CVE-2024-21762-Checker

CVE-2024-21762 检查器 该脚本对CVE-2024-21762（Fortinet SSL VPN远程代码执行漏洞）执行漏洞扫描。它通过发送特定请求并分析响应，检查给定服务器是否受此CVE影响。 更多信息，请参阅此Bishop Fox博客文章 公开漏洞日期：2024/02/28 受影响版本：FortiOS 6.0 至 7.4.2 FortiOS 版本| 受影响版本| 建议操作 ---|---|--- FortiOS 7.6| 不受影响| 不适用 FortiOS 7.4| 7.4.0 至 7.4.2| 升级至 7.4.3 或更高版本 FortiOS 7.2| 7.2.0 至...

OpenSSL_1.0.1g_After

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

FinalRecon

Twitter - Telegram - thewhiteh4t's Blog FinalRecon is an all in one automatic web reconnaissance tool written in python. Goal of FinalRecon is to provide an overview of the target in a short amount of time while maintaining the accuracy of results. Instead of executing several tools one after...

shootback

shootback shootback 是一个反向 TCP 隧道，让你可以访问 NAT 或防火墙后面的目标 反向TCP隧道, 使得NAT或防火墙后的内网机器可以被外网访问. 在 800 并发下消耗不到 1% 的 CPU 和 8MB 内存. slaver 是 单文件 ，且仅依赖 python2.7/3.4+ 标准库. 工作原理 典型场景 1. 从家里访问公司/学校的电脑（没有外网IP） 从家里连接公司或学校里没有独立外网IP的电脑 2. 使私有网络/站点公开。 使内网或内网站点能从公网访问 3. 辅助内网渗透。 辅助内网渗透 4. 辅助CTF线下赛。 辅助CTF线下赛,...

CertCrunchy

/ \ | | / \ | | | / / | || / / | | | | / \ '| | | | '| | | | ' \ / | ' | | | | | /\ / | | || /\ | | || | | | | | | | | || | /|| |/| ,|| |||| ||, | / | |/ 只是一个利用 SSL 证书数据寻找潜在主机名的傻乎乎侦察工具 这是什么？ 这只是一个傻乎乎的 Python 脚本，它要么从在线来源（当前支持...

isslfix

iOS : iSSLFix: Certificate in c...

rapidscan

🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...

Invoke-SelfSignedWebRequest

Invoke-SelfSignedWebRequest Para el trabajo de InfoSec, usar HTTPS es un mecanismo increíblemente práctico para C2 y para maniobrar dentro del espacio de red objetivo. Además, PowerShell es una herramienta de productividad asombrosa que puede ayudar a un operador a lograr resultados dinámicos. Un...

web-check

Web-Check Inteligencia de código abierto integral y bajo demanda para cualquier sitio web 🌐web-check.xyz Con el amable apoyo de: NinjaPear API para obtener perfiles B2B completos desde cualquier URL | Hostinger Despliega Web-Check con un solo clic en Hostinger | Warp Diseñado para programar con...

CRIME-poc

CRIME-poc El ataque CRIME: un ataque de oráculo de compresión CVE-2012-4929 descubierto por Juliano Rizzo y Thai Duong; En un ataque de oráculo de compresión, el uso de compresión de datos adaptativa sobre una mezcla de texto plano elegido y texto plano desconocido puede provocar cambios sensible...

OpenSSL-1_0_1g_CVE-2015-1790

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson Todos los derechos reservados. DESCRIPCIÓN El Proyecto OpenSSL es un esfuerzo colaborativo para desarrollar un conjunto de herramientas robusto, de calidad comercial, completo y ...

CVE-2024-9474

PAN-OS CVE-2024-0012 y CVE-2024-9474 Script de Python generado a partir del artículo del blog : https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/?123 Todo está descrito allí Mi comentario en X : https://x.com/k4nfr3/status/1858993646923903103...

cve-2022-42475-poc

CVE-2022-42475 PoC Fortinet SSL VPN Pre-Authentication Remote Code Execution Description CVE-2022-42475 is a heap-based buffer overflow vulnerability in the FortiOS SSL VPN service that allows unauthenticated attackers to remotely execute arbitrary code RCE via specially crafted HTTP requests...

Log4j-Vulnerability

Log4j Vulnerability Tutorial: https://youtu.be/PNDBjoT83zA Tutorial: https://cryptodeeptech.ru/log4j-vulnerability Background on Log4j Alibaba Cloud Security Team publicly disclosed a critical vulnerability CVE-2021-44228 enabling unauthenticated remote code execution against multiple versions of...

testssl.sh

Intro testssl.sh is a free command line tool which checks a server's service on any port for the support of TLS/SSL ciphers, protocols as well as some cryptographic flaws. Key features Clear output: yo...

testssl.sh

简介 testssl.sh 是一个免费的命令行工具，用于检查服务器上任意端口的服务是否支持 TLS/SSL 密码套件、协议以及一些加密漏洞。 主要特性 清晰的输出：您可以轻松判断结果是好是坏。 机器可读输出（CSV、两种 JSON 格式），同时也支持 HTML 输出。 无需安装或配置。无需 gems、CPAN、pip 等。 开箱即用：Linux、MacOS、FreeBSD、N...

SonicWall

Description SonicWall “Virtual Office” SSL-VPN Products ship a ancient version of Bash vulnerable to ShellShock, and are therefore vulnerable to unauthenticated remote code execution as a “nobody” user via the /cgi-bin/jarrewrite.sh URL. How to RCE Reference...

seeker

Available in Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website which asks for Location Permission and if...

Openssl_1_1_0_CVE-2021-23841

OpenSSL 1.1.0g 2017年11月2日 Copyright c 1998-2016 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson 保留所有权利。 描述 OpenSSL 项目是一项协作努力，旨在开发一个健壮、商用级、功能齐全且开源的工具包，实现了传输层安全（TLS）协议（包括 SSLv3）以及一个全强度的通用加密库。 OpenSSL 源自 Eric A. Young 和 Tim J. Hudson 开发的 SSLeay 库。OpenSSL 工具包采用双许可证（OpenSSL 许可证加...

openssl

Welcome to the OpenSSL Project !openssl logowww.openssl.org !github actions ci badgegithub actions ci OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations ar...