whatsapp-mitd-mitm

WhatsApp MitD & MitM Introduction This repository contains PoC code and tools that were developed as part of our research 01 on remotely exploiting Man-in-the-Disk MitD vulnerabilities on WhatsApp for Android. As discussed in our blog post, the code and accompanying scripts found here, were used ...

nili

Nili Nili is a Tool for Network Scan, Man in the Middle, Protocol Reverse Engineering and Fuzzing. Prerequisites Python - Python Programming Language Scapy - Interactive Packet Manipulation Program Netzob - Protocol Reverse Engineering, Modeling and Fuzzing Installing Here is some Instructions...

sslnuke

sslnuke -- ¡SSL sin verificación no es seguro! Todos hemos oído una y otra vez que SSL sin verificación no es seguro. Si una conexión SSL no se verifica con un certificado en caché, cualquier atacante puede secuestrarla fácilmente. Así que en 2013, uno pensaría que ya habíamos eliminado este...

Docker-Container-CVE-2020-13401

CVE-2020-13401 Study Study on CVE-2020-13401 vulnerability of containers in dockers older than 19.03.11 Containers that are created with Docker Engine versions before 19.03.11 are vulnerable to receive and apply fake RA Router Advertisement messages from other containers in the network. Receiving...

Exploit-Writeups

Esta es una colección de writeups de exploits que he creado: PS3 lv0ldr SPI MITM...

CVE-2025-68721

CVE-2025-68721: Axigen WebAdmin Broken Access Control Vulnerability Summary A flaw in the permission logic allows an administrator account with zero permissions to access the "Security & Filtering" page, specifically the SSL Certificates endpoint. While other restricted sections are correctly...

CVE-2017-3730

CVE-2017-3730 OpenSSL CVE-2017-3730 proof-of-concept Using OpenSSH as a proxy to patch DH values on the fly Create an SSL server using a ciphersuite like DHE-PSK-WITH-AES-256-GCM-SHA384. Let's say it runs on 10.0.2.2 port 8899 Get openssh-7.4p1 Apply patch Build it Run it like: root@kitploit: ./s...

ssl-kill-switch2

SSL Kill Switch 2 黑盒工具，用于在 iOS 和 macOS 应用程序中禁用 SSL/TLS 证书验证（包括证书固定）。这是 https://github.com/iSECPartners/ios-ssl-kill-switch 的第二代版本。 描述 一旦加载到 iOS 或 macOS 应用程序中，SSL Kill Switch 2 将修补负责处理 SSL/TLS 连接的底层函数，以覆盖并禁用系统的默认证书验证，以及任何类型的自定义证书验证（例如证书固定）。 它已成功针对各种实现证书固定的应用程序进行了测试，包括 Apple App Store。SSL Kill Swit...

k8s-cve-2020-8554-mitigations

Mitigaciones de Prisma Cloud Compute para Kubernetes CVE-2020-8554 Este repositorio contiene reglas de Admisión de Prisma Cloud Compute que mitigan la explotación de CVE-2020-8554, una vulnerabilidad de Kubernetes sin parche. Para garantizar un uso correcto, siga las instrucciones proporcionadas ...

btlejuice

BtleJuice Framework Introduction BtleJuice is a complete framework to perform Man-in-the-Middle attacks on Bluetooth Smart devices also known as Bluetooth Low Energy. It is composed of: an interception core an interception proxy a dedicated web interface Python and Node.js bindings How to install...

EUVD-2026-76916

ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation vulnerability in the IEC 60870-5-104 TLS client Task Mode. This allows a network-positioned attacker to bypass certificate validation via a certificate with multiple simultaneo...

CVE-2026-90651

Socket Firewall socketdev/socket-registry-firewall in registry mode before 2.0.0 does not verify upstream TLS certificates by default. When the apisslverify and upstreamsslverify configuration keys are omitted from socket.yml, the generated configuration sets SOCKETAPISSLVERIFY='false' and...

CVE-2026-90651

Socket Firewall (socketdev/socket-registry-firewall) in registry mode before 2.0.0 does not verify upstream TLS certificates by default. When api_ssl_verify and upstream_ssl_verify are omitted from socket.yml, the generated OpenResty/Lua HTTP client accepts any certificate without chain validatio...

CVE-2026-90651

Socket Firewall socketdev/socket-registry-firewall in registry mode before 2.0.0 does not verify upstream TLS certificates by default. When the apisslverify and upstreamsslverify configuration keys are omitted from socket.yml, the generated configuration sets SOCKETAPISSLVERIFY='false' and...

CVE-2026-90647

ASE/Kalkitech ASE2000 V2 Communication Test Set versions 2.35 through 2.37 (Windows) contains an improper certificate validation vulnerability in its IEC 60870-5-104 TLS client (Task Mode). A network-positioned attacker can bypass certificate validation by presenting a certificate with multiple s...

CVE-2025-56513-NiceHash-Update-Chain-Compromise

CVE-2025-56513 Critical Supply-Chain Vulnerability in NiceHash QuickMiner Update Mechanism Author: Prince T Philip Role: Independent Security Researcher Severity: CRITICAL — CVSS 9.8 Impact: Remote Code Execution / Supply-Chain Compromise Status: Publicly Disclosed & Assigned CVE-2025-56513...

EUVD-2026-76741

Requests from the reverse proxy to the identity-provider service for token discovery, introspection, and credential exchange do not verify the identity provider's server certificate. An attacker positioned on the network path between the proxy and the identity provider could impersonate the...

PT-2026-90725

ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation vulnerability in the IEC 60870-5-104 TLS client Task Mode. This allows a network-positioned attacker to bypass certificate validation via a certificate with multiple simultaneo...

CVE-2026-90452

Requests from the reverse proxy to the identity-provider service for token discovery, introspection, and credential exchange do not verify the identity provider's server certificate. An attacker positioned on the network path between the proxy and the identity provider could impersonate the...

CVE-2026-90452

Requests from the reverse proxy to the identity-provider service for token discovery, introspection, and credential exchange do not verify the identity provider's server certificate. An attacker positioned on the network path between the proxy and the identity provider could impersonate the...