CVE-2022-2274

OpenSSL-src Heap Memory Corruption with RSA Private Key Operation : CVE-2022-2274 Summary OpenSSL-src-rust is a source code and logic to build OpenSSL from source written in rust and packaged as a crate. There are currently two maintained branches, matching the two maintained OpenSSL versions whi...

CVE-2014-2734

CVE-2014-2734 Ruby OpenSSL CA Private Key Spoofing ============= Ruby openssl has a vulnerability when a public key is a issued prior writing to private key and is reopened during a script it spoofs a CA private key. PoC script https://gist.github.com/10446549 Mitre:...

CVE-2014-0160.

CVE-2014-0160 Lab setup using Heartbleed to leak memory of webapps This repo focuses on building a container to create an environment to easily exploit nginx using the Heartbleed technique, focusing on: Setting up environment using Docker Server setup diagram Demo steps Server diagram The...

CVE-2025-23134_fixes_code

CVE-2026-34180 – Patch Changes The patch addresses an integer truncation issue in the OpenSSL ASN.1/DER decoding code. The following changes were made: 1. Updated the ASN.1 content length type Changed the len parameter of asn1exc2i from int to long. This allows the function to receive and handle...

heartbleed-proof-of-concept

Heartbleed CVE-2014-0160 Setup You will require docker in order to perform the setup. The exploit, dynamically generates the random bytes from the Client Hello message, therefore you will need to link the library when building the executable. The required package to be installed, in order to link...

Security update for openssl-3 (important)

openSUSE security update: security update for openssl-3 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22102-1 Rating: important References: bsc1280587 bsc1280589 bsc1280590 bsc1280591 bsc1280592 bsc1280594 bsc1280595 bsc1280596 bsc1280597 bsc12805...

CVE-2016-8610-PoC

CVE-2016-8610 PoC CVE-2016-8610 SSL Death Alert PoC Usage: python ssl-death-alert.py DOMAIN/IP PORT PROTOCOL-VERSIONSSLv3, TLS1.0, TLS1.1, TLS1.2 NUMBER-OF-ALERTS1000 THREADS50 python ssl-death-alert.py test.tdl 443 TLS1.2 1000 50 More info: http://security.360.cn/cve/CVE-2016-8610/...

CVE-2014-3570_G2.5_openssl_no_patch

This repository does not have a README...

cve-2020-0601-plugin

Zeek test script for CVE-2020-0601 This script can detect exploit attempts for CVE-2020-0601. It performs a check to see if a known curve is used in a certificate - if this is not the case a notice is raised. Example notice in notice.log: 1579043477.791522 CHhAvVGS1DHFjwGM9 192.241.209.49 46110...

CVE-2014-8275_openssl_g2.5

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

openssl_g2.5_CVE-2014-3566

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

HeartbleedAttack

Heartbleed Attack: Java-Based Attack Demo Overview This repository features Heartbleed.java, a custom Java-based exploit designed to demonstrate the Heartbleed vulnerability CVE-2014-0160 by extracting sensitive data from a vulnerable server IP: 192.168.1.132 running Apache port 443 and Postfix...

aws-suture

tl;dr $ git clone [email protected]:pblittle/suture.git $ cd suture $ bundle install $ bundle exec ./bin/suture --help $ bundle exec ./bin/suture check Suture Suture is a tool for running arbitrary commands against your AWS EC2 instances. You can run it against an individual instance or an...

Project-Field-Analysis-and-Memory-Leak-Demonstration

Objective The objective of this project was to assess a remote host for the Heartbleed vulnerability CVE-2014-0160, verify its presence, and exploit it to extract potentially sensitive information from server memory over the TLS protocol. Execution 1. Identifying Open Services Nmap nmap -sC -sV...

PoC-CVE-2025-69420

CVE-2025-69420 — OpenSSL TimeStamp Response type confusion PoC Crash-only laboratory reproducer for CVE-2025-69420 in OpenSSL. The PoC loads a valid RFC 3161 TimeStamp Response, changes the signed ESS attribute from VASN1SEQUENCE to VASN1NULL in memory, and calls TSRESPverifyresponse. On an...

[SECURITY] Fedora 43 Update: openssl-3.5.9-1.fc43

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

PoC-CVE-2025-69419

CVE-2025-69419 – OpenSSL Heap Buffer Overflow Reproducer Overview This repository contains a minimal proof-of-concept reproducer for CVE-2025-69419 affecting vulnerable versions of OpenSSL. The PoC demonstrates the heap out-of-bounds write reported for PKCS12getfriendlyname when processing a...

PoC-CVE-2025-69421

CVE-2025-69421 crash-only reproducer This repository contains a minimal malformed PKCS12 file that reproduces CVE-2025-69421 in an isolated laboratory environment. The generated PFX contains EncryptedData whose EncryptedContentInfo omits the optional encryptedContent field. Vulnerable OpenSSL...

HMAC_Bruteforcer

HMACBruteforcer Very Slow HMAC Key Bruteforcer Implemented in Bash Uses: OpenSSL Crunch Optional...

heartbleed

heartbleed A simple tool written in Ruby wich allow testing your servers for OpenSSL CVE-2014-0160 vulnerability. Disclaimer I will not be taken responsible for the damage that could be done using this tool. It was written to check private servers for a precise vulnerability and measure potential...