cve-2020-0601_poc

基本信息 此工具源代码旨在帮助理解 Windows Crypto API 中发现的 CVE-2020-0601 漏洞，请参阅 CERT 的概述。 该工具本身可用于为任意域名生成证书，该证书将由恶意证书颁发机构签名。此工具生成的恶意 CA 与命令行提供的公钥相同。 当易受攻击的 Windows 系统的网络浏览器访问此证书时，该证书将被视为受信任的证书。因此，位置合适的网络攻击者可以拦截受害者的流量。 用法简述 启动工具并提供受信任 Windows 证书的路径： root@kitploit: ./cve-2020-0601poc...

CVE-2020-0601

CVE-2020-0601 CVE-2020-0601 - Un exploit criptográfico de Windows...

The vulnerability of the programming interface of Windows CryptoAPI on Windows operating systems, which allows attackers to perform spoofing attacks

The vulnerability of the Windows CryptoAPI programming interface in Windows operating systems relates to the ability to bypass authentication through spoofing. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...

The vulnerability of the programming interface of Windows CryptoAPI on Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Windows CryptoAPI programming interface on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Available Tools Making Dent in WannaCry Encryption

Tools are beginning to emerge that can be used to start the process of recovering files encrypted by WannaCry on some Windows systems. This takes on extra urgency because today marks one week from the initial outbreak, and files encrypted during that first wave are on the clock and close to being...

CVE-2016-7219

The Crypto driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to obtain sensitive information via a crafted application,...

TrueCrypt Audit Cryptanalysis Finds No Backdoors

The results are in from the cryptanalysis phase of the TrueCrypt audit, and they show—nothing. Well, maybe not “nothing,” but certainly no signs of a deliberate backdoor from the NSA or any government entity, fears of which date back to the autumn of 2013, post-Snowden, and ignited talk to have t...