CVE-2020-28018

CVE-2020-28018: Exim Use-after-free UAF leading to RCE Introduction There exists a Use-after-free UAF vulnerability in tls-openssl.c that allow remote unauthenticated attackers to corrupt internal memory data, thus finally achieving remote code execution. Primitives: Memory Leakage Arbitrary read...

CVE-2022-3602-and-CVE-2022-3786

CVE-2022-3602-and-CVE-2022-3786 This is a detection script which will determine whether client authentication is required by the SSL server, in which case servers based on OpenSSL 3.0.0 to 3.0.6 will be vulnerable to both CVE-2022-3602 and CVE-2022-3786 Prerequisite's python3 pip install -r...

sslx

sslx openssl, pero no tienes que buscar las opciones en Google. Un solo binario que maneja certificados, conexiones TLS y todo lo que normalmente necesitas tres invocaciones diferentes de openssl. Construido con Rust y rustls, no requiere OpenSSL del sistema. Instalar root@kitploit: cargo install...

OpenSSL-1_0_1g_CVE-2015-3194

OpenSSL 1.0.1g 7 Abr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson Todos los derechos reservados. DESCRIPCIÓN El Proyecto OpenSSL es un esfuerzo colaborativo para desarrollar un conjunto de herramientas de código abierto robusto, de grado...

CVE-2016-8610-PoC

CVE-2016-8610 PoC CVE-2016-8610 Alerta de Muerte SSL PoC Uso: python ssl-death-alert.py DOMINIO/IP PUERTO VERSIÓN-PROTOCOLOSSLv3, TLS1.0, TLS1.1, TLS1.2 NÚMERO-DE-ALERTAS1000 HILOS50 python ssl-death-alert.py test.tdl 443 TLS1.2 1000 50 Más información: http://security.360.cn/cve/CVE-2016-8610/...

CVE-2022-0778

CVE-2022-0778 The discovered vulnerability triggers an infinite loop in the function BNmodsqrt of OpenSSL while parsing an elliptic curve key. This means that a maliciously crafted X.509 certificate can DoS any unpatched server. The core of the vulnerability is in the parsing of EC keys with poin...

bleeding-heart

Heartbleed The Heartbleed bug CVE-2014-0160 is a severe implementation flaw in the OpenSSL library, which enables attackers to steal data from the memory of the victim server. The contents of the stolen data depend on what is there in the memory of the server. It could potentially contain private...

CVE-2020-1967

CVE-2020-1967 Proof of concept exploit about OpenSSL signaturealgorithmscert DoS flaw CVE-2020-1967. Credit for the original finding to Bernd Edlinger, additional analysis by Matt Caswell and Benjamin Kaduk, this demo by Imre Rad. Prerequisite Server or client applications that call the...

Heartbleed-PoC-Exploit-Script

Heartbleed-PoC-Exploit-Script Este script de prueba de concepto PoC en Python detecta la vulnerabilidad Heartbleed CVE-2014-0160 realizando un handshake TLS con la extensión heartbeat y enviando una solicitud heartbeat manipulada. Analiza las respuestas del servidor para identificar memoria...

OpenSSL-1_0_1g_CVE-2015-3197

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

CTT-HEARTBLEED-Temporal-Resonance-Memory-Leak-Exploit-Heartbleed-CVE-2014-0160

CTT-HEARTBLEED-Temporal-Resonance-Memory-Leak-Exploit-Heartbleed-CVE-2014-0160 Heartbleed CVE-2014-0160 fue devastador porque filtraba memoria adyacente. CTT-Heartbleed va más allá: utiliza resonancia temporal de 33 capas para mapear, reconstruir y extraer regiones de memoria específicas a través...

Heartbleed_Dockerfile_with_Nginx

Probando Heartbleed con Dockerfile de Nginx Este repositorio contiene el Dockerfile de Nginx con la versión vulnerable OpenSSL 1.0.1f para probar la vulnerabilidad CVE-2014-0160 Heartbleed. Imagen Base Docker debian:latest Instalación 1. Instala Docker Ejemplo con Debian: apt-get install -y docke...

CVE-2014-2734

CVE-2014-2734 Ruby OpenSSL CA Private Key Spoofing ============= Ruby openssl has a vulnerability when a public key is a issued prior writing to private key and is reopened during a script it spoofs a CA private key. PoC script https://gist.github.com/10446549 Mitre:...

CVE-2022-0778-POC

Un POC sencillo de activación remota para CVE-2022-0778 Por qué Mientras intentábamos validar si las implementaciones de servidor de nuestro lado eran/son vulnerables a CVE-2022-0778, resultó extremadamente engorroso hacerlo de forma remota. Las instrucciones para crear certificados maliciosament...

nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

CVE-2022-1292

CVE-2022-1292 POC Description root@kitploit: The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute...

psc

PortShellCrypter -- PSC This project - as well as its sister project crash - belongs to my anti-censorship tool-set that allows to setup fully working encrypted shells and TCP/UDP forwarding in hostile censoring environments. It is also useful for forensics to dump data from devices via UART or...

debianopenssl

debianopenssl Private keys vulnerable to Debian OpenSSL bug CVE-2008-0166 In 2008 a bug in Debian's and Ubuntu's OpenSSL package led to predictable private keys. While the number of keys is limited, it takes a few considerations to create a proper list of all plausibly affected keys. This...

cipherscan

CipherScan CipherScan prueba el orden de los cifrados SSL/TLS en un objetivo dado, para todas las versiones principales de SSL y TLS. También extrae información de certificados, opciones TLS, OCSP stapling y más. CipherScan es un envoltorio sobre la línea de comandos openssl sclient. CipherScan...

cipherscan

CipherScan Cipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl sclient command line. Cipherscan is meant to ru...