cve-2024-58239

exploit de mitigación CVE-2024-58239 Este es mi primer exploit de 1 día. Parche: tls: stop recv if initial processrxlist gave us non-DATA Vi exp407 en la hoja de cálculo de kernelCTF e intenté reproducir el exploit. Logré ejecutar el exploit en el entorno de kernelCTF y obtuve la bandera: Escribi...

PT-2026-104647

gopay before 1.5.119 disables TLS certificate verification in defaultClient in pkg/xhttp/client.go, allowing man-in-the-middle attackers to impersonate payment provider APIs. Attackers can present any certificate to read merchant credentials, signatures and transaction data, and modify payment,...

openSUSE 16 Security Update : distribution (openSUSE-SU-2026:22010-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22010-1 advisory. - CVE-2026-81871: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry...

PT-2026-104646

Cockpit CMS 2.12.0 before 2.14.1 disables TLS certificate verification in the cron.php web worker restart request, allowing network attackers to capture the worker token. Man-in-the-middle attackers on the outbound path to site url can present any certificate to steal the worker/web/token value a...

PT-2026-104656

The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets ssl verify peer to FALSE, which is passed to CURLOPT SSL VERIFYPEER. On-path attackers can present any certificate to intercept Google Maps web-service...

CVE-2018-6574

Los archivos main.go y attack.so se utilizan para explotar CVE-2018-6574; usamos github debido a TLS...

CVE-2025-23048-POC

CVE-2025-23048: Bypass de certificado de cliente en la reanudación de sesión TLS 1.3 de Apache modssl Las versiones de Apache HTTP Server 2.4.35 – 2.4.62 son vulnerables a un bypass de autenticación de certificado de cliente cuando se utiliza la reanudación de sesión TLS 1.3 entre hosts virtuales...

POC_CVE-2026-45185

CVE-2026-45185 Laboratorio de Validación de Plantillas Nuclei Este repositorio no es un repositorio de PoC de exploits de propósito general. Es un laboratorio de validación local para reproducir y revisar el comportamiento de una plantilla CVE-2026-45185 destinada a ser contribuida a...

Openssl_G2.5_CVE-2014-3570_01

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson Todos los derechos reservados. DESCRIPCIÓN El Proyecto OpenSSL es un esfuerzo colaborativo para desarrollar un kit de herramientas robusto, de calidad comercial, con todas las...

Openssl_G2.5_CVE-2014-8275

OpenSSL 1.0.1g 7 Abr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson Todos los derechos reservados. DESCRIPCIÓN El Proyecto OpenSSL es un esfuerzo colaborativo para desarrollar un conjunto de herramientas robusto, de calidad comercial, completo y ...

openssl_g2.5_CVE-2014-3566

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

BurpSuite-Team-Extension

BurpSuite-Team-Extension This Burpsuite plugin allows for multiple testers to share live/historical proxy requests, scope and repeater/intruder payloads with each other in real time allowing for truly collaborative web app testing. When connected to the Team Sever and in a Team Room all requests...

Awesome-Pentest

Awesome Pentest Tools and Resources A list of awesome penetration testing tools and resources. Contents Antivirus Evasion Tools AWS File Viewers and Pretty Printers Hardware Security CAN Bus Logic Analyzers Misc Hardware Tools Hash Cracking Tools Hex Editors Lab Setup Mobile Security Android iOS...

HeartbleedAttack

Ataque Heartbleed: Demo de ataque basada en Java Resumen Este repositorio incluye Heartbleed.java, un exploit personalizado basado en Java diseñado para demostrar la vulnerabilidad Heartbleed CVE-2014-0160 extrayendo datos sensibles de un servidor vulnerable IP: 192.168.1.132 que ejecuta Apache...

CVE-2024-36401

CVE-2024-36401 Remix del CVE-2024-36401 de Chokapikk para permitir un comportamiento similar a una webshell en entornos limitados. También permite sesiones TLS autofirmadas, ya que las sesiones HTTP son un poco... Uso: git clone https://github.com/keelanbrady1011/CVE-2024-36401 && cd CVE-2024-364...

AlmaLinux 9.6 [TuxCare] Security Update: rsync / rsync-daemon / rsync-rrsync Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1790971363)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790971363 advisory. - rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local...

Rocky Linux 9.6 [TuxCare] Security Update: rsync / rsync-daemon / rsync-rrsync Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1790971363)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790971363 advisory. - rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local...

SUSE SLED15 / SLES15 Security Update : python-anyio (SUSE-SU-2026:4416-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4416-1 advisory. - CVE-2026-63374: : TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing...

secret_handshake

Secret Handshake - mTLSを介したx509証明書を使用するマルウェアC2チャネル 動機 まず、なぜこれをオープンソースにするのか？ MITRE...

challenge_CVE-2020-13777

Reto CVE-2020-13777 Intenta demostrar si el MITM de TLS 1.3 es posible y descifra los datos tempranos 0-RTT en el pcap aquí Servidor: 192.168.100.23:5556. Consulta https://jovi0608.hatenablog.com/entry/2020/06/13/104905 y CVE-2020-13777 para más detalles...