CVE-2020-0601

This repository does not have a README...

CVE-2020-0601

CVE-2020-0601 This script is checking if the hotfix for CVE-2020-0601 is applied according to your Windows version. Furthermore it checks if there is a attempt to exploit the known vulnerability. The .xml file is for ControlUp Users. Import the XML file to your Script Based Actions as usual. All...

CVE-2020-0601

CVE-2020-0601 CVE-2020-0601 - A Windows Crypto Exploit...

chainoffools

CryptoAPI CVE-2020-0601: Windows CryptoAPI Spoofing Vulnerability exploitation. More information in our blog post. Install requirements root@kitploit: pip install -U -r requirements.txt The certificate generation works with OpenSSL verion up to 1.0.2u. CA certificate We used the USERTrust ECC...

chainoffools

CryptoAPI CVE-2020-0601: विंडोज़ CryptoAPI स्पूफिंग भेद्यता शोषण। हमारे ब्लॉग पोस्ट में अधिक जानकारी। आवश्यकताएँ स्थापित करें root@kitploit: pip install -U -r requirements.txt प्रमाणपत्र निर्माण OpenSSL संस्करण 1.0.2u तक काम करता है। CA प्रमाणपत्र हमने USERTrust ECC प्रमाणन प्राधिकरण का उपयोग किय...

badecparams

BADECPARAMS CVE-2020-0601 के लिए प्रूफ ऑफ कॉन्सेप्ट। badecparams.py एक मध्यवर्ती प्रमाणपत्र प्राधिकरण उत्पन्न करता है जो कमजोरी का शोषण करता है, फिर Authenticode और TLS प्रमाणपत्र जारी करता है। TLS प्रमाणपत्रों में Microsoft Edge और Internet Explorer में विस्तारित सत्यापन होता है। httpd.py कमांड...

gringotts

CVE-2020-0601 proof of concept A fun proof of concept to create your own root CA and signed certificate based on the CVE-2020-0601 vulnerability in Windows 10. The basis for the issue is the CertGetCertificateChain method improperly validated root certificate authorities. Since the search for a...

CVE-2020-0601

CVE-2020-0601 : CurveBall CVE exploitation This ruby script can be used to spoof a legit certificate authority and generat a certificate that will be considered valid for Windows computer affected by the CurveBall vulnerability. You need to get a certificate comming from the certificate authority...

CVE-2020-0601-spoofkey

CVE-2020-0601-spoofkey To see how to Make Spoofed Key and Signing the code REQ: openssl, main.rbwhich i uplaoded VISIT : https://twitter.com/exploitblizzard...

CVE-2018-20250-WinRAR

CVE-2018-20250-WinRAR This resource is the author's reproduction of the WinRAR vulnerability CVE-2020-0601, implemented by combining related resources and articles. It is recommended to combine the author's blog to reproduce this vulnerability and understand the principle of malware self-start...

twoplustwo

twoplustwo Implementing CVE-2020-0601...

cve-2020-0601_poc

Basic Info The source code of this tool is supposed to help with understanding of CVE-2020-0601 vulnerability discovered in Windows Crypto API, see CERT's overview. The tool itself can be used to produce a certificate for an arbitrary domain which will be signed by an evil certificate authority...

curveball_lua

curveballlua रिपॉजिटरी में lua स्क्रिप्ट्स और PCAP हैं जो नेटवर्क ट्रैफ़िक के माध्यम से CVE-2020-0601 शोषण प्रयासों को खोजने के लिए हैं।...

CurveballCertTool

CurveballCertTool CVE-2020-0601 This automated bash script for Code Signing was created using this repository: https://github.com/ollypwn/CurveBall Please use this script for educational purposes only. Requirements openssl ruby osslsigncode Usage ./CurveballCertTool.sh -c: Create new "legit"...

CVE-2020-0601_PoC

Based on POC's https://github.com/ly4k/CurveBall https://research.kudelskisecurity.com/2020/01/15/cve-2020-0601-the-chainoffools-attack-explained-with-poc/ https://github.com/kudelskisecurity/chainoffools?tab=readme-ov-file REQUIREMENTS/SOFFTWARE USED python version 3.11 openssl version 3.1...

curveball-plus

curveball-plus ECQV अंतर्निहित प्रमाणपत्रों के तहत विंडोज-जैसे सत्यापनकर्ताओं के साथ Curveball CVE-2020-0601 हमलों का सिमुलेशन प्रयोग यह फ़ाइल लगातार अपडेट की जाती है!...

cve-2020-0601-utils

This repository does not have a README...

CurveBall

कर्वबॉल CVE-2020-0601 - PoC CVE-2020-0601, जिसे आमतौर पर CurveBall के रूप में जाना जाता है, एक कमजोरी है जिसमें अण्डाकार वक्र क्रिप्टोग्राफी ECC का उपयोग करने वाले प्रमाणपत्रों के हस्ताक्षर की सही ढंग से पुष्टि नहीं की जाती है। ECC विभिन्न मापदंडों पर निर्भर करता है। ये मापदंड कई वक्रों के लिए...

CVE-2020-0601

This repository does not have a README...

Windows10_Cumulative_Updates_PowerShell

Just use this - https://github.com/aaronparker/LatestUpdate Updates everything if ENTERPRISE or EDU Win 10. If PRO only 1809 , 1903 & 1909 are patched. Windows10CumulativeUpdatesPowerShell This powershell script can be ran on a system and will identify if a system is patched for CVE-2020-0601...