CVE-2014-0224

OPENSSL CVE-2014-0224 MITM Exploit-Demo. Autor : @bluerust Blog : http://hi.baidu.com/bluerust/item/bf2ab031bbadcf09cfb9fe41 Version : 1.1 Beschreibung : Nur für openssl 1.0.1, nur getestet für Chiffre RC4-SHA. a. Server openssl sserver -debug -accept 443 -cert server.crt -certform PEM -key...

heartbleed

HEARTBLEED : VULNERABILITÀ HEARTBEAT DI OpenSSL TLS Estensione Heartbeat di OpenSSL TLS - Divulgazione di memoria - Scanner e exploit della vulnerabilità per versioni SSL/TLS multiple necessario: root@kitploit: sudo apt-get install nmap lolcat java root@kitploit: sudo apt install default-jre...

CVE-2020-1967

CVE-2020-1967 Proof-of-Concept-Exploit für die OpenSSL-signaturealgorithmscert-DoS-Schwachstelle CVE-2020-1967. Der ursprüngliche Fund geht auf Bernd Edlinger zurück, weitere Analysen stammen von Matt Caswell und Benjamin Kaduk, diese Demo von Imre Rad. Voraussetzung Server- oder...

cve-2022-32223

CVE-2022-32223 File sorgente per generare un exploit dimostrativo di CVE-2022-32223: Node.js è vulnerabile a Hijack Execution Flow: DLL Hijacking in determinate condizioni su piattaforme Windows. Questa vulnerabilità può essere sfruttata se la vittima ha le seguenti dipendenze su un computer...

CVE-2021-4044

SSL जाँचकर्ता स्क्रिप्ट इस रिपॉजिटरी में एक Python स्क्रिप्ट है जो आपके सिस्टम पर OpenSSL संस्करण की जाँच करती है और उपयोगकर्ता द्वारा प्रदान की गई वेबसाइट के लिए SSL/TLS कनेक्शन का परीक्षण करती है। स्क्रिप्ट यह पहचानने के लिए डिज़ाइन की गई है कि क्या सिस्टम CVE-2021-4044 से प्रभावित है और कनेक्श...

aws-suture

tl;dr root@kitploit: $ git clone [email protected]:pblittle/suture.git $ cd suture $ bundle install $ bundle exec ./bin/suture --help $ bundle exec ./bin/suture check Suture Suture هي أداة لتنفيذ أوامر عشوائية على مثيلات AWS EC2 الخاصة بك. يمكنك تشغيلها على مثيل واحد أو على منطقة بأكملها. تم...

debianopenssl

debianopenssl Chiavi private vulnerabili al bug di Debian OpenSSL CVE-2008-0166 Nel 2008 un bug nel pacchetto OpenSSL di Debian e Ubuntu ha portato a chiavi private prevedibili. Sebbene il numero di chiavi sia limitato, servono alcune considerazioni per creare un elenco adeguato di tutte le chiav...

OpenSSL_1_0_1g_CVE-2015-1788

OpenSSL 1.0.1g 7. April 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson Alle Rechte vorbehalten. BESCHREIBUNG Das OpenSSL-Projekt ist eine gemeinschaftliche Anstrengung, ein robustes, kommerzielles, voll ausgestattetes Open-Source-Toolkit zu...

testssl.sh

Einleitung...

[SECURITY] [DSA 6465-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6465-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 25, 2026 https://www.debian.org/security/faq -...

CVE-2022-0778

CVE-2022-0778 La vulnerabilità scoperta innesca un ciclo infinito nella funzione BNmodsqrt di OpenSSL durante l’analisi di una chiave di curva ellittica. Ciò significa che un certificato X.509 creato ad arte può causare un DoS su qualsiasi server non ancora patchato. Il cuore della vulnerabilità...

vaas-cve-2014-0160

Vulnerability as a Service - CVE 2014-0160 Un sistema Linux Debian Wheezy con una versione vulnerabile di libssl e openssl e un server web per mostrare CVS-2014-0160, noto anche come Heartbleed. Panoramica Questo container docker è basato su Debian Jessie ed è stato modificato per utilizzare una...

hashcobra

hashcobra hashcobra Hash Cracking tool. Description This tool uses a new method to crack hashes. With the help of rainbow tables concept this tool generates rainbow tables from wordlists to heavily optimize the cracking process. Usage root@kitploit: $ ./hashcobra -H --== hashcobra by sepehrdad ==...

USN-8678-1: OpenSSL vulnerabilities

It was discovered that OpenSSL incorrectly handled the QUIC server incoming channel queue. A remote attacker could possibly use this issue to cause OpenSSL to use excessive resources, leading to a denial of service. This issue only affected Ubuntu 26.04 LTS. CVE-2026-14456 It was discovered that...

USN-8678-1 openssl vulnerabilities

It was discovered that OpenSSL incorrectly handled the QUIC server incoming channel queue. A remote attacker could possibly use this issue to cause OpenSSL to use excessive resources, leading to a denial of service. This issue only affected Ubuntu 26.04 LTS. CVE-2026-14456 It was discovered that...

peetch

peetch peetch is a collection of tools aimed at experimenting with different aspects of eBPF to bypass TLS protocol protections. Currently, peetch includes three subcommands. The first called dump aims to sniff network traffic by associating information about the source process with each packet...

peetch

peetch peetch è una raccolta di strumenti pensati per sperimentare con diversi aspetti di eBPF al fine di bypassare le protezioni del protocollo TLS. Attualmente, peetch include tre sottocomandi. Il primo chiamato dump ha lo scopo di sniffare il traffico di rete associando informazioni sul proces...

CVE-2026-63074

A flaw was found in OpenSSL. The CMP Certificate Management Protocol implementation does not clear cached additional certificates when an invalid message is received, leading to excessive memory consumption. This allows a malicious client to repeatedly send requests containing unique extra...

CVE-2026-63073

A flaw was found in OpenSSL. A malicious CMP Certificate Management Protocol endpoint can send an unexpected distinguished name DN directly as the format string argument to ERRraisedata, causing the application to dereference and write to unrelated stack contents. This can lead to a crash in the...

CVE-2026-54874

A flaw was found in OpenSSL. Receiving a DTLS Datagram Transport Layer Security record for a future epoch while a handshake is in progress causes OpenSSL to buffer an excessive amount of memory. This allows a peer to cause memory exhaustion, eventually resulting in a denial of service, using a...