openssl

Welcome to the OpenSSL Project !openssl logowww.openssl.org !github actions ci badgegithub actions ci OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations ar...

sslscan

SSLScan SSLScan consulta servicios SSL, como HTTPS, para determinar los cifrados que son compatibles. SSLScan está diseñado para ser fácil, ligero y rápido. La salida incluye los cifrados preferidos del servicio SSL, el certificado y está en formatos Texto y XML. Features Consultar servicios SSL...

cipherscan

CipherScan Cipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl sclient command line. Cipherscan is meant to ru...

ldapserver

Este paquete está en desarrollo. ldapserver es una librería auxiliar para crear software de servidor capaz de hablar el protocolo LDAP. Podría ser una implementación alternativa de LDAP, un proxy LDAP personalizado o incluso un backend completamente diferente capaz de "enmascarar" su API como un...

starttls-mitm

starttls-mitm es un proxy MITM que retransmite y vuelca de forma transparente tanto el tráfico en texto plano como el tráfico TLS. Utiliza un archivo de clave y un archivo de certificado proporcionados por el usuario para suplantar servidores remotos. El usuario debe indicar explícitamente al...

sslyze

Nota El desarrollo actual de SSLyze ahora tiene lugar en un repositorio separado: https://github.com/nabla-c0d3/sslyze. Este repositorio se actualizará periódicamente desde este nuevo repositorio principal, pero para la versión más actual, consulte el nuevo repo. Si clonó el repositorio pero dese...

striptls

striptls - auditing proxy poc implementation of STARTTLS stripping attacks A generic tcp proxy implementation and audit tool to perform protocol independent ssl/tls interception and STARTTLS stripping attacks on SMTP, POP3, IMAP, FTP, NNTP, XMPP, ACAP and IRC. Python2! 🏆 Trophies CVE-2016-0772 -...

striptls

striptls - proxy d'audit implémentation poc des attaques de délestage STARTTLS Une implémentation générique de proxy TCP et outil d'audit pour effectuer des interceptions ssl/tls indépendantes du protocole et des attaques de délestage STARTTLS sur SMTP, POP3, IMAP, FTP, NNTP, XMPP, ACAP et IRC...

CVE-2026-103878

Cleartext transmission of sensitive information vulnerability in Apache Directory LDAP API. A StartTLS extended operation started after a Search request has been sent can lead to receive data in plain text before the TLS Handshake has been completed. This issue affects Apache Directory LDAP API:...

CVE-2026-103878 Apache Directory LDAP API: Injection of plaintext responses during StartTLS

Cleartext transmission of sensitive information vulnerability in Apache Directory LDAP API. A StartTLS extended operation started after a Search request has been sent can lead to receive data in plain text before the TLS Handshake has been completed. This issue affects Apache Directory LDAP API:...

EUVD-2026-91378

Cleartext transmission of sensitive information vulnerability in Apache Directory LDAP API. A StartTLS extended operation started after a Search request has been sent can lead to receive data in plain text before the TLS Handshake has been completed. This issue affects Apache Directory LDAP API:...

CVE-2026-103878

The Apache Directory LDAP API is vulnerable to a cleartext transmission of sensitive information (CWE-345). A StartTLS extended operation initiated after a Search request has been sent can result in the system receiving data in plain text before the TLS Handshake is completed. This issue affects ...

p5-ssl-tools

Colección de Herramientas SSL Este repositorio contiene varias herramientas, destinadas a depurar o analizar problemas relacionados con SSL/TLS. Análisis del estado de TLS analyze-ssl.pl comprueba el soporte de varias versiones de SSL/TLS comprueba qué cifrados son compatibles verifica el...

EUVD-2026-91139

A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client connection when negotiating StartTLS, allowing an on-path attacker to inject a crafted LDAP message that is processed after the TLS upgrade and whose response is delivered to the client in...

DEBIAN-CVE-2026-86345

A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client connection when negotiating StartTLS, allowing an on-path attacker to inject a crafted LDAP message that is processed after the TLS upgrade and whose response is delivered to the client in...

CVE-2026-86345

A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client connection when negotiating StartTLS, allowing an on-path attacker to inject a crafted LDAP message that is processed after the TLS upgrade and whose response is delivered to the client in...

UBUNTU-CVE-2026-86345

A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client connection when negotiating StartTLS, allowing an on-path attacker to inject a crafted LDAP message that is processed after the TLS upgrade and whose response is delivered to the client in...

CVE-2026-86345

A flaw exists in 389-ds-base where the server fails to discard plaintext bytes buffered from a client connection during StartTLS negotiation. This allows an on-path attacker to inject a crafted LDAP message that is processed post-TLS upgrade. Due to a messageID collision , the injected response c...

CVE-2026-86345

A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client connection when negotiating StartTLS, allowing an on-path attacker to inject a crafted LDAP message that is processed after the TLS upgrade and whose response is delivered to the client in...

Heartbleed

Heartbleed Un comprobador sitio y herramienta para CVE-2014-0160. Sitio público en https://filippo.io/Heartbleed/ Uso de la herramienta: Heartbleed -service="servicename" example.com:443 Heartbleed servicename://example.com:443 Códigos de salida: 0 - SAFE; 1 - VULNERABLE; 2 - ERROR. cambiado...