roca

ROCA 検出ツール このツールは、ACM CCS 2017 会議論文 124 Return of the Coppersmith's Attack: Practical Factorization of Widely Used RSA Moduli に関連しています。 このツールを使用すると、公開RSA鍵に、説明されている脆弱性が存在するかテストできます。 2017年11月4日更新 : Python 2.7、3.4以上に対応。 2017年10月30日更新 : 攻撃に関する論文は既に公開されています。ACM版。 2017年10月30日更新 :...

Curveball

Curveball CVE-2020-0601에 대한 PoC입니다. 자세한 블로그 게시물은 여기에서 확인할 수 있습니다. 이 익스플로잇은 CryptoAPI가 ECC 기반 인증서에서 특정 매개변수를 처리하는 방식을 남용하여 가짜 신뢰할 수 있는 인증서를 생성할 수 있게 합니다. 설정 리포지토리를 클론하고 Visual Studio 2019에서 엽니다. Release로 전환하고 컴파일합니다. 미리 빌드된 바이너리는 여기에서 찾을 수 있습니다. 사용법 root@kitploit: .\Curveball.exe...

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit

SCCM-CVE-2026-47301-Remote-Code-Execution-Exploit Proof-of-concept exploit chain I have discovered assigned as CVE-2026-47301 for Microsoft Configuration Manager SCCM, combining broken access control, CAB extraction-path traversal arbitrary file write, certificate verification bypass, and DLL...

CVE-2026-85597

Traefik before v2.11.55 and v3.0.0 through v3.7.10 contain a TLS option conflict resolution vulnerability that allows unauthenticated attackers to bypass client-certificate authentication by creating conflicting TLS options on multi-host routers. Attackers can reach protected backends by exploiti...

CVE-2026-85596

Traefik versions = v3.7.0 and = v3.7.10 contain an authentication bypass in the Kubernetes Ingress NGINX provider. The TLS option generated for an Ingress carrying the nginx.ingress.kubernetes.io/auth-tls-secret annotation was named after the Ingress namespace and name. As a result, two Ingress...

censys-subdomain-finder

Censys サブドメインファインダー 重要な注意 : 2024年後半現在、Censys は無料アカウントへのAPIアクセスを提供しなくなりました。 これは、Censys Search に保存された証明書公開鍵ログを使用してサブドメインを列挙するツールです。公開CAによってSSL証明書が発行されたことのあるすべてのサブドメインを返します。 動作例: root@kitploit: $ python censys-subdomain-finder.py github.com Censys で github.com のサブドメインを検索中 約1.7秒で github.com...

censys-subdomain-finder

Censys subdomain finder Important note : As of late 2024, Censys does not provide API access to free accounts anymore. This is a tool to enumerate subdomains using the Certificate Transparency logs stored in Censys Search. It should return any subdomain who has ever been issued a SSL certificate ...

modifyCertTemplate

목적 이 도구는 운영자가 ADCS 인증서 템플릿을 수정하여 생성된 취약 상태를 권한 상승에 활용할 수 있도록 지원하고, 이후 템플릿을 이전 상태로 재설정하기 위해 설계되었습니다. 이는 특히 템플릿에 대한 WriteProperty 권한이 침해되었지만, 연산자가 해당 권한이 적용되는 속성을 확신하지 못하는 시나리오를 위해 고안되었습니다. 이러한 시나리오에서 템플릿의 ACL을 쿼리하고 적용 가능한 ACE 정보를 속성 GUID와 교차 참조하여 수정 가능한 속성을 확인할 수 있습니다. 도구와 주제에 관한 관련 블로그 게시물. 사용법...

CVE-2026-85596 Traefik v3.7 Authentication Bypass via TLS Option Conflict

Traefik versions = v3.7.0 and = v3.7.10 contain an authentication bypass in the Kubernetes Ingress NGINX provider. The TLS option generated for an Ingress carrying the nginx.ingress.kubernetes.io/auth-tls-secret annotation was named after the Ingress namespace and name. As a result, two Ingress...

CVE-2026-85596

Traefik v3.7.0–v3.7.10 contains an authentication bypass in the Kubernetes Ingress NGINX provider . The TLS option for an Ingress annotated with nginx.ingress.kubernetes.io/auth-tls-secret is named after the Ingress namespace and name. When two Ingress objects share the same host, client CA secre...

CVE-2026-85597

Traefik before v2.11.55 is affected by a TLS option conflict resolution vulnerability. When a single router rule contains conflicting TLS options across multiple hostnames, the strict mTLS (client-certificate) requirement falls back to default options for all hosts, allowing unauthenticated attac...

TWSL2011-007_iOS_code_workaround

= testcert TWSL2011-007脆弱性回避策（別名CVE-2011-0228）のリファレンス実装。 作者: Eric Monti 日付: 2011年7月28日 = コンパイル Apple iOS SDKのCFLAGSと共にコンパイルします: gcc -o testcert testcert.m -framework Foundation -framework Security 上記のコンパイル引数は、OS Xで試してみる場合にそのまま使用できます。 = 使用法: root@kitploit: $ testcert path/to/file.der severname...

Clickstudio-compromised-certificate

Certificado comprometido de clickstudio Extraído de : f3ccf22db2c1060251096fe99464002318baccf598b626f8dbdd5e7fd71fd23f Serial : 0394517DACDC71187A40001B5CC32DE5 Hash del firmante : 79bae9ba9b80cd349ebe9a4165224e816f3b597c Información del certificado root@kitploit: Current PE checksum : 00014A49...

toxssin

toxssin Purpose toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting XSS vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool...

engine

Droidefense Engine Advance Android Malware Analysis Framework Latest release Download What Droidefense is Droidefense originally named atom: a nalysis t hrough o bservation m achine is the codename for android apps/malware analysis/reversing tool. It was built focused on security issues and trick...

CVE-2022-0778

CVE-2022-0778 貢献者 정준수@jeongjunsoo 概要 CVE-2022-0778脆弱性は、OpenSSLで素数の平方根を計算するBNmodsqrt関数に影響を与えます。 この関数が素数ベースでない悪意を持って操作された証明書を処理するとき、パッチ未適用のサーバーはDoS攻撃にさらされる可能性があります。 対象 OpenSSL 1.0.2 OpenSSL 1.1.1 OpenSSL 3.0 パッチ前 root@kitploit: i = 1; if !BNmodsqrt, b, p, ctx goto end; while !BNisonet i++; if i == ...

CVE-2026-85525

Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because OCSP responses were not reliably bound to the certificate being validated and definitive verification failures were treated as transient. A...

CVE-2026-15937

Improper certificate validation in Checkmk 2.5.0p10 allows a relay and a push agent that share the same UUID to reuse each other's mTLS certificate to authenticate against agent receiver endpoints in either direction, because the endpoints do not verify that the certificate was issued by their ow...

CVE-2026-85525

A flaw was found in Snowflake drivers, including Python, Go, JDBC, and Node.js. This flaw involves improper Online Certificate Status Protocol OCSP response validation, which allows a revoked Transport Layer Security TLS certificate to be accepted as valid. A man-in-the-middle attacker, possessin...

CVE-2026-15937

Checkmk versions prior to 2.5.0p10 contain an improper certificate validation flaw in agent receiver endpoints . The endpoints fail to verify that a presented mTLS certificate was issued by their own root certificate. As a result, a relay and a push agent that share the same UUID can reuse each o...