3602 matches found
sublert
/ / / / / / / / \ / / / / / / / / / / / // / // / / / / / / //,/.//// / Autor: Yassine Aboukir Versión: 1.4.7 ¿De qué se trata? Sublert es una herramienta de seguridad y reconocimiento escrita en Python que aprovecha la transparencia de certificados con el único propósito de monitorear nuevos...
cloud
Cloud Monitoreando el Panorama de la Nube Nuestra misión con este proyecto es ofrecer un mapa siempre actualizado y de libre acceso del panorama de la nube para cada uno de los principales proveedores de servicios en la nube. Decidimos comenzar recolectando datos de certificados SSL de máquinas A...
cloud
Cloud Monitoring the Cloud Landscape Our mission with this project is to provide an always up-to-date and freely accessible map of the cloud landscape for every major cloud service provider. We've decided to kick things off with collecting SSL certificate data of AWS EC2 and GCP machines,...
reproxy
Reproxy is a simple edge HTTPs server / reverse proxy supporting various providers docker, static, file, consul catalog. One or more providers supply information about the requested server, requested URL, destination URL, and health check URL. It is distributed as a single binary or as a docker...
CertCrunchy
/ \ | | / \ | | | / / | || / / | | | | / \ '| | | | '| | | | ' \ / | ' | | | | | /\ / | | || /\ | | || | | | | | | | | || | /|| |/| ,|| |||| ||, | / | |/ Solo una herramienta de reconocimiento tonta que usa datos de certificados SSL para encontrar nombres de host potenciales ¿Qué es...
getaltname
GSAN - Get Subject Alternative Names GSAN is a tool that can extract Subject Alternative Names SAN found in SSL Certificates directly from https servers which can provide you with DNS names subdomains or virtual servers. It doesn't rely on Certificate Transparency logs, it connects directly to th...
CloudPulse
CloudPulse - Motor de búsqueda del panorama de AWS Cloud Durante la fase de reconocimiento, un atacante busca cualquier información sobre su objetivo para crear un perfil que luego le ayudará a identificar posibles formas de acceder a una organización. CloudPulse es una herramienta potente que...
hyperfox
Hyperfox Hyperfox is a security auditing tool that proxies and records HTTP and HTTPS traffic between two points. Installation You can install the latest version of hyperfox to /usr/local/bin with the following command requires admin privileges: curl -sL...
shodan
Shodan Dorks por twitter.com/lothos612 Siéntete libre de hacer sugerencias Shodan Dorks Filtros básicos de Shodan city: Encuentra dispositivos en una ciudad específica. city:"Bangalore" country: Encuentra dispositivos en un país específico. country:"IN" geo: Encuentra dispositivos mediante...
getaltname
GSAN - Subject Alternative Namesを取得 GSAN は、HTTPSサーバーから直接SSL証明書に含まれるSubject Alternative Names（SAN）を抽出できるツールであり、DNS名（サブドメイン）や仮想サーバーを提供します。 これはCertificate Transparencyログに依存せず、サーバーに直接接続して証明書からSANを抽出します。これは内部サーバーや自己署名証明書を分析する際に特に便利です。 インストール pip（または推奨されるpipx）を使用して、システムに多くの依存関係を汚染しないようにします。 $ pipx...
CVE-2025-68721
CVE-2025-68721: Axigen WebAdmin Broken Access Control Vulnerability Summary A flaw in the permission logic allows an administrator account with zero permissions to access the "Security & Filtering" page, specifically the SSL Certificates endpoint. While other restricted sections are correctly...
phishing_catcher
Phishing Catcher Catch possible phishing domains in near real time by looking for suspicious TLS certificate issuances reported to the Certificate Transparency Log CTL via the CertStream API. "Suspicious" issuances are those whose domain name scores beyond a certain threshold based on a...
awsScrape
AWSScrape AWSScrape is a tool designed to scrape SSL certificates from all AWS IP ranges, searching for specific keywords in the certificates' Common Name CN, Organization O, and Organizational Unit OU fields. Installation 1. Clone this repository: git clone https://github.com/jhaddix/awsscrape.g...
CVE-2026-102671
The Joyland AI app is vulnerable because its invisible advertisement WebView accepts invalid SSL certificates by default. This flaw falls under CWE-295 (Improper Certificate Validation), potentially allowing for man-in-the-middle attacks within that specific WebView component. No specific version...
EUVD-2026-91030
The Joyland AI app accepts invalid SSL certificates in the invisible advertisement WebView by default...
CVE-2026-43820
A flaw was found in swift-nio-ssl. This vulnerability arises from the improper handling of Subject Alternative Names SANs within SSL certificates. When processing SANs that are not backed by an ASN1STRING, the system attempts to access memory outside of its allocated buffer, leading to an...
[SECURITY] Fedora 44 Update: curl-8.18.0-8.fc44
curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...
CVE-2026-32644
Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys...
Websites with an undefined trust level: avoiding the trap
Executive summary A suspicious website is a web resource that cannot be definitively classified as phishing, but whose activities are unsafe. Such sites manipulate users, tricking them into voluntarily transferring money for non-existent services, signing up for hidden subscriptions, or disclosin...
