by any attacker. So in 2013, one would think we had totally done away with this...

Ssh Mitm

SSH-MITM SSH-MITM is a man-in-the-middle SSH proxy for security audits and penetration testing. It supports intercepting SSH, SCP, and SFTP sessions, agent forwarding, port forwarding, and more. This repository was a mirror and is no longer updated. The official repositories are: GitHub:...

CVE-2026-113812

Mozilla::CA versions before 20261020 for Perl provide a CA certificate...

isip

isip Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks. Video https://asciinema.org/a/11128 Setup git clone https://github.com/halitalptekin/isip.git cd isip pip install -r requirements.txt Usage Packet manipulation tools are...

pyrdp

PyRDP PyRDP is a Python Remote Desktop Protocol RDP Monster-in-the-Middle MITM tool and library. It features a few tools: RDP Monster-in-the-Middle Logs plaintext credentials or NetNTLM hashes used when connecting Steals data copied to the clipboard Saves a copy of the files transferred over the...

sslsplit

SSLsplit - transparent SSL/TLS interception https://www.roe.ch/SSLsplit Overview SSLsplit is a tool for man-in-the-middle attacks against SSL/TLS encrypted network connections. It is intended to be useful for network forensics, application security analysis and penetration testing. SSLsplit is...

ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns

The system certificate authority CA store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle...

ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns

The system certificate authority CA store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle...

IotShark

cs219-f19-final-project IoTShark This is our final project for CS 219 for the Fall 2019 quarter. IoTShark is a IOT monitoring service that allows users to monitor their IOT devices for trends in data sent/received. Ordinarily, setting up a man in the middle attack with proper configurations can...

StreamDivert

StreamDivert StreamDivert is a tool to man-in-the-middle or relay in and outgoing network connections on a system. It has the ability to, for example, relay all incoming SMB connections to port 445 to another server, or only relay specific incoming SMB connections from a specific set of source IP...