cve-2026-45185-detection-script

Scripts de detección de CVE-2026-45185 c Plataforma SECPlayground —https://www.secplayground.com Estos scripts de detección son propiedad de la Plataforma SECPlayground. Dos scripts de detección seguros. Ninguno activa el disparador closenotify-mid-BDAT, por lo que no bloquearán el daemon ni...

ldapserver

此软件包仍在开发中。 ldapserver 是一个辅助库，用于构建能够使用 LDAP 协议进行通信的服务器软件。它可以是 LDAP 的替代实现、自定义 LDAP 代理，甚至是能够将其 API “伪装”成 LDAP 服务器的完全不同的后端。 该软件包支持： 所有基本 LDAP 操作（绑定、搜索、添加、比较、修改、删除、扩展） SSL StartTLS 已实现取消绑定请求，但在内部用于关闭连接。 优雅停止 受 net/http ServeMux 启发的基本请求路由 日志记录器自定义（日志接口） 默认行为 放弃请求 如果您没有设置处理 AbandonRequest...

starttls-mitm

starttls-mitm es un proxy MITM que retransmite y vuelca de forma transparente tanto el tráfico en texto plano como el tráfico TLS. Utiliza un archivo de clave y un archivo de certificado proporcionados por el usuario para suplantar servidores remotos. El usuario debe indicar explícitamente al...

openssl

Welcome to the OpenSSL Project OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations are based on a full-strength general purpose cryptographic library, which...

striptls

striptls - auditing proxy poc implementation of STARTTLS stripping attacks A generic tcp proxy implementation and audit tool to perform protocol independent ssl/tls interception and STARTTLS stripping attacks on SMTP, POP3, IMAP, FTP, NNTP, XMPP, ACAP and IRC...

striptls

striptls - 审计代理 STARTTLS 剥离攻击的概念验证实现 一个通用的 TCP 代理实现和审计工具 ，用于执行 协议无关 的 ssl/tls 拦截以及针对 SMTP、POP3、IMAP、FTP、NNTP、XMPP、ACAP 和 IRC 的 STARTTLS 剥离攻击。 Python2! 🏆 战利品 CVE-2016-0772 - python: smtplib CVE-2016-10027 - Smack XMPP 库 //使用本项目发现了漏洞？欢迎与我联系！ 要求： Python = 2.7.9（SSLContext） Python 3 （可选，用于 TLS 拦截）PEM...

sslyze

注意 目前 SSLyze 的开发已转移至单独的代码仓库： https://github.com/nabla-c0d3/sslyze. 本仓库会定期从新父仓库同步更新，但如需最新版本，请查看新仓库。如果你已克隆本仓库但希望追踪新分支，可以使用以下命令更新远程源： root@kitploit: git remote set-url origin https://github.com/nabla-c0d3/sslyze.git ======= SSLyze 快速且功能全面的 SSL 扫描器。 描述 SSLyze 是一个 Python 工具，可通过连接服务器分析其 SSL...

cipherscan

CipherScan Cipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl sclient command line. Cipherscan is meant to ru...

sslscan

SSLScan SSLScan 查询 SSL 服务（如 HTTPS），以确定支持的加密套件。SSLScan 设计为简单、精简且快速。 输出包括 SSL 服务的首选加密套件、证书，并提供文本和 XML 格式。 功能 查询 SSL 服务 支持的加密协议：SSLv2、SSLv3、TLS 1.0、TLS 1.1 和 TLS 1.2（取决于所使用的 OpenSSL 库） 支持 FTP、IMAP、POP3、SMTP 和 XMPP 的 STARTTLS 执行 HTTP 连接 IPv4 和 IPv6 绑定到本地 IP 地址 Python 扩展 文本和 XML 输出 安装 要求： OpenSSL 1.0....

p5-ssl-tools

Colección de Herramientas SSL Este repositorio contiene varias herramientas, destinadas a depurar o analizar problemas relacionados con SSL/TLS. Análisis del estado de TLS analyze-ssl.pl comprueba el soporte de varias versiones de SSL/TLS comprueba qué cifrados son compatibles verifica el...

Heartbleed

Heartbleed 一个针对CVE-2014-0160的检查器（站点和工具）。 公共站点：https://filippo.io/Heartbleed/ 工具用法： root@kitploit: Heartbleed -service="servicename" example.com:443 Heartbleed servicename://example.com:443 退出代码：0 - 安全；1 - 脆弱；2 - 错误。（ 近期已更改 ） 关于包括TIMEOUT和BROKEN PIPE在内的错误消息的解释，请参见在线FAQ。...

CVE-2020-28018

POC CVE-2020-28018 Introduction The Qualys team has discovered and published 21 critical vulnerabilities in the Exim4 mail server. https://blog.qualys.com/vulnerabilities-research/2021/05/04/21nails-multiple-vulnerabilities-in-exim-mail-server The following link provides detailed technical...

SUSE SLES12 Security Update : curl (SUSE-SU-2026:3814-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3814-1 advisory. - CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. - CVE-2026-8286: wrong STARTTLS connection reuse bsc1268402. -...

EUVD-2026-63376

aiosmtplib: STARTTLS response injection...

GHSA-VXJ7-4XRP-5VR4 aiosmtplib: STARTTLS response injection

Impact When a connection is upgraded with STARTTLS, aiosmtplib reads the server's 220 go-ahead reply and immediately performs the TLS handshake without discarding any data still sitting in the receive buffer. Bytes the protocol read off the plaintext socket before the handshake survive across the...

SUSE-SU-2026:3814-1 Security update for curl

This update for curl fixes the following issues: - CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. - CVE-2026-8286: wrong STARTTLS connection reuse bsc1268402. - CVE-2026-8458: wrong reuse for different services bsc1268407. - CVE-2026-8924: traling dot domain super cookie bsc1268409...

Astra Linux – Vulnerability in curl

When curl version 7.20.0 or later connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can send multiple responses at once, which are cached by curl. In this case, curl upgrades to TLS, but it does not discard the cached responses. Instead, it...

Astra Linux – Vulnerability in Ruby 2.5, JRuby

A issue was discovered in Ruby between versions 2.6.7, 2.7.x up to 2.7.3, and 3.x up to 3.0.1. The Net::IMAP library does not raise an exception when the StartTLS command fails with an unknown response. This may allow man-in-the-middle attackers to bypass TLS protections by leveraging the network...

Linux Distros Unpatched Vulnerability : CVE-2026-55558

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.2, SMTPProtocol.starttls in src/aiosmtplib/protocol.py consumes the server's 220...

Oracle Linux 8 : curl (ELSA-2026-57462)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-57462 advisory. - fix TLS/STARTTLS connection reuse vulnerability CVE-2026-8286 Tenable has extracted the preceding description block directly from the Oracle Linux security...