CVE-2026-102759

NetX Secure TLS accepts an empty application-data record without verifying its message authentication code. In nxsecureverifymac, a decrypted application record whose length equals the negotiated MAC size is treated as valid and returns success after advancing the receive sequence number. The...

CVE-2026-102759: Improper Validation of Integrity Check Value

NetX Secure TLS accepts an empty application-data record without verifying its message authentication code. In nxsecureverifymac, a decrypted application record whose length equals the negotiated MAC size is treated as valid and returns success after advancing the receive sequence number. The...

TLS/HTTPS Mimic Transform

Wraps C2 stream in TLS 1.2 Application Data records so traffic looks like HTTPS on the wire plain TCP. !/usr/bin/env python3 -- coding: utf-8 -- """ TLS/HTTPS mimic transform: wraps C2 traffic in TLS Application Data records so the stream looks like HTTPS TLS 1.2 on the wire while using plain TCP...

PowerShell HTTPS Mimic Transform

Sends a fake TLS ClientHello then wraps C2 bytes in TLS Application Data records. !/usr/bin/env python3 -- coding: utf-8 -- from typing import Optional from modules.transforms.python.protocol.httpsmimic import CLIENTHELLOBYTES, Module as PythonHttpsTransform, class ModulePythonHttpsTransform:...