ct-exposer

Descubra subdominios buscando en los registros de Transparencia de Certificados ¿Qué es CT? La Transparencia de Certificados Certificate Transparency, CT es un estándar experimental de la IETF. Su objetivo era permitir que el público audite qué certificados fueron creados por las Autoridades de...

Sububy

Sububy Sububy is a one stop subdomain enumeration suite written in ruby, it focuses on accuracy and quality with the flexibility of accessing some modules individually without having to stick with the tool execution flow, allowing you to integrate it with your work flow. Sububy comes with nine...

CVE-2026-61544

libp2p-quic (part of the official Rust libp2p networking stack) is vulnerable to a remote unauthenticated denial-of-service prior to version 0.13.1. During an inbound QUIC handshake, a malicious peer can present a valid short-lived libp2p TLS certificate and delay the final TLS 1.3 handshake frag...

CVE-2026-61544 libp2p-quic: Remote panic via certificate expiry race during QUIC handshake

libp2p-rust is the official Rust language implementation of the libp2p networking stack. Prior to 0.13.1, libp2p-quic could panic during an inbound QUIC handshake when a remote peer presented a valid short-lived libp2p TLS certificate and delayed the final TLS 1.3 handshake fragment until after t...

Curveball

Curveball A PoC for CVE-2020-0601. A detailed blog post can be found here. This exploit allows you to create a fake trusted certificate by abusing how CryptoAPI handles certain parameters on ECC based certificates. Setup Clone the repository and open it in Visual Studio 2019. Switch to Release an...

CurveBall-CVE-2020-0601-PoC

CurveBall CVE-2020-0601 - PoC This vulnerability, known as CurveBall, is due to invalid verification of certificates that using the ECC algorithm. Windows try to verify previously verified certificates from the certificate cache and while doing this, it only checks whether the public keys of the...

CVE-2026-13327

Devolutions Server versions 2026.2.16 and earlier are affected by an improper certificate validation flaw on LDAPS connections to Active Directory . A network-positioned attacker can present a spoofed domain controller certificate , allowing interception of privileged directory service credential...

EUVD-2026-79189

Improper certificate validation on LDAPS connections to Active Directory in Devolutions Server 2026.2.16 and earlier allows a network-positioned attacker to intercept privileged directory service credentials via a spoofed domain controller certificate...

CVE-2026-84850

CVE-2026-84850 is an improper certificate validation vulnerability in the shared HTTP client used by synchronization and integration features in Devolutions Server 2026.2.16 and earlier . A network-positioned attacker can intercept and tamper with outbound TLS connections by presenting a spoofed ...

EUVD-2026-79188

Improper certificate validation in the shared HTTP client used by synchronization and integration features in Devolutions Server 2026.2.16 and earlier allows a network-positioned attacker to intercept and tamper with outbound TLS connections via a spoofed or self-signed certificate...

sslsplit

SSLsplit - intercepción transparente de SSL/TLS https://www.roe.ch/SSLsplit Resumen SSLsplit es una herramienta para ataques de intermediario man-in-the-middle contra conexiones de red cifradas con SSL/TLS. Está diseñada para ser útil en análisis forense de redes, análisis de seguridad de...

CVE-2022-0778

CVE-2022-0778 The discovered vulnerability triggers an infinite loop in the function BNmodsqrt of OpenSSL while parsing an elliptic curve key. This means that a maliciously crafted X.509 certificate can DoS any unpatched server. The core of the vulnerability is in the parsing of EC keys with poin...

shim

shim，第一阶段的 UEFI 引导加载程序 shim 是一个简单的 EFI 应用程序，运行时它会尝试打开并执行另一个应用程序。它最初会尝试通过标准的 EFI LoadImage 和 StartImage 调用来完成此操作。如果这些调用失败（例如，因为启用了安全启动且二进制文件未使用相应的密钥签名），它将根据内置证书验证该二进制文件。如果验证成功并且该二进制文件或签名密钥未被禁止，shim 将重定位并执行该二进制文件。 协议 shim 锁定协议 shim 还会安装一个协议，允许第二阶段的引导加载程序执行类似的二进制验证。该协议具有 shim.h 头文件中描述的...

ritm

Ruby In The Middle HTTP/HTTPS interception proxy Ruby in the middle RITM is an HTTP/HTTPS interception proxy with on-the-fly certificate generation and signing, which leaves the user with the full power of the Ruby language to intercept and even modify requests and responses as she pleases...

ritm

Ruby In The Middle Proxy de intercepción HTTP/HTTPS Ruby in the middle RITM es un proxy de intercepción HTTP/HTTPS con generación y firma de certificados sobre la marcha, que deja al usuario con todo el poder del lenguaje Ruby para interceptar e incluso modificar peticiones y respuestas a su...

toxssin

toxssin Purpose toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting XSS vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool...

badecparams

BADECPARAMS 针对 CVE-2020-0601 的概念验证。 badecparams.py 生成一个利用该漏洞的中间证书颁发机构， 然后签发 Authenticode 和 TLS 证书。这些 TLS 证书在 Microsoft Edge 和 Internet Explorer 中具有扩展验证。 httpd.py 通过 HTTPS 提供 www 子文件夹中的内容， 使用命令行中提供的 PEM 编码证书链。 root@kitploit: ./badecparams.py ./httpd.py localhost.key 受影响软件 Windows Update...

CarbonCopy

CarbonCopy A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux Prerequisites In order to use it on Linux, please execute commands below: root@kitploit: apt-get install osslsigncode pip3 install pyopenssl...

EUVD-2026-78882

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow a remote attacker with a trusted TLS client certificate to cause a denial of service and...

Certiception

Certiception Certiception is a honeypot for Active Directory Certificate Services ADCS , designed to trap attackers with a realistic and attractive bait that triggers highly relevant alerts. Developed by the SRLabs Red Team, Certiception creates a vulnerable-looking certificate template in your...