49099 matches found
pyrdp
PyRDP PyRDP is a Python Remote Desktop Protocol RDP Monster-in-the-Middle MITM tool and library. It features a few tools: RDP Monster-in-the-Middle Logs plaintext credentials or NetNTLM hashes used when connecting Steals data copied to the clipboard Saves a copy of the files transferred over the...
ssl-certificate-expiry-date-checker
sslcertificateexpirydatechecker Find out which cerificate will expire and need to renew. Find various information from scan result expire date, issuer, signature, serial number... If you are ssl cerificate manager in your organization, collect the list from your coworker, teams, and check the...
mkchain
mkchain Open source tool to help you build a valid SSL certificate chain. Description β’ How To Use β’ Parameters β’ How it works β’ Requirements β’ Other β’ License Description Is an open source tool to help you build a valid SSL certificate chain. Also can help you fix the incomplete chain and downlo...
certdepot
Certificate Depot A free online tool for generating self-signed SSL/TLS certificates in seconds. No signup required. Website: cert-depot.com Features Generate self-signed certificates with RSA 2048/4096 or ECDSA P-256/P-384 keys Download as ZIP PEM key + certificate or PFX PKCS12 Automatic SAN...
virt-firmware
Tools for ovmf / armvirt firmware volumes This is a small collection of tools for edk2 firmware images. They support decoding and printing the content of firmware volumes. Variable stores OVMFVARS.fd can be modified, for example to enroll secure boot certificates. virt-fw-dump Decodes and prints...
habu
Habu Hacking Toolkit I'm developing Habu to teach and learn some concepts about Python and Network Hacking. Some techniques implemented in the current version are: ARP Poisoning and Sniffing DHCP Discover and Starvation Subdomains Identification Certificate Cloning TCP Analysis ISN, Flags Usernam...
sn0int
sn0int sn0int pronounced /snoΙͺnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...
pixma
What is this? Some little tools to unpack firmware of Canon PIXMA series for analysis. Motivation Some Pixma printer is unable to reset the Waste Ink counter and refuses to print now, even though waste ink container has been swapped out. So I was curious about the inner workings of the firmware t...
ratched
ratched ratched is a Man-in-the-Middle MitM proxy that specifically intercepts TLS connections. It is intended to be used in conjunction with the Linux iptabes REDIRECT target; all connections that should be intercepted can be redirected to the local ratched port. Through the SOORIGINALDST sockop...
cve-2020-0601
Zeek test script for CVE-2020-0601 This script can detect exploit attempts for CVE-2020-0601. It performs a simple check to see if a known curve is used in a certificate - if this is not the case a notice is raised. Example notice in notice.log: 1579043477.791522 CHhAvVGS1DHFjwGM9 192.241.209.49...
Certipy
Certipy - AD CS Attack & Enumeration Toolkit Certipy is a powerful offensive and defensive toolkit for enumerating and abusing Active Directory Certificate Services AD CS. It helps red teamers, penetration testers, and defenders assess AD CS misconfigurations - including full support for...
censys-subdomain-finder
Censys subdomain finder Important note : As of late 2024, Censys does not provide API access to free accounts anymore. This is a tool to enumerate subdomains using the Certificate Transparency logs stored in Censys Search. It should return any subdomain who has ever been issued a SSL certificate ...
PySCTChecker
PySCTChecker Description This is a Quick and dirty Python script for checking if a domain properly implements Certificate Transparency. If so, it is possible to observe how Certificate Transparency is implemented on the server side. When a server implements Certificate Transparency, it must offer...
zen-desktop
Zen: Your Comprehensive Ad-Blocker and Privacy Guard There is, simply, no way, to ignore privacy. Because a citizenryβs freedoms are interdependent, to surrender your own privacy is really to surrender everyoneβs. Edward Snowden, Permanent Record Website β’ Mastodon β’ Bluesky β’ Discord β’...
frida-interception-and-unpinning
Frida Mobile Interception Scripts !Funded by NLnet - NGI Zero...
POC-CVE-2026-54121-Certighost
CertiGhost CVE-2026-54121 - AD CS Chase Fallback Exploit Toolkit Overview CertiGhost is a critical vulnerability CVSS 8.8 in Active Directory Certificate Services AD CS that allows a low-privileged domain user to impersonate a Domain Controller and achieve full domain compromise. CVE:...
certificate-of-compromise
Certificate of Compromise SoK/Whitepaper on Offensive Operations against Active Directory Certificate Service v1.0.0 Living Document & Community Contributions This paper is a living document. ADCS research is not static β techniques get patched, new conditions are discovered, and community analys...
CVE-2026-50751---Check-Point-IKEv1-Authentication-Bypass-Exploit
CVE-2026-50751 - Check Point IKEv1 Authentication Bypass Exploit β οΈ IMPORTANT WARNING This code is ONLY for educational purposes and authorized security testing. Unauthorized use against systems without explicit permission is ILLEGAL. The author is not responsible for the misuse of this tool. π...
pwnage24mtk
pwnage24mtk Cert exploit for MTK devices.There is a logic flaw in MTK cert verification process.Similar to CVE-2023-20696. Patched. CVE-2023-20696 CVE-2025-20730 There are some issues about architecture detect.Need to be fixed when I am free.Or anyone can make a pull request. This is a vibe-coded...
certstreamcatcher
Certstreamcatcher Catching phishing by observing certificate transparency logs. This tool is based on regex with effective standards for detecting phishing sites in real time using certstream and can also detect punycode IDNA attacks such as https://www.αΉyetαΈ£erwallet.com. Phishing Phishing...