chainoffools

CryptoAPI CVE-2020-0601：Windows CryptoAPI 欺骗漏洞利用。更多信息请参阅我们的博客文章。 安装依赖 root@kitploit: pip install -U -r requirements.txt 证书生成适用于最高 1.0.2u 版本的 OpenSSL。 CA 证书 我们使用了 USERTrust ECC Certification Authority，但也可以是任何基于 P-384 曲线的根证书。 为了生成与根证书公钥匹配的私钥，我们使用了脚本 gen-key.py （适用于 Python 3.6 及以上版本）： root@kitploit:...

CVE-2020-0601

CVE-2020-0601 针对CVE-2020-0601的PoC - Windows CryptoAPI Crypt32.dll PoC: https://github.com/ollypwn/CurveBall 在Kali上： 1.生成PKCS12文件 root@kitploit: openssl req -new -x509 -key spoofedca.key -out spoofedca.crt openssl ecparam -name secp384r1 -genkey -noout -out Microsoft.key openssl req -new -key...

CVE-2026-55144

Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...

CVE-2026-55144

Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...

Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability

Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...

EUVD-2023-28924

Malicious code in bioql PyPI...

EUVD-2023-39342

Malicious code in bioql PyPI...

EUVD-2021-7146

Malicious code in bioql PyPI...

EUVD-2023-28925

Malicious code in bioql PyPI...

BIT-GOLANG-2020-0601

A spoofing vulnerability exists in the way Windows CryptoAPI Crypt32.dll validates Elliptic Curve Cryptography ECC certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted,...

CVE-2023-35339

Windows CryptoAPI Denial of Service Vulnerability...

Microsoft Windows CryptoAPI 安全漏洞

Microsoft Windows CryptoAPI is a cryptographic compiler added to the Windows operating system by Microsoft. CryptoAPI supports synchronous and asynchronous key encryption and the management of digital certificates in the operating system as the basis for data encryption and decryption functions. ...

PT-2023-3852 · Microsoft · Windows Cryptoapi +1

Name of the Vulnerable Software and Affected Versions: Windows CryptoAPI affected versions not specified Description: The issue is related to incorrect clearing or release of resources in the Windows CryptoAPI, which can be exploited by a remote attacker to cause a denial of service...

CVE-2023-24937

Windows CryptoAPI Denial of Service Vulnerability...

CVE-2023-24937

Windows CryptoAPI Denial of Service Vulnerability...

Denial of service

Windows CryptoAPI Denial of Service Vulnerability...

CVE-2023-24937 Windows CryptoAPI Denial of Service Vulnerability

...

CVE-2023-24938 Windows CryptoAPI Denial of Service Vulnerability

...

PT-2023-3502 · Microsoft · Windows Cryptoapi +1

Name of the Vulnerable Software and Affected Versions: Windows CryptoAPI affected versions not specified Description: The issue is related to insufficient input validation in the Windows CryptoAPI interface, which can be exploited by a remote attacker to cause a denial of service. This can affect...

SUSE CVE-2020-0601

A spoofing vulnerability exists in the way Windows CryptoAPI Crypt32.dll validates Elliptic Curve Cryptography ECC certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted,...