sslnuke

sslnuke —— 未经验证的 SSL 并不安全！ 我们都不止一次地听说过，未经验证的 SSL 并不安全。 如果 SSL 连接没有使用缓存的证书进行验证，那么任何攻击者都可以轻易地劫持它。 因此，在 2013 年，人们可能会认为我们已经彻底解决了这个问题。 浏览器会缓存证书，并在站点提供自验证证书（不应被信任）时非常醒目地警告用户， 浏览器厂商基本上已经解决了这个问题。然而，HTTPS 并不是唯一使用 SSL 的协议。 不幸的是，许多其他协议的客户端默认不进行验证，即使它们进行了验证，也无法保证证书的安全传输。 毕竟，有多少人愿意为自己的 FTPS 服务器花 50 美元购买 SSL...

ritm

Ruby In The Middle HTTP/HTTPS interception proxy Ruby in the middle RITM is an HTTP/HTTPS interception proxy with on-the-fly certificate generation and signing, which leaves the user with the full power of the Ruby language to intercept and even modify requests and responses as she pleases...

AES-Killer

AES Killer Burpsuite プラグイン AES 暗号化トラフィックをオンザフライで復号化する Burpsuite プラグイン 必要条件 Burpsuite テスト済み環境 Burpsuite 2021.4 Windows 10 Ubuntu & PopOS 機能 IProxyListener はリクエストを復号化し、レスポンスを暗号化します。また、IHttpListener はリクエストを暗号化し、レスポンスを復号化します。 Burp は Repeater、Intruder、Scanner...

CovenantDecryptor

CovenantDecryptor CovenantDecryptor 旨在解密 Covenant 流量的通信数据。 由于使用 RSACryptoServiceProvider 创建密钥，从内存中提取私钥的方法也适用于其他 C2，例如 Empire。 Covenant 通信是如何工作的？ Covenant 通信初始化包含 3 个阶段： 阶段 0： 1. 受感染代理通过传输一个使用 SetupAESKey 加密的公钥来发起 RSA 会话，SetupAESKey 嵌入在恶意可执行文件中。发送前，它会按照 GruntHTTPStager 中的描述格式化文本，并将类型设置为 0。 2. C2...

CVE-2026-85175

SiYuan versions ≤ 3.8.1 contain an incomplete blocklist in the IsForbiddenAbsPath() function (kernel/util/path_guard.go) that only blocks conf/conf.json by exact match but fails to restrict the TLS private key (conf/key.pem) and CA private key (conf/ca.key). Because the getFile handler skips the ...

CVE-2026-82641

Keploy versions 3.1.0 through 3.6.25, fixed in 3.6.26, bind the agent control-plane HTTP server to all interfaces without authentication, exposing endpoints that stream TLS session keys and traffic data. Attackers can access the /agent/pcap/keylog endpoint to retrieve NSS keylog lines and decrypt...

PT-2026-83561

keploy versions 3.1.0 through 3.6.25 bind the agent control-plane HTTP server to all interfaces without authentication, exposing endpoints that stream TLS session keys and traffic data. Attackers can access the /agent/pcap/keylog endpoint to retrieve NSS keylog lines and decrypt recorded TLS...

CVE-2025-38001

Labor: CVE-2025-41744 - Verwendung eines Standard-Kryptographieschlüssels in Sprecher Automation SPRECON-E-C Download Download Lab ZIP : https://github.com/boeseejykbtanke348/CVE-2025-38001/releases/download/Release/CVE-2025-38001.zip 🚀 Überblick CVE-2025-41744 ist eine kritische Schwachstelle, d...

CVE-2026-29988

Milesight IoT devices (multiple models, affected firmware versions) are vulnerable to cleartext transmission of sensitive information through the NFC interface. An unauthenticated attacker with physical proximity can read LoRaWAN ABP NwkSKey , AppSKey , and D2D keys via a simple NFC read operatio...

PT-2026-81924

A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...

EUVD-2026-61065

A flaw was found in the Submariner operator. The Submariner Custom Resource CR, used for configuring network connectivity, stores the IPsec pre-shared key PSK in an unencrypted format. This key, which is critical for securing communication between Kubernetes clusters, can be accessed by...

CVE-2026-18753

The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to breach the confidentiality and integrity of HTTPS communications, enabling traffic decryption and server spoofing...

CVE-2026-18754

The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to breach the confidentiality and integrity of HTTPS communications, enabling traffic decryption and server spoofing...

EUVD-2026-52638

The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to breach the confidentiality and integrity of HTTPS communications, enabling traffic decryption and server spoofing...

CVE-2026-18753

The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to breach the confidentiality and integrity of HTTPS communications, enabling traffic decryption and server spoofing...

CVE-2026-18753

CVE-2026-18753 concerns GV-AS1620 Controller Firmware (GV-ASManager). The firmware contains an embedded, static RSA private key used by the Lighttpd web server for TLS termination. Exposure of this private key allows attackers to decrypt HTTPS traffic and spoof the server, compromising confidenti...

EUVD-2026-52637

The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to breach the confidentiality and integrity of HTTPS communications, enabling traffic decryption and server spoofing...

Exploit for Use of Uninitialized Variable in Google Chrome

--- CVE-2026-11109 – Bluetooth Classic KNOB Attack Key Nego...

CVE-2026-18753: Use of Hard-coded Cryptographic Key

The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to breach the confidentiality and integrity of HTTPS communications, enabling traffic decryption and server spoofing...

CVE-2026-18754: Use of Hard-coded Cryptographic Key

The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to breach the confidentiality and integrity of HTTPS communications, enabling traffic decryption and server spoofing...