driftwood

Driftwood ⚠️ Driftwood CLI 도구는 더 이상 지원되지 않습니다. 대신 TruffleHog를 사용하세요! ⚠️ Driftwood는 개인 키가 TLS와 같은 용도로 사용되거나 사용자의 GitHub SSH 키로 사용되는지 확인할 수 있는 도구입니다. Driftwood는 계산된 공개 키로 조회를 수행하므로 개인 키는 도구를 실행하는 곳을 절대 떠나지 않습니다. 또한 암호화된 키에 대한 기본적인 비밀번호 크래킹을 지원합니다. 자세한 내용은 여기에서 읽을 수 있습니다. 설치 시작하는 세 가지 쉬운 방법. Docker로...

mitmengine

MITMEngine 지원 중단 알림: 이 소프트웨어는 더 이상 유지 관리되지 않습니다. 이 프로젝트의 목표는 HTTPS 가로채기를 정확하게 탐지하고 강력한 TLS 핑거프린팅을 가능하게 하는 것입니다. 이 프로젝트는 HTTPS 가로채기의 보안 영향을 기반으로 하며, 해당 처리 스크립트 및 핑거프린트를 Go로 포팅한 것입니다. MITMEngine에 대한 자세한 내용은 Cloudflare 블로그 게시물에서 확인할 수 있습니다. 빠른 링크: 서명 및 핑거프린트: 핵심 정의 MITM 탐지 방법론 API 사용 예시 빌드 및 테스트 기여 ...

HRShell

HRShell: Flask로 구축된 고급 HTTPS 리버스 셸 HRShell은 Flask로 구축된 HTTPS/HTTP 리버스 셸이며 python 3.x와 호환됩니다. client.py는 다음에서 성공적으로 테스트되었습니다: Linux ubuntu 18.04 LTS, Kali Linux 2019.3 macOS Mojave/Catalina Windows 7/10 server.py는 Unix 시스템과 호환됩니다 Windows 지원은 곧 제공 예정.... 기능 은밀함 TLS 지원 🔑 즉석 인증서 사용 또는 인증서/키 쌍 지정 자세한...

purpleteam-tls-checker

purpleteam-tls-checker purpleteam의 TLS 검사 구성 요소...

fingerprintx

Features • Installation • Usage • Running fingerprintx • Using as a library • Why not nmap? • Notes • Acknowledgements fingerprintx is a utility similar to httpx that also supports fingerprinting services like as RDP, SSH, MySQL, PostgreSQL, Kafka, etc. fingerprintx can be used alongside port...

nogotofail

nogotofail Nogotofailは、柔軟でスケーラブルかつ強力な方法で、デバイスやアプリケーション上の脆弱なTLS/SSL接続や機密性の高い平文トラフィックを発見し修正するために、開発者やセキュリティ研究者を支援するように設計されたネットワークセキュリティテストツールです。 一般的なSSL証明書検証の問題、HTTPSやTLS/SSLライブラリのバグ、SSLやSTARTTLSストリッピングの問題、平文の問題など、さまざまなテストが含まれています。 デザイン Nogotofailは、ネットワーク経路上のMiTMと、テスト対象デバイス用のオプションのクライアントで構成されています。...

Exploit for CVE-2026-19445

abraxaslabs.tech · github.com/abraxas ·&...

p5-ssl-tools

SSLツールコレクション このリポジトリには、SSL/TLSに関連する問題のデバッグや解析を目的としたさまざまなツールが含まれています。 TLSの状態の解析 analyze-ssl.pl さまざまなSSL/TLSバージョンのサポートを確認 サポートされている暗号スイートを確認 証明書の検証 OCSPの状態を確認 SNIがサポートされているか、および/または必須かどうかを確認 チェーン証明書を表示し、証明書の検証が成功した場合はローカルルートも表示 直接接続およびさまざまな形式のSTARTTLSをサポート ... SMTP TLSサポート（STARTTLS） mxstarttlsbulk....

CVE-2026-15911

A flaw was found in confluent-kafka. The HashiCorp Vault Key Management Service KMS integration fails to properly validate Transport Layer Security TLS certificates by default. A remote attacker able to intercept network traffic could exploit this flaw to intercept and decrypt sensitive data or...

openSUSE 16 Security Update : rclone (openSUSE-SU-2026:21999-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21999-1 advisory. Changes in rclone: - Update to version 1.75.1: boo1279548 - Security - archive - Fix zip slip path traversal in untrusted zip files...

openSUSE 16: libtcnative-1-0 / libtcnative-1-0-devel / libtcnative-2-0 / etc (openSUSE-SU-2026:21984-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21984-1 advisory. Security issues fixed: - CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore bsc1282631. -...

CentOS Linux 8.4 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1790933443)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1790933443 advisory. - Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when...

CVE-2026-19445

A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a different context to SSLSocket.context the documented way to select a certificate per server name and nothing else keeps the original ssl.SSLContext alive. Typical cases are...

UBUNTU-CVE-2026-19445

A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a different context to SSLSocket.context the documented way to select a certificate per server name and nothing else keeps the original ssl.SSLContext alive. Typical cases are...

CentOS Linux 8.5 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1790933161)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1790933161 advisory. - Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when...

ssl-heartbleed.nse

ssl-heartbleed.nse Heartbleed/CVE-2014-0160 を発見・悪用する Nmap NSE スクリプトです。このスクリプトは現在、基本的に Patrik Karlsson が書いたものに、私自身のスクリプトから移植した小さな変更を加えたものです。 特徴 FTP, SMTP, XMPP のサポートを含む https://github.com/nmap/nmap/blob/master/nselib/sslcert.luaL231。 TLS のすべてのバージョン TLSv1.0, TLSv1.1, TLSv1.2 をサポート。...

CVE-2025-54424

CVE-2025-54424 CVE-2025-54424：1Panel クライアント証明書バイパスRCE脆弱性 統合ツール（スキャン＋エクスプロイト） 脆弱性の概要 1Panel は、オープンソースでモダンな Linux 運用管理パネルであり、Web サイトのデプロイ、サーバー管理、サービスの実行をグラフィカルインターフェースで提供します。 影響を受けるバージョンでは、Agent 側の TLS 認証ポリシーが tls.RequireAnyClientCert に設定されており、証明書の提示のみを要求し、その信頼性は検証しません。攻撃者は自己署名証明書を使用して TLS...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...