p5-ssl-tools

Collection of SSL Tools This repository contains various tools, which are intended to debug or analyze problems related to SSL/TLS. Analyzing state of TLS analyze-ssl.pl check support for various SSL/TLS version check which ciphers are support verfiy certificate check OCSP state check if SNI is...

openssl

Welcome to the OpenSSL Project !openssl logowww.openssl.org !github actions ci badgegithub actions ci OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations ar...

cipherscan

CipherScan Cipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl sclient command line. Cipherscan is meant to ru...

sslscan

SSLScan SSLScan queries SSL services, such as HTTPS, in order to determine the ciphers that are supported. SSLScan is designed to be easy, lean and fast. The output includes preferred ciphers of the SSL service, the certificate and is in Text and XML formats. Features Query SSL services Supported...

starttls-mitm

starttls-mitm is a mitm proxy that will transparently proxy and dump both plaintext and TLS traffic. It uses a user-provided keyfile and certificate file to impersonate remote servers. The user must explicitly instruct the device being man-in-the-middled to trust this certificate authority -- so...

striptls

striptls - auditing proxy poc implementation of STARTTLS stripping attacks A generic tcp proxy implementation and audit tool to perform protocol independent ssl/tls interception and STARTTLS stripping attacks on SMTP, POP3, IMAP, FTP, NNTP, XMPP, ACAP and IRC. Python2! 🏆 Trophies CVE-2016-0772 -...

ldapserver

This package is a work in progress. ldapserver is a helper library for building server software capable of speaking the LDAP protocol. This could be an alternate implementation of LDAP, a custom LDAP proxy or even a completely different backend capable of "masquerading" its API as a LDAP Server...

sslyze

Note Current development of SSLyze now takes place on a separate repository: https://github.com/nabla-c0d3/sslyze. This repository will periodically be updated from this new parent repository, but for the most current version, please check the new repo. If you cloned the repository but wish to...

Heartbleed

Heartbleed A checker site and tool for CVE-2014-0160. Public site at https://filippo.io/Heartbleed/ Tool usage: Heartbleed -service="servicename" example.com:443 Heartbleed servicename://example.com:443 Exit codes: 0 - SAFE; 1 - VULNERABLE; 2 - ERROR. recently changed See the online FAQ for an...

cve-2026-45185-detection-script

CVE-2026-45185 Detection Scripts c SECPlayground Platform —https://www.secplayground.com These detection scripts are property of the SECPlayground Platform. Two safe detection scripts. Neither drives the closenotify-mid-BDAT trigger, so they will not crash the daemon or leave panic-log entries...

UBUNTU-CVE-2026-115559

IMAP4.starttls wraps the socket in TLS but leaves self.readbuf, imaplib's own read-ahead buffer, untouched. Any plaintext bytes that arrived in the same recv as the tagged OK to STARTTLS are returned by readline after the handshake, so the client treats them as the first responses on the protecte...

CVE-2026-115559

IMAP4.starttls wraps the socket in TLS but leaves self.readbuf, imaplib's own read-ahead buffer, untouched. Any plaintext bytes that arrived in the same recv as the tagged OK to STARTTLS are returned by readline after the handshake, so the client treats them as the first responses on the protecte...

CVE-2026-126135

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: If an attacker was able to perform a man-in-the-middle attack on an SMTP or POP3 server connection using STARTTLS, the attacker could inject server responses before the TLS handshake...

CVE-2026-126135

If an attacker was able to perform a man-in-the-middle attack on an SMTP or POP3 server connection using STARTTLS, the attacker could inject server responses before the TLS handshake completed. Thunderbird would process these responses after the handshake, as if they had been received from the...

Linux Distros Unpatched Vulnerability : CVE-2026-126135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If an attacker was able to perform a man-in-the-middle attack on an SMTP or POP3 server connection using STARTTLS, the attacker could inject server responses...

DEBIAN-CVE-2026-126135

If an attacker was able to perform a man-in-the-middle attack on an SMTP or POP3 server connection using STARTTLS, the attacker could inject server responses before the TLS handshake completed. Thunderbird would process these responses after the handshake, as if they had been received from the...

CVE-2026-126135

If an attacker was able to perform a man-in-the-middle attack on an SMTP or POP3 server connection using STARTTLS, the attacker could inject server responses before the TLS handshake completed. Thunderbird would process these responses after the handshake, as if they had been received from the...

AZL-113323 CVE-2026-115559 affecting package python-py 1.11.0-1

IMAP4.starttls wraps the socket in TLS but leaves self.readbuf, imaplib's own read-ahead buffer, untouched. Any plaintext bytes that arrived in the same recv as the tagged OK to STARTTLS are returned by readline after the handshake, so the client treats them as the first responses on the protecte...

AZL-113329 CVE-2026-115559 affecting package python3 3.12.16-2

IMAP4.starttls wraps the socket in TLS but leaves self.readbuf, imaplib's own read-ahead buffer, untouched. Any plaintext bytes that arrived in the same recv as the tagged OK to STARTTLS are returned by readline after the handshake, so the client treats them as the first responses on the protecte...

EUVD-2026-122689

If an attacker was able to perform a man-in-the-middle attack on an SMTP or POP3 server connection using STARTTLS, the attacker could inject server responses before the TLS handshake completed. Thunderbird would process these responses after the handshake, as if they had been received from the...