reproxy

Reproxy is a simple edge HTTPs server / reverse proxy supporting various providers docker, static, file, consul catalog. One or more providers supply information about the requested server, requested URL, destination URL, and health check URL. It is distributed as a single binary or as a docker...

phishing_catcher

Phishing Catcher Catch possible phishing domains in near real time by looking for suspicious TLS certificate issuances reported to the Certificate Transparency Log CTL via the CertStream API. "Suspicious" issuances are those whose domain name scores beyond a certain threshold based on a...

getaltname

GSAN - Subject Alternative Namesを取得 GSAN は、HTTPSサーバーから直接SSL証明書に含まれるSubject Alternative Names（SAN）を抽出できるツールであり、DNS名（サブドメイン）や仮想サーバーを提供します。 これはCertificate Transparencyログに依存せず、サーバーに直接接続して証明書からSANを抽出します。これは内部サーバーや自己署名証明書を分析する際に特に便利です。 インストール pip（または推奨されるpipx）を使用して、システムに多くの依存関係を汚染しないようにします。...

getaltname

GSAN - Get Subject Alternative Names GSAN is a tool that can extract Subject Alternative Names SAN found in SSL Certificates directly from https servers which can provide you with DNS names subdomains or virtual servers. It doesn't rely on Certificate Transparency logs, it connects directly to th...

sublert

root@kitploit: / / / / / / / / \ / / / / / / / / / / / // / // / / / / / / //,/.//// / 作者: Yassine Aboukir バージョン: 1.4.7 これは何ですか？...

CloudPulse

CloudPulse - AWS 클라우드 환경 검색 엔진 정찰 단계에서 공격자는 대상에 대한 정보를 찾아 프로필을 생성하며, 이는 나중에 조직에 침투할 수 있는 가능한 방법을 식별하는 데 도움이 됩니다. CloudPulse는 SSL 인증서 데이터 분석을 간소화하고 향상시키는 강력한 도구입니다. Trickest Cloud에서 제공되는 AWS EC2 머신에서 얻은 방대한 SSL 인증서 저장소를 활용합니다. CloudPulse를 통해 보안 연구원은 SSL 인증서 세부 정보를 효율적으로 탐색하고, 잠재적인 취약점을 발견하며, 다양한 보...

hyperfox

Hyperfox Hyperfox is a security auditing tool that proxies and records HTTP and HTTPS traffic between two points. Installation You can install the latest version of hyperfox to /usr/local/bin with the following command requires admin privileges: root@kitploit: curl -sL...

CertCrunchy

/ \ | | / \ | | | / / | || / / | | | | / \ '| | | | ' | | | | ' \ / | ' | | | | | /\ / | | || /\ | | || | | | | | | | | || | / || |/ | , || | ||| | |, |/ | | / SSL証明書のデータを使って潜在的なホスト名を見つける、ただのお馬鹿な偵察ツールです。 これは何？ これは、オンラインソース（現在は...

cloud

Cloud 클라우드 랜드스케이프 모니터링 이 프로젝트의 사명은 모든 주요 클라우드 서비스 제공업체에 대해 항상 최신 상태이고 자유롭게 접근 가능한 클라우드 랜드스케이프 지도를 제공하는 것입니다. 우리는 보안 연구자들에게 이 데이터의 가치를 고려하여 AWS EC2 및 GCP 머신의 SSL 인증서 데이터를 수집하는 것으로 시작하기로 결정했습니다. 그러나 가까운 미래에 더 많은 데이터와 제공업체를 포함하도록 프로젝트를 확장할 계획입니다. 여러분의 의견과 제안은 우리에게 매우 소중하므로, Twitter 또는 Discord를 통해 주저...

cloud

Cloud Monitoring the Cloud Landscape Our mission with this project is to provide an always up-to-date and freely accessible map of the cloud landscape for every major cloud service provider. We've decided to kick things off with collecting SSL certificate data of AWS EC2 and GCP machines,...

shodan

Shodan Dorks - twitter.com/lothos612 자유롭게 제안해 주세요. Shodan Dorks 기본 Shodan 필터 city: 특정 도시의 장치를 찾습니다. city:"Bangalore" country: 특정 국가의 장치를 찾습니다. country:"IN" geo: 지리적 좌표를 입력하여 장치를 찾습니다. geo:"56.913055,118.250862" 위치 country:us country:ru country:de city:chicago hostname: 호스트 이름과 일치하는 장치를 찾습니다...

CVE-2025-68721

CVE-2025-68721: Axigen WebAdmin におけるアクセス制御の不備 脆弱性概要 権限ロジックの欠陥により、権限がゼロの 管理者アカウントが「セキュリティとフィルタリング」Security & Filtering ページ、具体的には SSL 証明書エンドポイントにアクセスできるようになります。他の制限されたセクションは正しくブロックされますが、このエンドポイントは権限がないにもかかわらずアクセス可能なままです。 影響を受けるバージョン: 10.6.26 詳細については、Axigen ナレッジベース を参照してください。 POC 対象 URL:...

awsScrape

AWSScrape AWSScrapeは、すべてのAWS IPレンジからSSL証明書をスクレイピングし、証明書のCommon Name（CN）、Organization（O）、Organizational Unit（OU）フィールド内で特定のキーワードを検索するように設計されたツールです。 インストール 1. このリポジトリをクローンします: root@kitploit: git clone https://github.com/jhaddix/awsscrape.git cd awsscrape 使用方法 スクリプトを次のように実行します: root@kitploit: go run...

CVE-2026-43820

A flaw was found in swift-nio-ssl. This vulnerability arises from the improper handling of Subject Alternative Names SANs within SSL certificates. When processing SANs that are not backed by an ASN1STRING, the system attempts to access memory outside of its allocated buffer, leading to an...

[SECURITY] Fedora 44 Update: curl-8.18.0-8.fc44

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

CVE-2026-32644

Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys...

Websites with an undefined trust level: avoiding the trap

Executive summary A suspicious website is a web resource that cannot be definitively classified as phishing, but whose activities are unsafe. Such sites manipulate users, tricking them into voluntarily transferring money for non-existent services, signing up for hidden subscriptions, or disclosin...

CVE-2026-32644

Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys...

Security Bulletin: Multiple security vulnerabilities in IBM SDK, Java Technology Edition Quarterly CPU - January 2026 CPU affects IBM OpenPages

Summary IBM® SDK, Java™ Technology Edition is shipped as a supporting program of IBM OpenPages. Information about a security vulnerability affecting IBM SDK, Java Technology Edition Quarterly CPU - January 2026 has been published in multiple security bulletins. These products have addressed the...

CVE-2025-68723

Axigen Mail Server before 10.5.57 contains multiple stored Cross-Site Scripting XSS vulnerabilities in the WebAdmin interface. Three instances exist: 1 the log file name parameter in the Local Services Log page, 2 certificate file content in the SSL Certificates View Usage feature, and 3 the...