badkeys

badkeys 알려진 취약점이 있는지 암호화 공개 키를 확인하는 도구 및 라이브러리 무엇인가요? badkeys는 다양한 형식의 공개 키에서 알려진 취약점을 확인합니다. 웹 버전은 badkeys.info에서 찾을 수 있습니다. 설치 badkeys는 pip를 통해 설치할 수 있습니다: pip3 install badkeys 가상 환경을 사용하는 것이 좋습니다. 다양한 설치 옵션에 대한 자세한 내용은 공식 Python 문서를 확인하세요. 또는 git 저장소에서 직접 ./badkeys-cli를 호출할 수 있습니다. Linux 배포판 및...

roca

ROCA detection tool This tool is related to ACM CCS 2017 conference paper 124 Return of the Coppersmith’s Attack: Practical Factorization of Widely Used RSA Moduli. It enables you to test public RSA keys for a presence of the described vulnerability. Update 4.11.2017 : Python 2.7, 3.4+ supported...

keypair

keypair 순수 JS로 RSA PEM 키 쌍 생성 사용법 var keypair = require'keypair'; var pair = keypair; console.logpair; 출력 $ node example.js public: '-----BEGIN RSA PUBLIC...

Meterpreter_Paranoid_Mode-SSL

MeterpreterParanoidMode v1.4 - SSL/TLS 연결 버전 릴리스: v1.4 안정 작성자: pedro ubuntu r00t-3xp10it 지원 배포판: Linux Kali, Mint, Ubuntu Suspicious-Shell-Activity SSA RedTeam 개발 @2017 설명: MeterpreterParanoidMode.sh는 스테이징/스테이지리스staged/stageless Meterpreter 연결을 보호하여, 페이로드가 연결되는 핸들러의 인증서를 확인하도록 합니다. 먼저 PEM 형식의 인증서...

PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard

Prerequisites both conditions must hold; both are deployment properties, not attacker-controlled at request time:- The jwt.decode allow-list mixes an HMAC algorithm with an asymmetric one, e.g. algorithms="ES256", "HS256" the RFC 8725 footgun the guard exists to backstop.- The verification key is...

AlmaLinux 9.2 [TuxCare] Security Update: gnutls / gnutls-c++ / gnutls-dane / gnutls-devel / gnutls-utils (ALMALINUX9.2:CLSA-2024:1727373881)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1727373881 advisory. - A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle...

AlmaLinux 9.2 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1776427525)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1776427525 advisory. - Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non- linearly with respect t...

PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard

Prerequisites both conditions must hold; both are deployment properties, not attacker-controlled at request time: - The jwt.decode allow-list mixes an HMAC algorithm with an asymmetric one, e.g. algorithms="ES256", "HS256" the RFC 8725 footgun the guard exists to backstop. - The verification key ...

CVE-2026-102268 PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard

PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, ispemformat in jwt/utils.py is affected because ispemformat does not recognize every PEM representation accepted by the cryptography loader. This occurs when an application mixes HMAC and asymmetric algorithms and...

CVE-2022-0778

CVE-2022-0778 설명 우리는 drago-96의 개념을 참고하여 P12 및 PEM 형식을 기반으로 PoC를 재작성했습니다. 이를 사용하여 CVE-2022-0778 취약점, 즉 위험한 SSL 인증서개인 비밀번호 없이 비워둠를 확인할 수 있습니다. 영향을 받는 장치의 경우 프로세스의 CPU가 100%가 되거나 재부팅될 수 있습니다. 크레딧 https://github.com/drago-96/CVE-2022-0778 https://twitter.com/taviso...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124482)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124482 advisory. The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. This affects programs which parse untrusted PEM inputs...

EUVD-2026-84745

Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL. The generatecertificate runs a Python script saved as a certificate file. The pyhton script attempts to retrieve code from a hardcoded http URL that is obfuscated wi...

PT-2026-96963

Name of the Vulnerable Software and Affected Versions Crypt::SelfCertificate versions 1.01 through 1.05 Description This software contains malware that executes Python code retrieved from an obfuscated URL. The generate certificate function runs a Python script disguised as a certificate file,...

EUVD-2026-78276

A flaw was found in hawtio-operator. When a custom Route TLS secret is configured and the operator runs at debug log level 1 or higher, the entire Route object — including the TLS private key in PEM format — is serialized to JSON and written to the operator's standard output. Operator logs are...

Astra Linux – Vulnerability in mbedtls

In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability exists in the decoding of Base64 PEM files. This vulnerability allows system-level administrator attackers to obtain information about secret RSA keys through a controlled-channel and side-channel attack on software running in...

Astra Linux – Vulnerability in Bouncycastle

Bouncy Castle for Java before version 1.73 contains a potential Denial of Service DoS issue within the Bouncy Castle org.bouncycastle.openssl.PEMParser class. This class parses OpenSSL PEM-encoded streams containing X.509 certificates, PKCS8-encoded keys, and PKCS7 objects. Parsing a file that...

ROS-20260908-73-0024

The vulnerability in perl-Convert-PEM is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260908-73-0041

The vulnerability in perl-Convert-PEM is related to an attack surface whose quantitative magnitude exceeds the desired maximum. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the protected information...

ROS-20260907-73-0509

The vulnerability in perl-Convert-PEM is related to insufficient entropy. Exploitation of this vulnerability can be carried out remotely...

ROS-20260907-73-0512

The vulnerability in perl-Convert-PEM is related to the use of files and directories accessible from external parties. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...