getaltname

GSAN - 获取主题备用名称 GSAN 是一个可以从 HTTPS 服务器直接提取 SSL 证书中的主题备用名称 SAN 的工具，这些名称可以提供 DNS 名称（子域名）或虚拟服务器。 它不依赖于证书透明度日志，而是直接连接到服务器并从证书中提取 SAN，这在分析内部服务器或自签名证书时尤其有用。 安装 使用 pip（或推荐用 pipx）以避免用大量依赖项污染系统。 root@kitploit: $ pipx install --user gsan 你也可以使用 Docker 安装并运行它。 root@kitploit: $ docker run --rm -i...

certdepot

Certificate Depot A free online tool for generating self-signed SSL/TLS certificates in seconds. No signup required. Website: cert-depot.com Features Generate self-signed certificates with RSA 2048/4096 or ECDSA P-256/P-384 keys Download as ZIP PEM key + certificate or PFX PKCS12 Automatic SAN...

badssl.com

访问 badssl.com 查看测试子域名列表，包括： self-signed.badssl.com expired.badssl.com mixed.badssl.com rc4.badssl.com hsts.badssl.com 服务器设置 标准 Ubuntu 虚拟机，DNS A 记录指向 badssl.com. 和 .badssl.com. 的虚拟机。 测试与开发 1. 按照说明 安装 Docker。 2. 运行 git clone https://github.com/chromium/badssl.com && cd badssl.com 克隆 badssl 仓库。 3...

phishlulz

PhishLulz PhishLulz is a Ruby toolset aimed at automating Phishing activities. When you start a phishing campaign, a dedicated Amazon EC2 Debian 7 instance is spawned. The VM comes with various open source tools that have been glued together. The two main components are: PhishingFrenzy...

phishlulz

PhishLulz PhishLulz 是一套 Ruby 工具集，旨在实现钓鱼活动的自动化。 当你开始一次钓鱼活动时，会启动一个专用的 Amazon EC2（Debian 7）实例。该虚拟机集成了多种开源工具，主要包含以下两个组件： PhishingFrenzy https://github.com/pentestgeek/phishing-frenzy BeEF https://github.com/beefproject/beef PhishLulz 自带自签名 CA：这是为 PhishingFrenzy 管理界面生成自签名证书所必需的。你还会发现一些很酷的钓鱼模板（这些不在 PF...

skyhook

Skyhook Skyhook is a REST-driven utility used to smuggle files into and out of networks defended by IDS implementations. It comes with a pre-packaged web client that uses a blend of React, vanilla JS, and web assembly to manage file transfers. Key Links Download here See the user documentation to...

clone-cert

clone-cert.sh Este es un script de shell simple que recupera el certificado X.509 asociado a un puerto TCP envuelto en TLS y utiliza openssl para crear un certificado similar reemplazando la clave pública y corrigiendo la firma. Esto es particularmente útil si desea demostrar por qué los...

rsync: rsync: TLS Certificate Validation Bypass allows interception of encrypted sessions

A flaw was found in the rsync-ssl wrapper script's TLS certificate validation. An on-path attacker can present self-signed or invalid certificates to intercept, decrypt, or tamper with encrypted sessions. Because rsync fails to validate the certificate against a trusted CA or verify hostname...

1Panel-CVE-2025-54424-

CVE-2025-54424 CVE-2025-54424: Herramienta integrada escaneo + explotación para la vulnerabilidad RCE por bypass del certificado de cliente en 1Panel Introducción a la vulnerabilidad 1Panel es un panel de administración de operaciones de Linux, moderno y de código abierto, que proporciona una...

CVE-2024-36401

CVE-2024-36401 Remix del CVE-2024-36401 de Chokapikk para permitir un comportamiento similar a una webshell en entornos limitados. También permite sesiones TLS autofirmadas, ya que las sesiones HTTP son un poco... Uso: root@kitploit: git clone https://github.com/keelanbrady1011/CVE-2024-36401 && ...

CVE-2025-54424

CVE-2025-54424 CVE-2025-54424: Herramienta integrada para la vulnerabilidad RCE por omisión del certificado de cliente en 1Panel escaneo + explotación Resumen de la vulnerabilidad 1Panel es un panel moderno y de código abierto para la administración de operaciones de Linux que ofrece una interfaz...

python3.14-cryptography security update

An update is available for python3.14-cryptography. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented...

MiracleLinux 9 : python3.14-cryptography-45.0.4-4.el9_8.6 (AXSA:2026-1788:01)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1788:01 advisory. python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building CVE-2026-69249 python-cryptography...

python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building

A flaw was found in python-cryptography. When processing invalid certificate chains that include duplicate self-signed certificates, the system recursively invokes the same certificate, leading to an exponential increase in processing time. A remote attacker could exploit this by providing a...

Important: Red Hat Security Advisory: python3.14-cryptography security update

An update for python3.14-cryptography is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

python-cryptography: python-cryptography: Duplicate self-signed intermediates can cause exponential path-building

A flaw was found in python-cryptography. When processing invalid certificate chains that include duplicate self-signed certificates, the system recursively invokes the same certificate, leading to an exponential increase in processing time. A remote attacker could exploit this by providing a...

CVE-2026-82180

In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate authentication policy, CertificateMqttFilter parses an X.509 certificate that the client sends inside the MQTT message payload the authentication field of MqttRequestTemplate and treats its Subject...

CVE-2026-82180

Eclipse Arrowhead versions 5.0.0 through 5.2.1 are affected when the MQTT API is enabled with the certificate authentication policy. The CertificateMqttFilter decodes an X.509 certificate from the MQTT message payload using CertificateFactory.generateCertificate() but never verifies its signature...

EUVD-2026-70467

In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate authentication policy, CertificateMqttFilter parses an X.509 certificate that the client sends inside the MQTT message payload the authentication field of MqttRequestTemplate and treats its Subject...

CVE-2026-55856

A flaw was found in MariaDB Connector/J. An active man-in-the-middle MITM attacker or hostile server can exploit a vulnerability during the initial connection handshake. When a Java application connects using specific SSL modes without proper certificate configuration, the connector may accept an...