153 matches found
CurveBall
CurveBall CVE-2020-0601 - PoC CVE-2020-0601: Also known as CurveBall or ChainOffFools, is a vulnerability in the Microsoft CryptoApi specificly in Crypt32.dll where elliptic curve signatures ECDSA of certificates is not correctly verified. There is a very nice blog post here which explains the...
Curveball
Curveball A PoC for CVE-2020-0601. A detailed blog post can be found here. This exploit allows you to create a fake trusted certificate by abusing how CryptoAPI handles certain parameters on ECC based certificates. Setup Clone the repository and open it in Visual Studio 2019. Switch to Release an...
CVE-2020-0601
CVE-2020-0601 PoC for CVE-2020-0601- Windows CryptoAPI Crypt32.dll POC: https://github.com/ollypwn/CurveBall On kali: 1.Make PKCS12 file openssl req -new -x509 -key spoofedca.key -out spoofedca.crt openssl ecparam -name secp384r1 -genkey -noout -out Microsoft.key openssl req -new -key Microsoft.k...
chainoffools
CryptoAPI CVE-2020-0601: Explotación de la vulnerabilidad de suplantación de CryptoAPI de Windows. Más información en nuestro artículo de blog. Requisitos de instalación pip install -U -r requirements.txt La generación de certificados funciona con OpenSSL versión hasta 1.0.2u. Certificado CA Usam...
CLEANSTART-2025-WA86088 spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32
Security vulnerability affects the containerd package. A spoofing vulnerability exists in the way Windows CryptoAPI Crypt32...
REcon 2024 Conference Slides
REcon 2024 conference slides for topics:JTAG Debug of Windows Hyper-V / Secure Kernel with WinDbg and DCI/EXDIPath of rev.ng-ance: From Raw Bytes to CodeQL on Decompiled CodeHypervisor-enforced Paging Translation - The End of Non Data-driven Kernel Exploits?Control Flow Intergrity on IBM iTips &...
CVE-2026-55144
Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...
CVE-2026-55144
Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...
Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability
Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...
PT-2026-58256
Name of the Vulnerable Software and Affected Versions Windows CryptoAPI affected versions not specified Description A missing cryptographic step in the Windows CryptoAPI allows an authorized attacker to perform local tampering, which can affect the system. Recommendations At the moment, there is ...
CVE-2026-55144: Missing Cryptographic Step
Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...
FP-Predictor - False Positive Prediction for Static Analysis Reports
Static Application Security Testing SAST tools play a vital role in modern software development by automatically detecting potential vulnerabilities in source code. However, their effectiveness is often limited by a high rate of false positives, which wastes developer's effort and undermines trus...
EUVD-2021-7146
Malicious code in bioql PyPI...
EUVD-2023-28924
Malicious code in bioql PyPI...
EUVD-2023-28925
Malicious code in bioql PyPI...
EUVD-2023-39342
Malicious code in bioql PyPI...
BIT-GOLANG-2020-0601
A spoofing vulnerability exists in the way Windows CryptoAPI Crypt32.dll validates Elliptic Curve Cryptography ECC certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted,...
CVE-2023-35339
Windows CryptoAPI Denial of Service Vulnerability...
