27438 matches found
heartpatch.us
heartpatch.us Under Construction Patching heartbleed openssl vulnerabilities on servers across the world wide web. Inspiration Heartbleed is a security bug in the OpenSSL cryptography library, which is a widely used implementation of the Transport Layer Security TLS protocol. It was introduced in...
c-jwt-cracker
JWT cracker A multi-threaded JWT brute-force cracker written in C. If you are very lucky or have a huge computing power, this program should find the secret key of a JWT token, allowing you to forge valid tokens. This is for testing purposes only, do not put yourself in trouble : I used the Apple...
nmap
Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...
cve-2009-3555-test-server
What is this? This is a TLS server using a vendored fork of the Go TLS stack that has renegotation indication extension forcibly disabled, which will trigger CVE-2009-3555 mitigations in OpenSSL 3.0+. Note that it isn't truly vulnerable to CVE-2009-3555 because the Go TLS stack doesn't allow...
CVE-2022-1292
CVE-2022-1292 POC Description The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary comman...
Vulnerable-to-Debian-OpenSSL-bug-CVE-2008-0166
Search for BTC coins on earlier versions of Bitcoin Core with critical vulnerability OpenSSL 0.9.8 CVE-2008-0166 In this article, we will create a tool that will generate Bitcoin Addresses P2PKH using the CVE-2008-0166 vulnerability. This is a research project to find BTC coins on earlier version...
coronary
coronary Tests CIDR blocks for OpenSSL CVE-2014-0160 aka Heartbleed. Inspired by Jonathan Rudenberg's heartbleeder. Using $ coronary 192.168.1.0/24 Scanning: 192.168.1.11/22 VULNERABLE - 192.168.1.71:443 has the heartbeat extension enabled and is vulnerable to CVE-2014-0160 SECURE -...
scallion
2020 Project Update Scallion was a hobby project to learn OpenCL and RSA. We are not currently maintaining scallion. It has bitrotted in two important ways: 1. Tor has moved on to v3 Onion addresses, which scallion does not support. Old v2 addresses will stop working in October of 2021. The new...
CVE-2022-3602
Detection for CVE-2022-3602 - OpenSSL RCE/DOC v3.0.0 - v3.0.6 Detects when the HTTP Server header indicates that the version of OpenSSL is vulnerable to CVE-2022-3602 ie. v3.0.0 to v3.0.6 inclusive. Detects exploitation attempts in TLS v1.2. References:...
CVE-2020-28018
CVE-2020-28018: Exim Use-after-free UAF leading to RCE Introduction There exists a Use-after-free UAF vulnerability in tls-openssl.c that allow remote unauthenticated attackers to corrupt internal memory data, thus finally achieving remote code execution. Primitives: Memory Leakage Arbitrary read...
CVE-2022-1292
CVE-2022-1292 Description The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands...
bash-tls-reneg-attack
bash-tls-reneg-attack A bash script that attempts to flood a server with TLS renegotiations by using the openssl client. See CVE-2011-1473 and CVE-2011-1473 for details. Usage: ./tls-reneg.sh some.hostname.here:port...
patch-openssl-CVE-2014-0160
patch-openssl-CVE-2014-0160 Patch openssl heartbleed with ansible Usage : pip install ansible ansible-playbook -i yourinventoryfile patch-openssl-CVE-2014-0160.yml yourinventoryfile just need to contain your server list : 192.168.0.10 webserver1.example.com webserver2.example.com db1.example.com...
CVE-2016-8610-PoC
CVE-2016-8610 PoC CVE-2016-8610 SSL Death Alert PoC Usage: python ssl-death-alert.py DOMAIN/IP PORT PROTOCOL-VERSIONSSLv3, TLS1.0, TLS1.1, TLS1.2 NUMBER-OF-ALERTS1000 THREADS50 python ssl-death-alert.py test.tdl 443 TLS1.2 1000 50 More info: http://security.360.cn/cve/CVE-2016-8610/...
MassBleed
MassBleed SSL Vulnerability Scanner USAGE: sh massbleed.sh CIDR|IP single|port|subnet port proxy ABOUT: This script has four main functions with the ability to proxy all connections: To mass scan any CIDR range for OpenSSL vulnerabilities via port 443/tcp https example: sh massbleed.sh...
CVE-2022-3602-and-CVE-2022-3786
CVE-2022-3602-and-CVE-2022-3786 This is a detection script which will determine whether client authentication is required by the SSL server, in which case servers based on OpenSSL 3.0.0 to 3.0.6 will be vulnerable to both CVE-2022-3602 and CVE-2022-3786 Prerequisite's python3 pip install -r...
ROOT-OS-ALPINE-315-CVE-2025-69421 CVE-2025-69421 in openssl - Patched by Root
Root has patched CVE-2025-69421 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...
ROOT-OS-ALPINE-315-CVE-2025-69420 CVE-2025-69420 in openssl - Patched by Root
Root has patched CVE-2025-69420 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...