getaltname

GSAN - Subject Alternative Namesを取得 GSAN は、HTTPSサーバーから直接SSL証明書に含まれるSubject Alternative Names（SAN）を抽出できるツールであり、DNS名（サブドメイン）や仮想サーバーを提供します。 これはCertificate Transparencyログに依存せず、サーバーに直接接続して証明書からSANを抽出します。これは内部サーバーや自己署名証明書を分析する際に特に便利です。 インストール pip（または推奨されるpipx）を使用して、システムに多くの依存関係を汚染しないようにします。...

shodan

Shodan Dorks от twitter.com/lothos612 Не стесняйтесь вносить предложения Shodan Dorks Основные фильтры Shodan city: Найти устройства в определенном городе. city:"Bangalore" country: Найти устройства в определенной стране. country:"IN" geo: Найти устройства по географическим координатам...

CloudPulse

CloudPulse - AWS 클라우드 환경 검색 엔진 정찰 단계에서 공격자는 대상에 대한 정보를 찾아 프로필을 생성하며, 이는 나중에 조직에 침투할 수 있는 가능한 방법을 식별하는 데 도움이 됩니다. CloudPulse는 SSL 인증서 데이터 분석을 간소화하고 향상시키는 강력한 도구입니다. Trickest Cloud에서 제공되는 AWS EC2 머신에서 얻은 방대한 SSL 인증서 저장소를 활용합니다. CloudPulse를 통해 보안 연구원은 SSL 인증서 세부 정보를 효율적으로 탐색하고, 잠재적인 취약점을 발견하며, 다양한 보...

hyperfox

Hyperfox Hyperfox is a security auditing tool that proxies and records HTTP and HTTPS traffic between two points. Installation You can install the latest version of hyperfox to /usr/local/bin with the following command requires admin privileges: root@kitploit: curl -sL...

phishing_catcher

Phishing Catcher Catch possible phishing domains in near real time by looking for suspicious TLS certificate issuances reported to the Certificate Transparency Log CTL via the CertStream API. "Suspicious" issuances are those whose domain name scores beyond a certain threshold based on a...

cloud

Cloud Monitoring the Cloud Landscape Our mission with this project is to provide an always up-to-date and freely accessible map of the cloud landscape for every major cloud service provider. We've decided to kick things off with collecting SSL certificate data of AWS EC2 and GCP machines,...

CertCrunchy

root@kitploit: / \ | | / \ | | | / / | || / / | | | | / \ '| | | | '| | | | ' \ / | ' | | | | | /\ / | | || /\ | | || | | | | | | | | || | /|| |/| ,|| |||| ||, | / | |/ 그냥 SSL 인증서 데이터를 사용하여 잠재적인 호스트명을 찾는 바보 같은 리콘 도구입니다. 이게 뭐지? crt.sh, certdb.com, sslmate.com/certspotter/, 그리고 censys.io...

getaltname

GSAN - Get Subject Alternative Names GSAN is a tool that can extract Subject Alternative Names SAN found in SSL Certificates directly from https servers which can provide you with DNS names subdomains or virtual servers. It doesn't rely on Certificate Transparency logs, it connects directly to th...

reproxy

Reproxy is a simple edge HTTPs server / reverse proxy supporting various providers docker, static, file, consul catalog. One or more providers supply information about the requested server, requested URL, destination URL, and health check URL. It is distributed as a single binary or as a docker...

awsScrape

AWSScrape AWSScrape 是一款工具，用于从所有 AWS IP 范围中抓取 SSL 证书，并在证书的通用名称（CN）、组织（O）和组织单位（OU）字段中搜索特定关键字。 安装 1. 克隆此仓库： root@kitploit: git clone https://github.com/jhaddix/awsscrape.git cd awsscrape 用法 按以下方式运行脚本： root@kitploit: go run awsscrape.go -keyword= Argument| Description ---|--- -keyword| 在 SSL...

CVE-2025-68721

CVE-2025-68721: Axigen WebAdmin におけるアクセス制御の不備 脆弱性概要 権限ロジックの欠陥により、権限がゼロの 管理者アカウントが「セキュリティとフィルタリング」Security & Filtering ページ、具体的には SSL 証明書エンドポイントにアクセスできるようになります。他の制限されたセクションは正しくブロックされますが、このエンドポイントは権限がないにもかかわらずアクセス可能なままです。 影響を受けるバージョン: 10.6.26 詳細については、Axigen ナレッジベース を参照してください。 POC 対象 URL:...

CVE-2026-43820

A flaw was found in swift-nio-ssl. This vulnerability arises from the improper handling of Subject Alternative Names SANs within SSL certificates. When processing SANs that are not backed by an ASN1STRING, the system attempts to access memory outside of its allocated buffer, leading to an...

[SECURITY] Fedora 44 Update: curl-8.18.0-8.fc44

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

CVE-2026-32644

Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys...

Websites with an undefined trust level: avoiding the trap

Executive summary A suspicious website is a web resource that cannot be definitively classified as phishing, but whose activities are unsafe. Such sites manipulate users, tricking them into voluntarily transferring money for non-existent services, signing up for hidden subscriptions, or disclosin...

CVE-2026-32644

Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys...

Security Bulletin: Multiple security vulnerabilities in IBM SDK, Java Technology Edition Quarterly CPU - January 2026 CPU affects IBM OpenPages

Summary IBM® SDK, Java™ Technology Edition is shipped as a supporting program of IBM OpenPages. Information about a security vulnerability affecting IBM SDK, Java Technology Edition Quarterly CPU - January 2026 has been published in multiple security bulletins. These products have addressed the...

CVE-2025-68723

Axigen Mail Server before 10.5.57 contains multiple stored Cross-Site Scripting XSS vulnerabilities in the WebAdmin interface. Three instances exist: 1 the log file name parameter in the Local Services Log page, 2 certificate file content in the SSL Certificates View Usage feature, and 3 the...

CVE-2025-68721

Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface. A delegated admin account with zero permissions can bypass access control checks and gain unauthorized access to the SSL Certificates management endpoint page=sslcerts. This allows the...

CVE-2025-68723

Axigen Mail Server before 10.5.57 contains multiple stored Cross-Site Scripting XSS vulnerabilities in the WebAdmin interface. Three instances exist: 1 the log file name parameter in the Local Services Log page, 2 certificate file content in the SSL Certificates View Usage feature, and 3 the...