hstsparser

HSTS Parser HSTS Parser is a simple tool to parse Firefox and Chrome's HSTS databases into actually helpful forensic artifacts! You can read more about the research behind this tool and potential uses for it over on my blog! Installation HSTS Parser can be installed via pip, or as a native...

badssl.com

Visit badssl.com for a list of test subdomains, including: self-signed.badssl.com expired.badssl.com mixed.badssl.com rc4.badssl.com hsts.badssl.com Server Setup Stock Ubuntu VM, DNS A records for badssl.com. and .badssl.com. pointing to the VM. Testing and development 1. Follow the instructions ...

CVE-2019-13498

CVE-2019-13498 Exploit Title: MITM - Missing HSTS causing credential theft and content manipulation Date: 07/10/2019 Exploit Author: Furqan Khan Vendor Homepage: https://www.oneidentity.com/ Software Link: https://www.oneidentity.com/products/cloud-access-manager/ Version: 8.1.3 Tested on: Kali...

pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

PRISM-AP

PRISM-AP ABOUT: PRISM-AP is an automated Wireless RogueAP MITM attack framework. FEATURES: Easy to setup and use and full automated Leverages MANA wifi attack to lure client connections Partial HSTS bypass via bettercap Intercept and view all HTTP headers, cookies and URL's View all DNS requests...

sniffly

Sniffly2 Sniffly2 is a variant of Sniffly which abuses HTTP Strict Transport Security headers and the Performance Timing API in order to sniff your browsing history in Chromium-based browsers. Demo Visit http://diracdeltas.github.io/sniffly in Chrome/Chromium/Brave/etc. with HTTPS Everywhere...

eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

CVE-2022-31629-poc

CVE-2022-31629 poc PHP Bug report How to test Install git clone https://github.com/SilNex/CVE-2022-31629-poc cd ./CVE-2022-31629-poc docker-compose up -d TEST https://localhost:8110 : v8.1.10 https://localhost:8111 : v8.1.11 Chrome HSTS issue thisisunsafe 를 hsts페이지에서 입력하면됩니다. Typing thisisunsafe ...

CVE-2026-35115

HCL AION is affected by a vulnerability where the HTTP Strict-Transport-Security HSTS header was missing or insecurely configured, so browsers were not instructed to always use HTTPS. This may allow connections to be downgraded or intercepted, potentially resulting in unintended behavior or...

EUVD-2026-118244

HCL AION is affected by a vulnerability where the HTTP Strict-Transport-Security HSTS header was missing or insecurely configured, so browsers were not instructed to always use HTTPS. This may allow connections to be downgraded or intercepted, potentially resulting in unintended behavior or...

CVE-2026-35115 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by a vulnerability where the HTTP Strict-Transport-Security HSTS header was missing or insecurely configured, so browsers were not instructed to always use HTTPS. This may allow connections to be downgraded or intercepted, potentially resulting in unintended behavior or...

CVE-2026-35115

HCL AION is affected by a vulnerability involving a missing or insecurely configured HTTP Strict-Transport-Security (HSTS) header. Because browsers are not explicitly instructed to always use HTTPS, connections may be downgraded or intercepted, potentially leading to unintended behavior or securi...

CVE-2026-118657

A flaw was found in Echo. The framework unconditionally trusts forwarded scheme headers from incoming requests without verifying whether they originate from a trusted proxy. A remote attacker can exploit this vulnerability by sending crafted HTTP headers to bypass HTTPS redirection controls or...

CVE-2026-35115: HCL Software AION: HCL AION is affected by a vulnerability where the HTTP Strict-Transport-Security (HSTS) header was missing or…

HCL AION is affected by a vulnerability where the HTTP Strict-Transport-Security HSTS header was missing or insecurely configured, so browsers were not instructed to always use HTTPS. This may allow connections to be downgraded or intercepted, potentially resulting in unintended behavior or...

CLEANSTART-2024-BW05155 When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings

Security vulnerability affects the librewolf package. When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings...

CLEANSTART-2024-RG44419 When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings

Security vulnerability affects the firefox package. When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings...

CLEANSTART-2024-DY34656 When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should not allow the user to bypass the certificate error

Security vulnerability affects the firefox package. When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should not allow the user to bypass the certificate error...

Echo: HTTPS Redirect And HSTS Bypass Via Unconditional Trust Of Forwarded Scheme Headers

Description "Context.Scheme" unconditionally trusts four client-controlled HTTP headers to determine the request scheme, with no mechanism to configure trusted sources. This allows a remote unauthenticated attacker to bypass HTTPS redirect enforcement and suppress HSTS headers. The trusted header...

Reliance on Untrusted Inputs in a Security Decision

Overview Affected versions of this package are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the Context.Scheme method in Echo’s request context. A remote unauthenticated attacker can send X-Forwarded-Proto: https to an HTTP endpoint to bypass HTTPSRedirect, leaving users’...

Reliance on Untrusted Inputs in a Security Decision

Overview Affected versions of this package are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the Context.Scheme method in Echo’s request context. A remote unauthenticated attacker can send X-Forwarded-Proto: https to an HTTP endpoint to bypass HTTPSRedirect, leaving users’...