sslscan

sslscan2 تم إصدار sslscan الإصدار 2. يتضمن ذلك إعادة كتابة كبيرة لرمز المسح الخلفي، مما يعني أنه لم يعد معتمداً على إصدار OpenSSL للعديد من الفحوصات. وهذا يعني أنه من الممكن دعم البروتوكولات القديمة SSLv2 و SSLv3، بالإضافة إلى دعم TLSv1.3 - بغض النظر عن إصدار OpenSSL الذي تم تجميعه ضده. أصبح هذا...

WAF_buster

WAFbuster تعطيل جدار الحماية عن طريق استغلال تشفيرات SSL/TLS حول WAFbuster تم إنشاء هذه الأداة لتحليل التشفيرات المدعومة من قبل جدار حماية تطبيقات الويب المستخدم على جانب خادم الويب.المرجع:https://0x09al.github.io/waf/bypass/ssl/2018/07/02/web-application-firewall-bypass.html.تعمل أولاً عن طريق...

golismero

What's GoLismero? GoLismero is an open source framework for security testing. It's currently geared towards web security, but it can easily be expanded to other kinds of scans. The most interesting features of the framework are: Real platform independence. Tested on Windows, Linux, BSD and OS X. ...

ssh-audit

ssh-audit ssh-audit is a tool for ssh server & client configuration auditing. jtesta/ssh-audit v2.0+ is the updated and maintained version of ssh-audit forked from arthepsy/ssh-audit v1.x due to inactivity. Features Usage Screenshots Server Standard Audit Example Server Policy Audit Example Clien...

WAF Buster - Disrupt WAF By Abusing SSL/TLS Ciphers

Disrupt WAF by abusing SSL/TLS Ciphers About WAFbuster This tool was created to Analyze the ciphers that are supported by the Web application firewall being used at the web server end. Reference: https://0x09al.github.io/waf/bypass/ssl/2018/07/02/web-application-firewall-bypass.html It works by...

Weblate: Incorrect HTTPS Certificate

Weblate appears to have a public facing git repository located at git.weblate.org that utilises HTTPS when viewed in the browser. As a side note, netcat to port 80 results in the default debian landing page. 77.78.107.252 - git.weblate.org The site has an incorrectly configured certificate, and...

SSLv3 Is Not Disabled When sslProtocol is Set to TLS, Vulnerable to POODLE

The default connector as written in /conf/server.xml uses sslProtocol="TLS". This should only enable TLS connectors, but it also enables SSLv3. Our documentation and the included server.xml need to be updated to reflect the correct settings to enable only TLS. h3. Reproduction steps: Follow the...