Openssl_G2.5_CVE-2014-3570_01

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

CVE-2014-0224

OPENSSL CVE-2014-0224 MITM exploit demo. Author : @bluerust Blog : http://hi.baidu.com/bluerust/item/bf2ab031bbadcf09cfb9fe41 Ver : 1.1 Desc : Only for openssl 1.0.1, only tested for cipher RC4-SHA. a. server openssl sserver -debug -accept 443 -cert server.crt -certform PEM -key server.key -ciphe...

CVE-2021-4044

SSL Checker Script This repository contains a Python script that checks the OpenSSL version on your system and tests SSL/TLS connections to a user-provided website. The script is designed to identify whether the system is affected by CVE-2021-4044 and to test the handling of SSL errors during the...

CVE-2020-1971

CVE-2020-1971 CVE-2020-1971 Auto Scan & Remote Exploit Script. Auto Local Scan & Patch Script. Currently in development Patched Source Code of OpenSSL 1.1.1i Install from source/Update .deb Script Currently in development 5:38pm Completed 5:50pm Install from source/Update Windows Currently in...

heartbleedscanner

Heartbleed Scanner Network Scanner for OpenSSL Memory Leak CVE-2014-0160 -t parameter to optimize the timeout in seconds. -f parameter to log the memleak of vulnerable systems. -n parameter to scan entire network. -i parameter to scan from a list file. Useful if you already have targets. -r...

openssl

Welcome to the OpenSSL Project !openssl logowww.openssl.org !github actions ci badgegithub actions ci OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations ar...

CVE-2026-63072

🔐 CVE-2026-63072 — OpenSSL CMS Heap Buffer Overflow A technical analysis ofCVE-2026-63072 , a heap-based out-of-bounds write affecting OpenSSL's CMS key-unwrapping functionality. 📌 Overview CVE-2026-63072 is a heap-based buffer overflow vulnerability in OpenSSL's CMS Cryptographic Message Syntax...

cryptodev-linux

cryptodev-linux This is a /dev/crypto device driver, equivalent to those in OpenBSD or FreeBSD. The main idea is to access existing ciphers in kernel space from userspace, thus enabling the re-use of a hardware implementation of a cipher. For questions and suggestions, please use the homepage at...

CVE-2025-15467

CVE-2025-15467 Stack buffer overflow in OpenSSL CMS AuthEnvelopedData parsing. Vulnerability A stack buffer overflow exists in evpciphergetasn1aeadparams when parsing AEAD cipher parameters e.g., AES-GCM in CMS AuthEnvelopedData content. An oversized IV overflows a 16-byte stack buffer, allowing...

heartbleed-vulnerability-exploitation

heartbleed-vulnerability-exploitation Description hands on investigation of the Heartbleed vulnerability CVE-2014-0160. Summary this lab documents a hands-on investigation of the Heartbleed vulnerability, a critical flaw in OpenSSL's implementation of the TLS heartbeat extension. the goal was to...

CVE-2022-3602-poc

CVE-2022-3602 DOS poc Buffer Overflow DOS in OpenSSL 3.0 3.0.7 Useage: $ gcc -o CVE-2022-3602 CVE-2022-3602.c -lpthread $ ./CVE-2022-3602 127.0.0.1 443...

CryKeX

Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges optional Limitations: AES and RSA keys only Fails most...

vboxdie-cracker

Virtual Box Disk Image Encryption password cracker Requirements 1. PHP = 5.5.0 2. OpenSSL = 1.0.1 XTS support Algorithm description User password is stored using a combination of PBKDF2 and AES-XTS as following shown values are fixed at the moment, but they can be controlled inside the file forma...

CVE-2022-0778-POC

A simple remote triggering POC for CVE-2022-0778 Why While trying to validate whether server implementations on our side where/are vulnerable to CVE-2022-0778, it proved extremely cumbersome to do so remotely. Instructions to create maliciously crafted certificates to trigger the parsing bug in...

debianopenssl

debianopenssl Private keys vulnerable to Debian OpenSSL bug CVE-2008-0166 In 2008 a bug in Debian's and Ubuntu's OpenSSL package led to predictable private keys. While the number of keys is limited, it takes a few considerations to create a proper list of all plausibly affected keys. This...

pacemaker

Pacemaker Attempts to abuse OpenSSL clients that are vulnerable to Heartbleed CVE-2014-0160. Compatible with Python 2 and 3. Am I vulnerable? Run the server: python pacemaker.py In your client, open https://localhost:4433/ replace the hostname if needed. For example: curl https://localhost:4433/...

FreakVulnChecker

FreakVulnChecker This script check if your list of server is accepting Export cipher suites and could be vulnerable to CVE-2015-0204 Usage Usage: ./freak.vuln.check.sh The program accept single ip:port or domain syntax or a list of ips or domains. It will output if the Exports cipher available in...

aws-suture

tl;dr $ git clone [email protected]:pblittle/suture.git $ cd suture $ bundle install $ bundle exec ./bin/suture --help $ bundle exec ./bin/suture check Suture Suture is a tool for running arbitrary commands against your AWS EC2 instances. You can run it against an individual instance or an...

heartbleed

heartbleed CVE-2014-0160 OpenSSL Heartbleed Proof of Concept Download and execute the Docker container Vulnerable Nginx server docker run -p 4443:443 -it --rm --name hb gescobero/heartbleed:1.0 Compile Heartbleed attack gcc heartbleed.c -o heartbleed Execute it with Nginx server as target...

CVE-2022-2274

OpenSSL-src Heap Memory Corruption with RSA Private Key Operation : CVE-2022-2274 Summary OpenSSL-src-rust is a source code and logic to build OpenSSL from source written in rust and packaged as a crate. There are currently two maintained branches, matching the two maintained OpenSSL versions whi...