CurveBall

CurveBall CVE-2020-0601 - PoC CVE-2020-0601：又称 CurveBall 或 ChainOffFools，是 Microsoft CryptoApi（特别是 Crypt32.dll）中的一个漏洞，证书的椭圆曲线签名（ECDSA）未被正确验证。 有一篇非常好的博客文章这里，其中非常清楚地解释了这个漏洞。 这仅应用于教育和研究目的！ 使用方法 向控制台应用程序提供椭圆曲线证书的路径。 root@kitploit: CurveBall.exe 'PathToCA.cer' 该程序将输出一个 .p12...

chainoffools

CryptoAPI CVE-2020-0601：Windows CryptoAPI 欺骗漏洞利用。更多信息请参阅我们的博客文章。 安装依赖 root@kitploit: pip install -U -r requirements.txt 证书生成适用于最高 1.0.2u 版本的 OpenSSL。 CA 证书 我们使用了 USERTrust ECC Certification Authority，但也可以是任何基于 P-384 曲线的根证书。 为了生成与根证书公钥匹配的私钥，我们使用了脚本 gen-key.py （适用于 Python 3.6 及以上版本）： root@kitploit:...

CVE-2020-0601

CVE-2020-0601 针对CVE-2020-0601的PoC - Windows CryptoAPI Crypt32.dll PoC: https://github.com/ollypwn/CurveBall 在Kali上： 1.生成PKCS12文件 root@kitploit: openssl req -new -x509 -key spoofedca.key -out spoofedca.crt openssl ecparam -name secp384r1 -genkey -noout -out Microsoft.key openssl req -new -key...

Curveball

Curveball 针对 CVE-2020-0601 的 PoC。详细的博客文章可以在这里找到。该漏洞利用程序通过滥用 CryptoAPI 处理基于 ECC 的证书上某些参数的方式，允许你创建伪造的可信证书。 安装 克隆仓库并在 Visual Studio 2019 中打开它。切换到 Release 配置并编译。你可以在这里找到预编译的二进制文件。 用法 root@kitploit: .\Curveball.exe MicrosoftECCProductRootCertificateAuthority.cer...

CVE-2026-55144

Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...

CVE-2026-55144

Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...

Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability

Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...

FP-Predictor - False Positive Prediction for Static Analysis Reports

Static Application Security Testing SAST tools play a vital role in modern software development by automatically detecting potential vulnerabilities in source code. However, their effectiveness is often limited by a high rate of false positives, which wastes developer's effort and undermines trus...

EUVD-2023-28924

Malicious code in bioql PyPI...

EUVD-2023-39342

Malicious code in bioql PyPI...

EUVD-2021-7146

Malicious code in bioql PyPI...

EUVD-2023-28925

Malicious code in bioql PyPI...

BIT-GOLANG-2020-0601

A spoofing vulnerability exists in the way Windows CryptoAPI Crypt32.dll validates Elliptic Curve Cryptography ECC certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted,...

CVE-2023-35339

Windows CryptoAPI Denial of Service Vulnerability...

Denial of service

Windows CryptoAPI Denial of Service Vulnerability...

CVE-2023-35339 Windows CryptoAPI Denial of Service Vulnerability

...

CVE-2023-35339

CVE-2023-35339 is a Windows CryptoAPI Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (NETWORK, LOW attack complexity, NONE privileges, NONE user interaction, HIGH availability impact). The provided records do not specify affected versions, root cause details, exploitation stat...

CVE-2023-35339 Windows CryptoAPI Denial of Service Vulnerability

...

Windows CryptoAPI Denial of Service Vulnerability

...

PT-2023-3852 · Microsoft · Windows Cryptoapi +1

Name of the Vulnerable Software and Affected Versions: Windows CryptoAPI affected versions not specified Description: The issue is related to incorrect clearing or release of resources in the Windows CryptoAPI, which can be exploited by a remote attacker to cause a denial of service...