cve-2009-3555-test-server

What is this? This is a TLS server using a vendored fork of the Go TLS stack that has renegotation indication extension forcibly disabled, which will trigger CVE-2009-3555 mitigations in OpenSSL 3.0+. Note that it isn't truly vulnerable to CVE-2009-3555 because the Go TLS stack doesn't allow...

testssl.sh

Introducción testssl.sh es una herramienta gratuita de línea de comandos que verifica el servicio de un servidor en cualquier puerto para determinar el soporte de cifrados TLS/SSL, protocolos, así como algunas v...

openssl

Bienvenido al Proyecto OpenSSL !openssl logowww.openssl.org !github actions ci badgegithub actions ci OpenSSL es un conjunto de herramientas de código abierto robusto, de grado comercial y con todas las funciones para los protocolos Transport Layer Security TLS, anteriormente SSL, Datagram TLS DT...

openssl

Welcome to the OpenSSL Project !openssl logowww.openssl.org !github actions ci badgegithub actions ci OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations ar...

bruteforce-wallet

bruteforce-wallet The purpose of this program is to try to find the password of an encrypted Peercoin or Bitcoin, Litecoin, etc... wallet file i.e. wallet.dat. It can be used in two ways: try all the possible passwords given a charset try all the passwords in a file There is a command line option...

openssl-fuzz

Fuzzing OpenSSL Este repositorio tiene una publicación de blog complementaria titulada "Finding CVE-2022-3786 openssl with Mayhem" en https://www.seandeaton.com. tl;dr Todo esto está resuelto para ti con el Dockerfile incluido también en DockerHub. Puedes ejecutarlo así: Build the container docke...

CVE-2022-3602

CVE−2022-3602 What is this? This document and repository is a write-up of CVE−2022-3602, a punycode buffer overflow issue in OpenSSL. It's an "anti-POC" the issue does not appear to exploitable intended for folks who maintain their own OpenSSL builds and for compiler maintainers. There is a...

peetch

peetch peetch es un conjunto de herramientas destinadas a experimentar con diferentes aspectos de eBPF para eludir las protecciones del protocolo TLS. Actualmente, peetch incluye tres subcomandos. El primero llamado dump tiene como objetivo esnifar tráfico de red asociando información del proceso...

peetch

peetch peetch is a collection of tools aimed at experimenting with different aspects of eBPF to bypass TLS protocol protections. Currently, peetch includes three subcommands. The first called dump aims to sniff network traffic by associating information about the source process with each packet...

hashcobra

hashcobra hashcobra Hash Cracking tool. Description This tool uses a new method to crack hashes. With the help of rainbow tables concept this tool generates rainbow tables from wordlists to heavily optimize the cracking process. Usage $ ./hashcobra -H --== hashcobra by sepehrdad ==-- usage:...

nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

cryptr

cryptr A simple shell utility for encrypting and decrypting files using OpenSSL. Installation git clone https://github.com/nodesocket/cryptr.git ln -s "$PWD"/cryptr/cryptr.bash /usr/local/bin/cryptr Requirements shred if optionally deleting original file. Bash tab completion Add...

cryptr

cryptr Una sencilla utilidad de shell para cifrar y descifrar archivos usando OpenSSL. Instalación git clone https://github.com/nodesocket/cryptr.git ln -s "$PWD"/cryptr/cryptr.bash /usr/local/bin/cryptr Requisitos shred si se desea eliminar opcionalmente el archivo original. Finalización de...

CVE-2025-15467

CVE-2025-15467: Desbordamiento de Búfer en la Pila en OpenSSL CMS AuthEnvelopedData Resumen CVE-2025-15467 es una vulnerabilidad crítica de desbordamiento de búfer en la pila en el código de análisis de CMS Cryptographic Message Syntax de OpenSSL. La vulnerabilidad existe en la función...

CVE-2022-1292

CVE-2022-1292 POC Description The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary comman...

SymCrypt-OpenSSL

SCOSSL - The SymCrypt engine and provider for OpenSSL The SymCrypt engine and provider for OpenSSL SCOSSL allow the use of OpenSSL with SymCrypt as the provider for core cryptographic operations. The primary motivation for this is to support FIPS certification, as vanilla OpenSSL 1.1.1 does not...

CVE-2020-28018

CVE-2020-28018: Exim Use-after-free UAF leading to RCE Introduction There exists a Use-after-free UAF vulnerability in tls-openssl.c that allow remote unauthenticated attackers to corrupt internal memory data, thus finally achieving remote code execution. Primitives: Memory Leakage Arbitrary read...

sslx

sslx openssl, but you don't have to google the flags. A single binary that handles certs, TLS connections, and all the stuff you normally need three different openssl invocations for. Built with Rust and rustls, no system OpenSSL required. Install cargo install sslx Prebuilt binaries on the...

openmagic

openmagic openmagic puede ayudarte en la automatización de pruebas y explotación de sistemas vulnerables a la lectura excesiva del heartbeat TLS de OpenSSL CVE-2014-0160. El módulo base incluye una versión modificada del programa "ssltest.py" de Jared Stafford y proporciona las siguientes...

CVE-2022-0778

CVE-2022-0778 Colaboradores 정준수@jeongjunsoo Resumen La vulnerabilidad CVE-2022-0778 afecta a la función BNmodsqrt de OpenSSL que calcula la raíz cuadrada de un número primo. Cuando esta función procesa un certificado maliciosamente manipulado que no está basado en un número primo, los servidores...