sslScrape

sslScrape SSLScrape | A scanning tool for scaping hostnames from SSL certificates. Written by Peter Kim and @bbuerhaus . / ///| | // \ \ | | / \ / \ / / | | / \ | | // | | / / / /| / / | // / / / / / /|| / Usage | python sslScrape.py CIDR Range E.X | python sslScrape.py 10.100.100.0/24...

sslnuke

sslnuke -- SSL without verification isn't secure! We have all heard over and over that SSL without verification is not secure. If an SSL connection is not verified with a cached certificate, it can easily be hijacked by any attacker. So in 2013, one would think we had totally done away with this...

wordpress-cve-2024-10924-pentest

WordPress CVE-2024-10924 Penetration Testing Report 2FA Bypass Vulnerability in Really Simple SSL Plugin 📋 Table of Contents Executive Summary Target Information Methodology Timeline Reconnaissance Phase Vulnerability Analysis Attack Flow Exploitation Impact Assessment Remediation Tools Used...

CVE-2018-13379-FortinetVPN

CVE-2018-13379-FortinetVPN An Improper Limitation of a Pathname to a Restricted Directory "Path Traversal" in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource...

wordpress-cve-2024-10924-exploit

WordPress CVE-2024-10924 Exploit 📌 Overview This repository contains a Proof-of-Concept PoC exploit for CVE-2024-10924, a vulnerability in the Really Simple SSL WordPress plugin that allows bypassing two-factor authentication 2FA. Attackers can exploit this flaw to log in as any user with a valid...

detect_bluekeep.py

detectbluekeep.py Python script to detect bluekeep vulnerability - CVE-2019-0708 - with TLS/SSL support Work derived from the Metasploit module written by @zerosum0x0 https://github.com/zerosum0x0/CVE-2019-0708 RC4 taken from https://github.com/DavidBuchanan314/rc4 Prerequisites detectbluekeep.py...

CVE-2024-10924

CVE-2024-10924 Exploit - WordPress Really Simple SSL Plugin 2FA Bypass Overview This repository contains an exploit for CVE-2024-10924 , a vulnerability in the Really Simple SSL plugin for WordPress. It allows an attacker to bypass Two-Factor Authentication 2FA onboarding and gain unauthorized...

List-CVE-2025-2026

CVE-2025-69412 - KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API aka phishing API, which might allow ... 2. CVE-2025-69413 - In Gitea before 1.25.2, /api/v1/user has different responses for failed authentication depending on...

CVE-2016-8610-PoC

CVE-2016-8610 PoC CVE-2016-8610 SSL Death Alert PoC Usage: python ssl-death-alert.py DOMAIN/IP PORT PROTOCOL-VERSIONSSLv3, TLS1.0, TLS1.1, TLS1.2 NUMBER-OF-ALERTS1000 THREADS50 python ssl-death-alert.py test.tdl 443 TLS1.2 1000 50 More info: http://security.360.cn/cve/CVE-2016-8610/...

CVE-2022-1388

CVE-2022-1388 This repository conssists of the python exploit code for CVE-2022-1388 F5's BIG-IP RCE usage: exploit.py -h -t TARGET -p PORT -c CMD --ssl options: -h, --help show this help message and exit -t TARGET, --target TARGET Specify the IP Address/Domain Name of the vulnerable server -p...

cve2018-13379-nmap-script

cve2018-13379-nmap-script CVE-2018-13379 Script for Nmap NSE An Improper Limitation of a Pathname to a Restricted Directory "Path Traversal" in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted...

CVE-2022-35416

CVE-2022-35416 H3CSSLVPNXSSReflected XSS CVE-2022-35416 from https://www.cloudwaf.cc/cve/cve-2022-35416 Payload: Shodan: http.htmlhash:510586239 Access address：https://IP:PORT/wnm/login/login.json. Payload: Cookie: svpnlang=XSSPAYLOAD Description H3C SSL VPN through 2022-07-10 allows...

cve-2024-21762-checker

FortiGate cve-2024-21762-checker This script is used to check for vulnerabilities in Fortigate SSL VPNs based on CVE-2024-21762. It uses Shodan to find vulnerable devices and test their vulnerability. Features Uses Shodan API to find Fortigate devices running SSL VPN on port 10443. Checks the...

CVE-2023-27997-check

CVE-2023-27997 Vulnerability Assessment Tool Safely detect whether a FortiGate SSL VPN instance is vulnerable to CVE-2023-27997 based on response timing. See the full write-up at the Bishop Fox blog, including a complete walkthrough of the methodology behind this tool. Description CVE-2023-27997 ...

openssl_g2.5_CVE-2014-3566

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

CVE-2014-0160

CVE-2014-0160 Links https://github.com/DisK0nn3cT/MaltegoHeartbleed https://github.com/a0726h77/heartbleed-test https://github.com/musalbas/heartbleed-masstest https://github.com/decal/ssltest-stls https://github.com/isgroup-srl/openmagic https://github.com/offensive-python/HeartLeak Nmap nmap -s...

Linux Distros Unpatched Vulnerability : CVE-2026-105236

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to...

bladelogic_bmc-cve-2016-1542

bladelogicbmc-cve-2016-1542 A rebuilt version of the exploit for CVE-2016-1542 and CVE-2016-1543 from insinuator.net https://insinuator.net/2016/03/bmc-bladelogic-cve-2016-1542-and-cve-2016-1543/ I recently came across systems vulnerable to this CVE in a recent penetration test and found exploits...

awsScrape

AWSScrape AWSScrape is a tool designed to scrape SSL certificates from all AWS IP ranges, searching for specific keywords in the certificates' Common Name CN, Organization O, and Organizational Unit OU fields. Installation 1. Clone this repository: git clone https://github.com/jhaddix/awsscrape.g...

CVE-2025-0133-exploit

CVE-2025-0133 Scan A script written on python just to check the existence of a CVE-2025-0133 Reflected Cross-Site Scripting vulnerability that occurs in Palo Alto. The file getconfig.esp is detected and tested for XSS using the given script. Usage: darkfear@b0x:/CVE-2025-0133-exploit$ python3...