openssl-1.1.1g_CVE-2021-23840

OpenSSL 1.1.1g 21 Apr 2020 Copyright c 1998-2020 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

HeartLeak

HeartLeak Yet, another exploitation script for the most buzzed bug of all the time. The script has two features: scan: Generates random hosts IP addresses, checks if they supports OpenSSL, test them if they vulnerable to CVE-2014-0160 Heartbeat Buffer over-read bug and save vulnerable hosts in a...

cryptr

cryptr A simple shell utility for encrypting and decrypting files using OpenSSL. Installation git clone https://github.com/nodesocket/cryptr.git ln -s "$PWD"/cryptr/cryptr.bash /usr/local/bin/cryptr Requirements shred if optionally deleting original file. Bash tab completion Add...

CVE-2022-3602-poc

CVE-2022-3602 DOS poc Buffer Overflow DOS in OpenSSL 3.0 3.0.7 Useage: $ gcc -o CVE-2022-3602 CVE-2022-3602.c -lpthread $ ./CVE-2022-3602 127.0.0.1 443...

cipherscan

CipherScan Cipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl sclient command line. Cipherscan is meant to ru...

CVE-2014-0160_Heartbleed

Heartbleed - CVE-2014-0160...

apkleaks

APKLeaks Scanning APK file for URIs, endpoints & secrets. Installation from Pypi from Source from Docker Usage Options Output Pattern Arguments for disassembler License Acknowledments Installation It's fairly simple to install APKLeaks : from PyPi $ pip3 install apkleaks from Source Clone...

heartpatch.us

heartpatch.us Under Construction Patching heartbleed openssl vulnerabilities on servers across the world wide web. Inspiration Heartbleed is a security bug in the OpenSSL cryptography library, which is a widely used implementation of the Transport Layer Security TLS protocol. It was introduced in...

Openssl_1.1.1g_CVE-2023-0464

OpenSSL 1.1.1g 21 Apr 2020 Copyright c 1998-2020 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

kit-jwt

kit-jwt JSON Web Token JWT encoding and decoding for Kit TOC Files File| Description ---|--- .editorconfig| Editor formatting configuration .gitignore| Git ignore rules for build artifacts and dependencies .tool-versions| asdf tool versions Zig, Kit LICENSE| MIT license file README.md| This file...

siem

Offensive SIEM Practical techniques for leveraging SIEM as an offensive discovery tool, helping defenders think like attackers to strengthen security from within. Queries See above - queries.md file. Will keep getting updated when needed. The idea is to have layer on layer coverage using differen...

cve-2024-13176-timing-analysis

Instrumented Detection of Low-Amplitude ECDSA Timing Leakage in CVE-2024-13176 This repository contains the research report, website, data, source material, and reproducibility files for an independent study of CVE-2024-13176. The project looks at whether the nonce-related timing condition report...

cve-2020-0601

Zeek test script for CVE-2020-0601 This script can detect exploit attempts for CVE-2020-0601. It performs a simple check to see if a known curve is used in a certificate - if this is not the case a notice is raised. Example notice in notice.log: 1579043477.791522 CHhAvVGS1DHFjwGM9 192.241.209.49...

CVE-2026-105031

When using the OpenSSL TLS implementation, both the pnssldomainsettrustedcadb & pntlsconfigsettrustedcerts APIs added to rather than replaced the default system trust anchors. Leading to potentially trusting unexpected peer certificates. This can be worked around by setting the SSLCERTFILE...

CentOS7_CVE-2021-3712_Remediation

:toc: :toclevels: 4 == Problem Customer has old CentOS7 box which is EOL CentOS7 is running older openssl which is affected by link:https://nvd.nist.gov/vuln/detail/cve-2021-3712cve-2021-3712 How openssl on old Centos7 should be patched for CVE? == Steps 1...

G2.5_openssl_CVE-2014-5139

This repository does not have a README...

Openssl_1_1_0_CVE-2021-23841

OpenSSL 1.1.0g 2 Nov 2017 Copyright c 1998-2016 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

EUVD-2026-112725

When using the OpenSSL TLS implementation, both the pnssldomainsettrustedcadb & pntlsconfigsettrustedcerts APIs added to rather than replaced the default system trust anchors. Leading to potentially trusting unexpected peer certificates. This can be worked around by setting the SSLCERTFILE...

CVE-2026-105031

The Apache Qpid Proton C library (versions through 0.40.0 ) is vulnerable when using the OpenSSL TLS implementation. The pn_ssl_domain_set_trusted_ca_db() and pn_tls_config_set_trusted_certs() APIs incorrectly append to, rather than replace, default system trust anchors. This behavior can lead to...

CVE-2016-8610-PoC

CVE-2016-8610 PoC CVE-2016-8610 SSL Death Alert PoC Usage: python ssl-death-alert.py DOMAIN/IP PORT PROTOCOL-VERSIONSSLv3, TLS1.0, TLS1.1, TLS1.2 NUMBER-OF-ALERTS1000 THREADS50 python ssl-death-alert.py test.tdl 443 TLS1.2 1000 50 More info: http://security.360.cn/cve/CVE-2016-8610/...