5 matches found
CurveBall
CurveBall CVE-2020-0601 - Preuve de concept CVE-2020-0601 : également connu sous le nom de CurveBall ou ChainOffFools, est une vulnérabilité dans la Microsoft CryptoApi plus précisément dans Crypt32.dll où les signatures de courbe elliptique ECDSA des certificats ne sont pas correctement vérifiée...
Microsoft CNG/CryptoAPI Tor Protocol Implementation PoC
mini-tor is a proof-of-concept utility for accessing internet content and hidden service content .onion via tor routers. this utility is aiming for as smallest size as possible currently 47kb, compressed with kkrunchy 20kb, which is achieved by using Microsoft CryptoAPI/CNG instead of embedding...
TrickBot Banking Trojan Could Be Dyre Rewrite
Despite the fact that the criminals allegedly behind the creation and distribution of the Dyre banking Trojan are in a Russian jail, a new piece of malware in the wild has enough similarities to Dyre that researchers are wondering whether there’s a connection. The new malware is called TrickBot a...
Microsoft CryptoAPI Object Identifiers Integer Overflow (MS09-056; CVE-2009-2511)
The CryptoAPI provide services that enable application developers to add encryption/decryption of data, authentication using digital certificates, and encoding to and decoding from Abstract Syntax Notation One ASN.1 to their Windows-based applications. A spoofing vulnerability has been reported i...
