3602 matches found
CloudPulse
CloudPulse - AWS Cloud Landscape Search Engine During the reconnaissance phase, an attacker searches for any information about his target to create a profile that will later help him to identify possible ways to get in an organization. CloudPulse is a powerful tool that simplifies and enhances th...
getaltname
GSAN - Get Subject Alternative Names GSAN is a tool that can extract Subject Alternative Names SAN found in SSL Certificates directly from https servers which can provide you with DNS names subdomains or virtual servers. It doesn't rely on Certificate Transparency logs, it connects directly to th...
cloud
Cloud Monitoring the Cloud Landscape Our mission with this project is to provide an always up-to-date and freely accessible map of the cloud landscape for every major cloud service provider. We've decided to kick things off with collecting SSL certificate data of AWS EC2 and GCP machines,...
hyperfox
Hyperfox Hyperfox is a security auditing tool that proxies and records HTTP and HTTPS traffic between two points. Installation You can install the latest version of hyperfox to /usr/local/bin with the following command requires admin privileges: curl -sL...
CertCrunchy
/ \ | | / \ | | | / / | || / / | | | | / \ '| | | | '| | | | ' \ / | ' | | | | | /\ / | | || /\ | | || | | | | | | | | || | /|| |/| ,|| |||| ||, | / | |/ Just a silly recon tool that uses data from SSL Certificates to find potential hostnames What the? It just a silly python script that...
reproxy
Reproxy is a simple edge HTTPs server / reverse proxy supporting various providers docker, static, file, consul catalog. One or more providers supply information about the requested server, requested URL, destination URL, and health check URL. It is distributed as a single binary or as a docker...
sublert
/ / / / / / / / \ / / / / / / / / / / / // / // / / / / / / //,/.//// / 작성자: Yassine Aboukir 버전: 1.4.7 이게 뭐죠? Sublert는 Python으로 작성된 보안 및 정찰 도구로, 인증서 투명성Certificate Transparency을 활용하여 특정 조직에서 배포하고 TLS/SSL 인증서를 발급한 새로운 서브도메인을 모니터링하는 목적으로 사용됩니다. 이 도구는 정기적으로이상적으로는 매일 고정된 시간, 날짜 또는 간격으로 실행되도록...
cloud
Cloud クラウド環境の監視 このプロジェクトの使命は、主要なクラウドサービスプロバイダーごとに、常に最新で自由にアクセス可能なクラウド環境のマップを提供することです。 私たちは、セキュリティ研究者にとっての価値を考慮し、まずはAWS EC2とGCPマシンのSSL証明書データを収集することから始めることにしました。ただし、近い将来、より多くのデータとプロバイダーを含むようにプロジェクトを拡大する予定です。皆様のご意見やご提案は非常に貴重ですので、Twitter または Discord までお気軽にお知らせください。次に優先すべき分野について教えてください。...
phishing_catcher
Phishing Catcher Catch possible phishing domains in near real time by looking for suspicious TLS certificate issuances reported to the Certificate Transparency Log CTL via the CertStream API. "Suspicious" issuances are those whose domain name scores beyond a certain threshold based on a...
getaltname
GSAN - 주체 대체 이름 가져오기 GSAN 은 HTTPS 서버에서 직접 SSL 인증서에 포함된 주체 대체 이름Subject Alternative Names, SAN을 추출할 수 있는 도구로, DNS 이름서브도메인이나 가상 서버를 제공할 수 있습니다. 이는 인증서 투명성 로그에 의존하지 않고 서버에 직접 연결하여 인증서에서 SAN을 추출하므로, 내부 서버나 자체 서명 인증서를 분석할 때 특히 유용합니다. 설치 pip또는 pipx - 권장를 사용하여 시스템에 많은 종속성이 섞이는 것을 방지하세요. $ pipx install...
shodan
Shodan Dorks - twitter.com/lothos612 자유롭게 제안해 주세요. Shodan Dorks 기본 Shodan 필터 city: 특정 도시의 장치를 찾습니다. city:"Bangalore" country: 특정 국가의 장치를 찾습니다. country:"IN" geo: 지리적 좌표를 입력하여 장치를 찾습니다. geo:"56.913055,118.250862" 위치 country:us country:ru country:de city:chicago hostname: 호스트 이름과 일치하는 장치를 찾습니다...
CVE-2025-68721
CVE-2025-68721: Axigen WebAdmin Broken Access Control Vulnerability Summary A flaw in the permission logic allows an administrator account with zero permissions to access the "Security & Filtering" page, specifically the SSL Certificates endpoint. While other restricted sections are correctly...
awsScrape
AWSScrape AWSScrape는 모든 AWS IP 범위에서 SSL 인증서를 스크레이핑하여 인증서의 CNCommon Name, OOrganization, OUOrganizational Unit 필드에서 특정 키워드를 검색하도록 설계된 도구입니다. 설치 1. 이 저장소를 클론합니다: git clone https://github.com/jhaddix/awsscrape.git cd awsscrape 사용법 다음과 같이 스크립트를 실행합니다: go run awsscrape.go -keyword= 인자| 설명 ---|---...
CVE-2026-102671
The Joyland AI app is vulnerable because its invisible advertisement WebView accepts invalid SSL certificates by default. This flaw falls under CWE-295 (Improper Certificate Validation), potentially allowing for man-in-the-middle attacks within that specific WebView component. No specific version...
EUVD-2026-91030
The Joyland AI app accepts invalid SSL certificates in the invisible advertisement WebView by default...
CVE-2026-43820
A flaw was found in swift-nio-ssl. This vulnerability arises from the improper handling of Subject Alternative Names SANs within SSL certificates. When processing SANs that are not backed by an ASN1STRING, the system attempts to access memory outside of its allocated buffer, leading to an...
[SECURITY] Fedora 44 Update: curl-8.18.0-8.fc44
curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
CVE-2026-32644
Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys...
Websites with an undefined trust level: avoiding the trap
Executive summary A suspicious website is a web resource that cannot be definitively classified as phishing, but whose activities are unsafe. Such sites manipulate users, tricking them into voluntarily transferring money for non-existent services, signing up for hidden subscriptions, or disclosin...
