heartbleed-vulnerability-exploitation

heartbleed-vulnerability-exploitation Description hands on investigation of the Heartbleed vulnerability CVE-2014-0160. Summary this lab documents a hands-on investigation of the Heartbleed vulnerability, a critical flaw in OpenSSL's implementation of the TLS heartbeat extension. the goal was to...

ROOT-OS-DEBIAN-12-CVE-2026-42767 CVE-2026-42767 in openssl - Patched by Root

Root has patched CVE-2026-42767 in the openssl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-54874 CVE-2026-54874 in openssl - Patched by Root

Root has patched CVE-2026-54874 in the openssl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-75803 CVE-2026-75803 in openssl - Patched by Root

Root has patched CVE-2026-75803 in the openssl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-14456 CVE-2026-14456 in openssl - Patched by Root

Root has patched CVE-2026-14456 in the openssl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-63076 CVE-2026-63076 in openssl - Patched by Root

Root has patched CVE-2026-63076 in the openssl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-63072 CVE-2026-63072 in openssl - Patched by Root

Root has patched CVE-2026-63072 in the openssl package for Root:Debian:12. Multiple fixed versions available...

bash-tls-reneg-attack

bash-tls-reneg-attack Un script bash que intenta inundar un servidor con renegociaciones TLS utilizando el cliente openssl. Consulte CVE-2011-1473 y CVE-2011-1473 para más detalles. Uso: ./tls-reneg.sh some.hostname.here:port...

CVE-2022-3602-poc

CVE-2022-3602 拒绝服务PoC OpenSSL 3.0 3.0.7 中的缓冲区溢出拒绝服务 使用方法： $ gcc -o CVE-2022-3602 CVE-2022-3602.c -lpthread $ ./CVE-2022-3602 127.0.0.1 443...

cve-2024-13176-timing-analysis

Detección instrumentada de fugas de temporización ECDSA de baja amplitud en CVE-2024-13176 Este repositorio contiene el informe de investigación, el sitio web, los datos, el material fuente y los archivos de reproducibilidad de un estudio independiente de CVE-2024-13176. El proyecto examina si la...

MassBleed

MassBleed SSL漏洞扫描器 使用方法： sh massbleed.sh CIDR|IP single|port|subnet port proxy 简介： 该脚本具有四个主要功能，并能通过代理转发所有连接： 批量扫描任意 CIDR 网段中通过 443/tcp https 端口的 OpenSSL 漏洞（示例：sh massbleed.sh 192.168.0.0/16） 扫描任意 CIDR 网段中通过指定自定义端口的 OpenSSL 漏洞（示例：sh massbleed.sh 192.168.0.0/16 port 8443）...

heartbleed-tools

Escáner de vulnerabilidad Heartbleed de OpenSSL CVE-2014-0160, minero de datos y herramientas de restauración de claves RSA. Autor: Einar Otto Stangvik / @einaros / https://hacking.ventures Dado que el secreto ya no es tal y otros han empezado a publicar sus herramientas, también pongo las mías a...

heartbleed-lab

Laboratorio Heartbleed Laboratorio educativo para estudiar la vulnerabilidad Heartbleed CVE-2014-0160 usando un entorno OpenSSL vulnerable real dentro de Docker. Este proyecto reproduce un servidor TLS vulnerable usando OpenSSL 1.0.1f e implementa un cliente TLS heartbeat crudo y personalizado pa...

G2.5_openssl_CVE-2014-5139

Este repositorio no tiene un README...

heartbleed-lab

heartbleed-lab Un laboratorio pequeño y autocontenido para CVE-2014-0160 Heartbleed — la sobrelectura del heartbeat de TLS en OpenSSL 1.0.1–1.0.1f. Compila el OpenSSL genuinamente vulnerable a partir del código fuente upstream fijado en un contenedor desechable, lo sirve e incluye un cliente de...

SpookySSL-Scanner

SpookySSL-Scanner Escáner SpookySSL CVE-2022-3602 SSLv3 para Windows, Linux, macOS ¿Cómo se origina la vulnerabilidad? Primero, el problema surge al determinar el tamaño del byte. Al determinar el tamaño del byte, si no se define un valor NULL vacío/cero, la longitud del byte puede establecerse...

vboxdie-cracker

Virtual Box Disk Image Encryption password cracker Requirements 1. PHP = 5.5.0 2. OpenSSL = 1.0.1 XTS support Algorithm description User password is stored using a combination of PBKDF2 and AES-XTS as following shown values are fixed at the moment, but they can be controlled inside the file forma...

CryKeX

Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges optional Limitations: AES and RSA keys only Fails most...

CVE-2016-8610-PoC

CVE-2016-8610 PoC CVE-2016-8610 Alerta de Muerte SSL PoC Uso: python ssl-death-alert.py DOMINIO/IP PUERTO VERSIÓN-PROTOCOLOSSLv3, TLS1.0, TLS1.1, TLS1.2 NÚMERO-DE-ALERTAS1000 HILOS50 python ssl-death-alert.py test.tdl 443 TLS1.2 1000 50 Más información: http://security.360.cn/cve/CVE-2016-8610/...

CVE-2022-1292

CVE-2022-1292 POC Descripción The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary comman...