CVE-2022-1292

CVE-2022-1292 POC Description The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary comman...

FREAK-Attack-CVE-2015-0204-Testing-Script

FREAK Attack CVE 20150204 Testing Script Basic BASH Script to Automate OpenSSL based testing for FREAK Attack CVE-2015-0204 as advised by Akamai. It is a Free Software and does not need other's server to run. Your server must score A+ to SSL Labs test under normal situation, should listed as HSTS...

CVE-2020-28018

CVE-2020-28018: Exim Use-after-free UAF leading to RCE Introduction There exists a Use-after-free UAF vulnerability in tls-openssl.c that allow remote unauthenticated attackers to corrupt internal memory data, thus finally achieving remote code execution. Primitives: Memory Leakage Arbitrary read...

cve-2020-0601-plugin

Zeek test script for CVE-2020-0601 This script can detect exploit attempts for CVE-2020-0601. It performs a check to see if a known curve is used in a certificate - if this is not the case a notice is raised. Example notice in notice.log: 1579043477.791522 CHhAvVGS1DHFjwGM9 192.241.209.49 46110...

OpenSSLUpgrade1.1.1q-Ubuntu

This repository does not have a README...

SymCrypt-OpenSSL

SCOSSL - The SymCrypt engine and provider for OpenSSL The SymCrypt engine and provider for OpenSSL SCOSSL allow the use of OpenSSL with SymCrypt as the provider for core cryptographic operations. The primary motivation for this is to support FIPS certification, as vanilla OpenSSL 1.1.1 does not...

openssl-heartbleed-fix

openssl-heartbleed-fix OpenSSL Heartbleed CVE-2014-0160 Fix script Sammy Fung [email protected] OpenSSL Heartbleed CVE-2014-0160 http://www.us-cert.gov/ncas/alerts/TA14-098A bug is now discovered by network security professionals, which many systems using some OpenSSL versions are affected. ...

rustls

Rustls is a modern TLS library written in Rust. Status Rustls is used in production at many organizations and projects. We aim to maintain reasonable API surface stability but the API may evolve as we make changes to accommodate new features or performance improvements. We have a roadmap for our...

cve-2009-3555-test-server

What is this? This is a TLS server using a vendored fork of the Go TLS stack that has renegotation indication extension forcibly disabled, which will trigger CVE-2009-3555 mitigations in OpenSSL 3.0+. Note that it isn't truly vulnerable to CVE-2009-3555 because the Go TLS stack doesn't allow...

HMAC_Bruteforcer

HMACBruteforcer Very Slow HMAC Key Bruteforcer Implemented in Bash Uses: OpenSSL Crunch Optional...

OpenSSL-CCS-Inject-Test

OpenSSL CCS Inject Test This script is designed for detection of vulnerable servers CVE-2014-0224. in a wide range of configurations. It attempts to negotiate using each affected protocol version SSLv3, TLSv1, TLSv1.1, and TLSv1.2 advertising a comprehensive set of ciphers. Changes: v0.1 - Update...

kit-jwt

kit-jwt JSON Web Token JWT encoding and decoding for Kit TOC Files File| Description ---|--- .editorconfig| Editor formatting configuration .gitignore| Git ignore rules for build artifacts and dependencies .tool-versions| asdf tool versions Zig, Kit LICENSE| MIT license file README.md| This file...

heartbleeder

Heartbleeder Tests your servers for OpenSSL CVE-2014-0160 aka Heartbleed. WARNING : No guarantees are made about the accuracy of results, and you should verify them independently by checking your OpenSSL build. Pull requests welcome. Usage $ heartbleeder example.com INSECURE - example.com:443 has...

heartbleed-tools

OpenSSL Heartbleed CVE-2014-0160 vulnerability scanner, data miner and RSA key-restore tools. Author: Einar Otto Stangvik / @einaros / https://hacking.ventures Since the cat is long since out of the bag, and others have begun publishing their tools, I'm putting mine out there too. Hopefully this...

SpookySSL-Scanner

SpookySSL-Scanner SpookySSL CVE-2022-3602 SSLv3 Scanner for Windows, Linux, macOS Turkish Zafiyet Nasıl Oluşuyor? Öncelikle sorun byte boyutunu belirlerken ortaya çıkıyor. Bayt boyutunu belirlerken farkındaysanız NULL yani boş/sıfır değer tanımlanmamış yani bayt uzunluğu sıfır olarak...

CVE-2014-0195

CVE-2014-0195 OpenSSL heap overflow PoC CVE-2014-0195...

siem

Offensive SIEM Practical techniques for leveraging SIEM as an offensive discovery tool, helping defenders think like attackers to strengthen security from within. Queries See above - queries.md file. Will keep getting updated when needed. The idea is to have layer on layer coverage using differen...

CVE-2014-5139

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

heartbleed

Heartbleed Bug Description of the scenario The Heartbleed bug is an example of a cybersecurity attack that exploits a vulnerability in the OpenSSL library. Briefly, a missing validation step in the OpenSSL library could allow a hacker to access sensitive information on a server that is using the...

peetch

peetch peetch is a collection of tools aimed at experimenting with different aspects of eBPF to bypass TLS protocol protections. Currently, peetch includes three subcommands. The first called dump aims to sniff network traffic by associating information about the source process with each packet...