ccs-eval

评估主机是否存在CVE-2014-0224漏洞 https://vulners.com/cve/CVE-2014-0224 用法： ccs-eval.py list-of-hosts.txt 接受一个主机列表文件，每行一个主机。使用nmap检查常见SSL端口。执行RedHat提供的PoC注入测试（fake-client-early-ccs.pl）。将结果写入"local-results-list-of-hosts.txt"...

Response work is not in place the Heartbleed vulnerability still exist-vulnerability warning-the black bar safety net

In the high-profile Heartbleed vulnerability is exposure of more than a month after the investigation found that this serious OpenSSL vulnerability still exists in the hundreds of thousands of servers and some SSL port, this is mainly because the entire industry response to the work is not in...

ASUS AiCloud Enabled Routers 12 Models - Authentication bypass and Sensitive file/path disclosure

ASUS routers, which are enabled with the AiCloud service SSL ports, are vulnerable to bypass of authentication and sensitive file disclosure. This vulnerability has been observed in all firmware versions, though the latest version increases the complexity of the attack. By sending a special craft...