sslyze

注意 目前 SSLyze 的开发已转移至单独的代码仓库： https://github.com/nabla-c0d3/sslyze. 本仓库会定期从新父仓库同步更新，但如需最新版本，请查看新仓库。如果你已克隆本仓库但希望追踪新分支，可以使用以下命令更新远程源： root@kitploit: git remote set-url origin https://github.com/nabla-c0d3/sslyze.git ======= SSLyze 快速且功能全面的 SSL 扫描器。 描述 SSLyze 是一个 Python 工具，可通过连接服务器分析其 SSL...

zeek-quasarrat-detector

基于 Zeek 的 QuasarRAT 恶意软件检测器 恶意软件通常通过 HTTPS 隐藏与命令和控制（C2）服务器的通信。 HTTPS 中的加密通常会掩盖攻击足够长的时间，使恶意软件能够 实现其目标。这使得检测使用 HTTPS 的恶意软件具有挑战性，但偶尔 你会遇到一个突破口，就像这里的 QuasarRAT 案例。QuasarRAT 是一种 Windows 远程 访问工具，在过去一年中一直被用来针对管理美国 关键基础设施的组织。 示例 Notice.log 输出 root@kitploit: separator \x09 setseparator , emptyfield empty...

MemorizingTrustManager

MemorizingTrustManager - 为您的应用提供私有云支持 MemorizingTrustManager MTM 是一个旨在使 Android 上的 SSL 使用更智能、更安全的项目。当它遇到未知的 SSL 证书时，会询问用户是接受该证书一次、永久接受还是中止连接。这是防止盲目接受任何无效、自签名和/或过期证书而遭受中间人攻击的一个步骤。 MTM 旨在无缝集成到您的 Android 应用程序中，其源代码基于 MIT 许可证发布。 截图 状态 MemorizingTrustManager 已被 yaxim XMPP 客户端...

watchTowr-vs-Check-Point-CVE-2026-50751

CVE-2026-50751 一个 Check Point 远程访问 VPN IKEv1 证书认证绕过检测工件生成器。 https://github.com/user-attachments/assets/1280c545-364e-42d1-94ac-5b2cd850d14e 详见我们的博客文章以获取技术细节。 检测演示 root@kitploit: $ python3 watchTowr-vs-Check-Point-CVE-2026-50751.py -rh vpn.example.com -u watchtowr / | | |\ \ \ / / \ \ / | | | |...

PathFinder

Web Path Finder Web Path Finder is a Python program that provides information about a website. It retrieves various details such as page title, last updated date, DNS information, subdomains, firewall names, technologies used, certificate information, and more. Features and Benefits Retrieve...

CVE-2022-0778

CVE-2022-0778 贡献者 정준수@jeongjunsoo 摘要 CVE-2022-0778 漏洞影响了 OpenSSL 中用于计算模素数平方根的 BNmodsqrt 函数。 当该函数处理非素数基的恶意构造证书时，未修补的服务器可能会遭受 DoS 攻击。 影响目标 OpenSSL 1.0.2 OpenSSL 1.1.1 OpenSSL 3.0 补丁之前 root@kitploit: i = 1; if !BNmodsqrt, b, p, ctx goto end; while !BNisonet i++; if i == e ERRraiseERRLIBBN,...

CVE-2022-26923-Powershell-POC

CVE-2022-26923-Powershell-POC 一个用于从内存中加载并自动运行Certify和Rubeus的Powershell PoC。 工作原理？ 1. 将Certify.exe和Rubeus.exe加载到内存中。 2. 扫描目标机器是否存在配置错误的证书模板。（更多信息请访问 https://www.youtube.com/watch?v=HBRCI5O35R8） 3. 基于存在漏洞的模板，为管理员用户请求证书。 4. 将证书发送给证书处理程序，该程序将其转换为.pfx格式并返回给客户端。 5. 利用Rubeus加载证书并为管理员用户生成票据。 6...

moniorg

moniorg 説明 CTログを調べることで、攻撃者は完全に受動的な方法で組織のインフラに関する多くの情報（内部ドメイン、メールアドレスなど）を収集できます。 moniorgは証明書の透明性ログを活用し、SSL証明書内の組織フィールドに基づいて新たに発行されたドメインを監視します。 インストール root@kitploit: git clone https://github.com/yousseflahouifi/moniorg.git 要件 使用するPythonバージョン: Python 3.x。 moniorgの実行にはいくつかのモジュールが必要です: root@kitploit:...

Shwmae

Shwmae Shwmae shuh-my is a Windows Hello abuse tool that was released during DEF CON 32 as part of the Abusing Windows Hello Without a Severed Hand talk. The purpose of the tool is to abuse Windows Hello from a privileged user context. root@kitploit: Shwmae Copyright C 2024 Shwmae enum Default Ve...

roca

ROCA 検出ツール このツールは、ACM CCS 2017 会議論文 124 Return of the Coppersmith's Attack: Practical Factorization of Widely Used RSA Moduli に関連しています。 このツールを使用すると、公開RSA鍵に、説明されている脆弱性が存在するかテストできます。 2017年11月4日更新 : Python 2.7、3.4以上に対応。 2017年10月30日更新 : 攻撃に関する論文は既に公開されています。ACM版。 2017年10月30日更新 :...

Security Bulletin: IBM Planning Analytics Local is affected by security vulnerabilities

Summary The Planning Analytics Workspace component of IBM Planning Analytics is affected by security vulnerabilities. These vulnerabilities have been addressed in IBM Planning Analytics Local v2.0 - IBM Planning Analytics Workspace version 2.1.22. Vulnerability Details CVEID:CVE-2026-41417...

CVE-2026-86881

A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker with a compromised intermediate...

CVE-2026-86889

A certificate validation issue was addressed with improved certificate validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged network position may be able to intercept network traffic...

CVE-2026-86889

A certificate validation issue was addressed with improved certificate validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged network position may be able to intercept network traffic...

EUVD-2026-77911

A certificate validation issue was addressed with improved certificate validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged network position may be able to intercept network traffic...

CVE-2026-86889

A certificate validation issue was addressed with improved certificate validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in a privileged network position may be able to intercept network traffic...

CVE-2026-86881

CVE-2026-86881 is a certificate validation issue affecting multiple Apple operating systems, including iOS 26.7, iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.7 , and other Apple platforms. The root cause is insufficient validation of extended key usages on certificates. An attacker with a comp...

EUVD-2026-77977

A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An attacker with a compromised intermediate...

rsync: rsync: TLS Certificate Validation Bypass allows interception of encrypted sessions

A flaw was found in the rsync-ssl wrapper script's TLS certificate validation. An on-path attacker can present self-signed or invalid certificates to intercept, decrypt, or tamper with encrypted sessions. Because rsync fails to validate the certificate against a trusted CA or verify hostname...

CVE-2026-18251

IBM i (versions 7.3, 7.4, 7.5, and 7.6 ) is affected by a vulnerability in Navigator for i where improper validation of the WebSocket origin allows a remote, unauthenticated attacker to obtain sensitive information. The underlying cause is classified as CWE-1385: Missing Origin Validation in WebS...