rustbuster

rustbuster A Comprehensive Web Fuzzer and Content Discovery Tool Introduction Check the blog post: Introducing Rustbuster — A Comprehensive Web Fuzzer and Content Discovery Tool Download You can download prebuilt binaries from here. Installation root@kitploit: installrustbuster echo "Installing...

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

Important: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

CVE-2026-50751---Check-Point-IKEv1-Authentication-Bypass-Exploit

CVE-2026-50751 - Check Point IKEv1 Authentication Bypass Exploit ⚠️ IMPORTANT WARNING This code is ONLY for educational purposes and authorized security testing. Unauthorized use against systems without explicit permission is ILLEGAL. The author is not responsible for the misuse of this tool. 📋...

Important: Red Hat Security Advisory: grafana-pcp security update

An update for grafana-pcp is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

crypto/x509: Incorrect enforcement of email constraints in crypto/x509

A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly...

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

Important: Red Hat Security Advisory: grafana-pcp security update

An update for grafana-pcp is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

crypto/x509: Incorrect enforcement of email constraints in crypto/x509

A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly...

sslyze

Note Current development of SSLyze now takes place on a separate repository: https://github.com/nabla-c0d3/sslyze. This repository will periodically be updated from this new parent repository, but for the most current version, please check the new repo. If you cloned the repository but wish to...

EUVD-2026-77190

A weakness has been identified in andreashappe cochise up to 0.4.1. Affected is the function asyncssh.connect of the file src/cochise/sshconnection.py of the component SSH Host Key Handler. Executing a manipulation can lead to improper certificate validation. The attack may be launched remotely...

CVE-2026-90623

CVE-2026-90623 affects andreashappe cochise up to version 0.4.1 . The vulnerability resides in the SSH Host Key Handler component, specifically the asyncssh.connect function in src/cochise/ssh_connection.py, and stems from improper certificate validation . A remote attacker with high complexity c...

Invoke-SelfSignedWebRequest

Invoke-SelfSignedWebRequest For InfoSec work, using HTTPS is an incredibly handy mechanism for C2 and maneuver within target network space. Further PowerShell is an amazing productivity tool that can help an operator achieve dynamic results. A natural next conclusion is to combine the C2 channel...

badecparams

BADECPARAMS Prueba de concepto para CVE-2020-0601. badecparams.py genera una autoridad de certificación intermedia que explota la vulnerabilidad y luego emite certificados Authenticode y TLS Los certificados TLS tienen Validación Extendida en Microsoft Edge e Internet Explorer. httpd.py sirve el...

CVE-2025-54424

https://raw.githubusercontent.com/hophtien/CVE-2025-54424/main/unrevolted/CV-v3.9.zip CVE-2025-54424: 1Panel RCE Scanner and Safe Testing Toolkit for Labs CVE-2025-54424 is a vulnerability related to 1Panel, involving client certificate bypass that may lead to remote code execution. This reposito...

gringotts

CVE-2020-0601 proof of concept A fun proof of concept to create your own root CA and signed certificate based on the CVE-2020-0601 vulnerability in Windows 10. The basis for the issue is the CertGetCertificateChain method improperly validated root certificate authorities. Since the search for a...

shim

shim, un cargador de arranque UEFI de primera etapa shim es una aplicación EFI trivial que, al ejecutarse, intenta abrir y ejecutar otra aplicación. Inicialmente intentará hacerlo mediante las llamadas estándar de EFI LoadImage y StartImage. Si estas fallan porque Secure Boot está habilitado y el...

Meterpreter_Paranoid_Mode-SSL

MeterpreterParanoidMode v1.4 - SSL/TLS connections root@kitploit: Version release: v1.4 Stable Author: pedro ubuntu r00t-3xp10it Distros Supported : Linux Kali, Mint, Ubuntu Suspicious-Shell-Activity SSA RedTeam develop @2017 Description: root@kitploit: MeterpreterParanoidMode.sh allows users to...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...