getaltname

GSAN - Obtener Nombres Alternativos del Sujeto GSAN es una herramienta que puede extraer Nombres Alternativos del Sujeto SAN encontrados en Certificados SSL directamente desde servidores https, lo que puede proporcionarte nombres DNS subdominios o servidores virtuales. No depende de los registros...

certdepot

Depósito de Certificados Una herramienta en línea gratuita para generar certificados SSL/TLS autofirmados en segundos. No requiere registro. Sitio web: cert-depot.com Funcionalidades Generar certificados autofirmados con claves RSA 2048/4096 o ECDSA P-256/P-384 Descargar como ZIP clave PEM +...

badssl.com

Visita badssl.com para ver una lista de subdominios de prueba, incluyendo: self-signed.badssl.com expired.badssl.com mixed.badssl.com rc4.badssl.com hsts.badssl.com Configuración del servidor Máquina virtual Ubuntu estándar, registros DNS A para badssl.com. y apuntando a la VM...

skyhook

Skyhook Skyhook is a REST-driven utility used to smuggle files into and out of networks defended by IDS implementations. It comes with a pre-packaged web client that uses a blend of React, vanilla JS, and web assembly to manage file transfers. Key Links Download here See the user documentation to...

phishlulz

PhishLulz PhishLulz is a Ruby toolset aimed at automating Phishing activities. When you start a phishing campaign, a dedicated Amazon EC2 Debian 7 instance is spawned. The VM comes with various open source tools that have been glued together. The two main components are: PhishingFrenzy...

phishlulz

PhishLulz PhishLulz 是一套 Ruby 工具集，旨在实现钓鱼活动的自动化。 当你开始一次钓鱼活动时，会启动一个专用的 Amazon EC2（Debian 7）实例。该虚拟机集成了多种开源工具，主要包含以下两个组件： PhishingFrenzy https://github.com/pentestgeek/phishing-frenzy BeEF https://github.com/beefproject/beef PhishLulz 自带自签名 CA：这是为 PhishingFrenzy 管理界面生成自签名证书所必需的。你还会发现一些很酷的钓鱼模板（这些不在 PF...

clone-cert

clone-cert.sh Este es un script de shell simple que recupera el certificado X.509 asociado a un puerto TCP envuelto en TLS y utiliza openssl para crear un certificado similar reemplazando la clave pública y corrigiendo la firma. Esto es particularmente útil si desea demostrar por qué los...

rsync: rsync: TLS Certificate Validation Bypass allows interception of encrypted sessions

A flaw was found in the rsync-ssl wrapper script's TLS certificate validation. An on-path attacker can present self-signed or invalid certificates to intercept, decrypt, or tamper with encrypted sessions. Because rsync fails to validate the certificate against a trusted CA or verify hostname...

1Panel-CVE-2025-54424-

CVE-2025-54424 CVE-2025-54424：1Panel Client Certificate Bypass RCE Vulnerability All-in-One Tool Scan + Exploit Vulnerability Overview 1Panel is an open-source, modern Linux operation and maintenance panel that provides a graphical interface for deploying websites, managing servers, and running...

CVE-2024-36401

CVE-2024-36401 Remix of Chokapikk's CVE-2024-36401 to allow webshell-like behaviour on limited environments. Also allows for self-signed TLS sessions as HTTP sessions are a bit... Usage: root@kitploit: git clone https://github.com/keelanbrady1011/CVE-2024-36401 && cd CVE-2024-36401 pip install -r...

CVE-2025-54424

CVE-2025-54424 CVE-2025-54424: Herramienta integrada para la vulnerabilidad RCE por omisión del certificado de cliente en 1Panel escaneo + explotación Resumen de la vulnerabilidad 1Panel es un panel moderno y de código abierto para la administración de operaciones de Linux que ofrece una interfaz...

python3.14-cryptography security update

An update is available for python3.14-cryptography. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented...

MiracleLinux 9 : python3.14-cryptography-45.0.4-4.el9_8.6 (AXSA:2026-1788:01)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1788:01 advisory. python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building CVE-2026-69249 python-cryptography...

python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building

A flaw was found in python-cryptography. When processing invalid certificate chains that include duplicate self-signed certificates, the system recursively invokes the same certificate, leading to an exponential increase in processing time. A remote attacker could exploit this by providing a...

Important: Red Hat Security Advisory: python3.14-cryptography security update

An update for python3.14-cryptography is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building

A flaw was found in python-cryptography. When processing invalid certificate chains that include duplicate self-signed certificates, the system recursively invokes the same certificate, leading to an exponential increase in processing time. A remote attacker could exploit this by providing a...

CVE-2026-82180

In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate authentication policy, CertificateMqttFilter parses an X.509 certificate that the client sends inside the MQTT message payload the authentication field of MqttRequestTemplate and treats its Subject...

CVE-2026-82180

Eclipse Arrowhead versions 5.0.0 through 5.2.1 are affected when the MQTT API is enabled with the certificate authentication policy. The CertificateMqttFilter decodes an X.509 certificate from the MQTT message payload using CertificateFactory.generateCertificate() but never verifies its signature...

EUVD-2026-70467

In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate authentication policy, CertificateMqttFilter parses an X.509 certificate that the client sends inside the MQTT message payload the authentication field of MqttRequestTemplate and treats its Subject...

CVE-2026-55856

A flaw was found in MariaDB Connector/J. An active man-in-the-middle MITM attacker or hostile server can exploit a vulnerability during the initial connection handshake. When a Java application connects using specific SSL modes without proper certificate configuration, the connector may accept an...