SSLPatch

SSL Patch CVE-2014-1266 Copyright c 2014 Linus Yang Introduction CVE-2014-1266 , or known as "goto fail SSL verification exploit", is a very serious SSL/TLS vulnerability of iOS and OS X. Apple issues iOS 6.1.6 and 7.0.6 to fix this problem, but ignores some users who can't or just don't want to...

AcrStealer-Custom-Protocol-Credential-Theft-Payload-Extraction-Analysis

1. Network Connections & SSL/TLS Configuration Process Hacker memory analysis reveals that AcrStealer establishes network connections using SSL/TLS for secure communication with its C2 server. Key Observations: SslClientCert – Uses client certificates for authentication evades detection...

wordpress-cve-2024-10924-pentest

WordPress CVE-2024-10924 Informe de Pruebas de Penetración Vulnerabilidad de Bypass de 2FA en el Plugin Really Simple SSL 📋 Tabla de Contenidos Resumen Ejecutivo Información del Objetivo Metodología Cronología Fase de Reconocimiento Análisis de Vulnerabilidades Flujo de Ataque Explotación...

CVE-2024-24919

CVE-2024-24919 Exploit script for CVE-2024-24919. Shodan: "Server: Check Point SVN" "X-UA-Compatible: IE=EmulateIE7" FOFA: title="Check Point SSL Network Extender" I am not responsible for any misuse or damage caused by this script...

NcStatusCheck

NcStatusCheck Centralized monitoring for multiple Nextcloud instances NcStatusCheck is a monitoring tool that lets you track the health of multiple Nextcloud servers from a single web interface: Nextcloud and PHP versions against their security floor, branch end of life, reachability, configurati...

cmty-ssl-heartbleed-CVE-2014-0160-HTTP-HTTPS

This check is for demostration only. cmty-ssl-heartbleed-CVE-2014-0160-HTTP-HTTPS Targets the OpenSSL product directly on discovered HTTP and HTTPS services. This does not check for OpenSSL 1.0.2-beta which is vulnerable. Also, OpenSSL is commonly packaged into other software and better targeted ...

hyperfox

Hyperfox Hyperfox is a security auditing tool that proxies and records HTTP and HTTPS traffic between two points. Installation You can install the latest version of hyperfox to /usr/local/bin with the following command requires admin privileges: curl -sL...

ssl-kill-switch2

SSL Kill Switch 2 Blackbox tool to disable SSL/TLS certificate validation - including certificate pinning - within iOS and macOS applications. Second iteration of https://github.com/iSECPartners/ios-ssl-kill-switch . Description Once loaded into an iOS or macOS application, SSL Kill Switch 2 will...

ssl-kill-switch2

SSL Kill Switch 2 Herramienta de caja negra para deshabilitar la validación de certificados SSL/TLS - incluido el anclaje de certificados certificate pinning - dentro de aplicaciones iOS y macOS. Segunda iteración de https://github.com/iSECPartners/ios-ssl-kill-switch . Descripción Una vez cargad...

CVE-2022-0778

CVE-2022-0778 Descripción Nos referimos al concepto de drago-96 y luego reescribimos un PoC basado en el formato P12 y PEM. Puede usarlo para verificar las vulnerabilidades CVE-2022-0778, es decir, un certificado SSL peligroso sin contraseña privada, déjelo vacío. Si el dispositivo está afectado,...

CVE-2024-21762-Safe-Check

CVE-2024-21762 - FortiOS SSL VPN Out-of-Bounds Write Overview Field| Value ---|--- CVE| CVE-2024-21762 Advisory| FG-IR-24-015 CVSS| 9.8 Critical CWE| CWE-787 Out-of-bounds Write CISA KEV| Yes - actively exploited in the wild Attack Vector| Network unauthenticated Affected Component| sslvpnd SSL V...

OpenSSL-1_0_1g_CVE-2015-3197

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

sslcaudit

INTRODUCCIÓN El objetivo del proyecto sslcaudit es desarrollar una utilidad para automatizar las pruebas de clientes SSL/TLS contra ataques MITM. Puede ser útil para probar un cliente pesado, una aplicación móvil, un dispositivo, prácticamente cualquier cosa que se comunique a través de SSL/TLS...

CVE-2024-24919

CVE-2024-24919 Script de Nmap para comprobar la vulnerabilidad CVE-2024-24919 Referencias de la vulnerabilidad: https://www.cvedetails.com/cve/CVE-2024-24919/ https://support.checkpoint.com/results/sk/sk182336 Dorks Hunter Hunter: /product.name="Check Point SSL Network Extender" Shodan SHODAN:...

CVE-2024-24919

CVE-2024-24919 I'm not responsible for anything : Instalation git clone https://github.com/LucasKatashi/CVE-2024-24919 && cd CVE-2024-24919 python3 -m pip install -r requirements.txt && chmod +x CVE-2024-24919.py ./CVE-2024-24919 FOFA Query title="Check Point SSL Network Extender"...

Freak-Scanner

Freak-Scanner Multithreaded Python FREAK scanner, used to detect SSL EXP Ciphers, vulnerable to CVE-2015-0204 It's pretty quick, should be able to scan just shy of 1k hosts in an hour. The output is messy though, you'll have to grep on Vulnerable/NotVulnerable I'll try to clean this up later if...

cve-2024-21762-check

Comprobación de CVE-2024-21762 Detecte de forma segura si una VPN SSL de FortiGate es vulnerable a CVE-2024-21762. Para más información, consulte esta publicación del blog de Bishop Fox Uso python3 check-cve-2024-21762.py En la mayoría de los casos, el script mostrará "Vulnerable" o "Patched"...

cve-2022-42475

Vulnerabilidad de desbordamiento de búfer en SSL-VPN de FortiOS cve-2022-42475 https://nvd.nist.gov/vuln/detail/CVE-2022-42475 Código POC para explotar el desbordamiento de montón Heap overflow en el demonio SSLVPN de Fortinet Notas Este es un POC rápido y sucio que probablemente no funcione en...

FREAK-Attack-CVE-2015-0204-Testing-Script

Script de prueba para el ataque FREAK CVE-2015-0204 Script BASH básico para automatizar pruebas basadas en OpenSSL para el ataque FREAK CVE-2015-0204 según lo recomendado por Akamai. Es Software Libre y no necesita el servidor de terceros para ejecutarse. Su servidor debe obtener una puntuación A...

cve-2019-11477-poc

cve-2019-11477-poc Simple Test 1. Start two VMs one for an SSL server and the other for an SSL client 2. Server Execute the server application cd apps ./server.sh 7000 3. Client Install the required packages sudo apt-get install libmnl-dev sudo apt-get install libnetfilter-queue-dev 4. Client Add...