sslscan

SSLScan SSLScan consulta servicios SSL, como HTTPS, para determinar los cifrados que son compatibles. SSLScan está diseñado para ser fácil, ligero y rápido. La salida incluye los cifrados preferidos del servicio SSL, el certificado y está en formatos Texto y XML. Features Consultar servicios SSL...

striptls

striptls - auditing proxy poc implementation of STARTTLS stripping attacks A generic tcp proxy implementation and audit tool to perform protocol independent ssl/tls interception and STARTTLS stripping attacks on SMTP, POP3, IMAP, FTP, NNTP, XMPP, ACAP and IRC. Python2! 🏆 Trophies CVE-2016-0772 -...

striptls

striptls - proxy de auditoría implementación de prueba de concepto de ataques de despojo de STARTTLS Una implementación genérica de proxy tcp y herramienta de auditoría para realizar interceptación ssl/tls independiente del protocolo y ataques de despojo de STARTTLS en SMTP, POP3, IMAP, FTP, NNTP...

sslyze

Nota El desarrollo actual de SSLyze ahora tiene lugar en un repositorio separado: https://github.com/nabla-c0d3/sslyze. Este repositorio se actualizará periódicamente desde este nuevo repositorio principal, pero para la versión más actual, consulte el nuevo repo. Si clonó el repositorio pero dese...

cipherscan

CipherScan Cipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl sclient command line. Cipherscan is meant to ru...

openssl

Welcome to the OpenSSL Project OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations are based on a full-strength general purpose cryptographic library, which...

starttls-mitm

starttls-mitm es un proxy MITM que retransmite y vuelca de forma transparente tanto el tráfico en texto plano como el tráfico TLS. Utiliza un archivo de clave y un archivo de certificado proporcionados por el usuario para suplantar servidores remotos. El usuario debe indicar explícitamente al...

USN-8487-2: curl regression

USN-8487-1 fixed vulnerabilities in curl. Unfortunately that update contained an incomplete fix for CVE-2026-8927. This update fixes the problem. Original advisory details: Andrew Nesbitt discovered that curl could reuse an existing live connection during STARTTLS-based connection upgrades even...

ldapserver

Este paquete está en desarrollo. ldapserver es una librería auxiliar para crear software de servidor capaz de hablar el protocolo LDAP. Podría ser una implementación alternativa de LDAP, un proxy LDAP personalizado o incluso un backend completamente diferente capaz de "enmascarar" su API como un...

curl: curl: Insecure connection establishment due to TLS configuration mismatch

A flaw was found in curl. When a new data transfer attempts to upgrade its connection using STARTTLS, it may incorrectly reuse an existing live connection. This reuse can occur even if the Transport Layer Security TLS configuration of the new transfer does not match the existing connection,...

cve-2026-45185-detection-script

CVE-2026-45185 Detection Scripts c SECPlayground Platform —https://www.secplayground.com These detection scripts are property of the SECPlayground Platform. Two safe detection scripts. Neither drives the closenotify-mid-BDAT trigger, so they will not crash the daemon or leave panic-log entries...

p5-ssl-tools

Colección de Herramientas SSL Este repositorio contiene varias herramientas, destinadas a depurar o analizar problemas relacionados con SSL/TLS. Análisis del estado de TLS analyze-ssl.pl comprueba el soporte de varias versiones de SSL/TLS comprueba qué cifrados son compatibles verifica el...

Heartbleed

Heartbleed Un comprobador sitio y herramienta para CVE-2014-0160. Sitio público en https://filippo.io/Heartbleed/ Uso de la herramienta: Heartbleed -service="servicename" example.com:443 Heartbleed servicename://example.com:443 Códigos de salida: 0 - SAFE; 1 - VULNERABLE; 2 - ERROR. cambiado...

EulerOS 2.0 SP10 : curl (EulerOS-SA-2026-3734)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS...

EulerOS Virtualization 2.12.1 : curl (EulerOS-SA-2026-3580)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw in curl's cookie parsing logic allows a malicious HTTP server to set 'super cookies' that bypass the Public Suffix List check...

EulerOS 2.0 SP10 : curl (EulerOS-SA-2026-3687)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS...

EulerOS 2.0 SP15 : ruby (EulerOS-SA-2026-3821)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.3.10, 0.4.24, 0.5.14, and 0.6.4, a...

Astra Linux – Vulnerability in curl

When curl version 7.20.0 or later connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can send multiple responses at once, which are cached by curl. In this case, curl upgrades to TLS, but it does not discard the cached responses. Instead, it...

Astra Linux – Vulnerability in Ruby 2.5, JRuby

A issue was discovered in Ruby between versions 2.6.7, 2.7.x up to 2.7.3, and 3.x up to 3.0.1. The Net::IMAP library does not raise an exception when the StartTLS command fails with an unknown response. This may allow man-in-the-middle attackers to bypass TLS protections by leveraging the network...

aiosmtplib: STARTTLS response injection

ImpactWhen a connection is upgraded with STARTTLS, aiosmtplib reads the server's 220 go-ahead reply and immediately performs the TLS handshake without discarding any data still sitting in the receive buffer. Bytes the protocol read off the plaintext socket before the handshake survive across the...