striptls

striptls - auditing proxy poc implementation of STARTTLS stripping attacks A generic tcp proxy implementation and audit tool to perform protocol independent ssl/tls interception and STARTTLS stripping attacks on SMTP, POP3, IMAP, FTP, NNTP, XMPP, ACAP and IRC. Python2! 🏆 Trophies CVE-2016-0772 -...

starttls-mitm

starttls-mitm is a mitm proxy that will transparently proxy and dump both plaintext and TLS traffic. It uses a user-provided keyfile and certificate file to impersonate remote servers. The user must explicitly instruct the device being man-in-the-middled to trust this certificate authority -- so...

sslyze

Note Current development of SSLyze now takes place on a separate repository: https://github.com/nabla-c0d3/sslyze. This repository will periodically be updated from this new parent repository, but for the most current version, please check the new repo. If you cloned the repository but wish to...

openssl

Welcome to the OpenSSL Project !openssl logowww.openssl.org !github actions ci badgegithub actions ci OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations ar...

ldapserver

This package is a work in progress. ldapserver is a helper library for building server software capable of speaking the LDAP protocol. This could be an alternate implementation of LDAP, a custom LDAP proxy or even a completely different backend capable of "masquerading" its API as a LDAP Server...

p5-ssl-tools

Collection of SSL Tools This repository contains various tools, which are intended to debug or analyze problems related to SSL/TLS. Analyzing state of TLS analyze-ssl.pl check support for various SSL/TLS version check which ciphers are support verfiy certificate check OCSP state check if SNI is...

sslscan

SSLScan SSLScan queries SSL services, such as HTTPS, in order to determine the ciphers that are supported. SSLScan is designed to be easy, lean and fast. The output includes preferred ciphers of the SSL service, the certificate and is in Text and XML formats. Features Query SSL services Supported...

cipherscan

CipherScan Cipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl sclient command line. Cipherscan is meant to ru...

cve-2026-45185-detection-script

CVE-2026-45185 Detection Scripts c SECPlayground Platform —https://www.secplayground.com These detection scripts are property of the SECPlayground Platform. Two safe detection scripts. Neither drives the closenotify-mid-BDAT trigger, so they will not crash the daemon or leave panic-log entries...

Heartbleed

Heartbleed A checker site and tool for CVE-2014-0160. Public site at https://filippo.io/Heartbleed/ Tool usage: Heartbleed -service="servicename" example.com:443 Heartbleed servicename://example.com:443 Exit codes: 0 - SAFE; 1 - VULNERABLE; 2 - ERROR. recently changed See the online FAQ for an...

CVE-2026-116200 Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap()

Snipe-IT before 8.6.3 ignores the ldapstarttls return value in Ldap::connectToLdap, allowing on-path attackers to force cleartext LDAP binds. Attackers can answer the StartTLS request with a protocol error to capture service-account credentials and end-user login passwords...

CVE-2026-116200 Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap()

Snipe-IT before 8.6.3 ignores the ldapstarttls return value in Ldap::connectToLdap, allowing on-path attackers to force cleartext LDAP binds. Attackers can answer the StartTLS request with a protocol error to capture service-account credentials and end-user login passwords...

CVE-2026-116200

The software Snipe-IT versions before 8.6.3 is vulnerable to an LDAP StartTLS Downgrade via the Ldap::connectToLdap() function. The root cause is that the application ignores the return value of ldap_start_tls(), which allows an on-path attacker to intercept the connection and force a cleartext L...

Amazon Linux 2 : 389-ds-base (ALAS-2026-4003)

The version of 389-ds-base installed on the remote host is prior to 1.3.10.2-17. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4003 advisory. A flaw was found in 389-ds-base. An unauthenticated remote attacker can send a complete LDAP operation followed by...

Important: 389-ds-base

Issue Overview: A flaw was found in 389-ds-base. An unauthenticated remote attacker can send a complete LDAP operation followed by the first bytes of an incomplete LDAPMessage on the same connection, causing the server to hand that connection to a second worker thread before the first worker's...

CLSA-2026-1792597970 389-ds-base: Fix of 2 CVEs

CVE-2026-86345: reject StartTLS when plaintext data is buffered after the request - CVE-2026-86344: fix worker pool exhaustion via partial LDAP messages...

ALPINE-CVE-2026-86411

An ftp:// transfer configured with CURLUSESSLNONE can reuse a pooled FTP control connection that a previous easy handle upgraded with STARTTLS and authenticated using a client certificate. The second handle performs neither a new TLS handshake nor a new FTP login, so the server continues to...

CVE-2026-86411

An ftp:// transfer configured with CURLUSESSLNONE can reuse a pooled FTP control connection that a previous easy handle upgraded with STARTTLS and authenticated using a client certificate. The second handle performs neither a new TLS handshake nor a new FTP login, so the server continues to...

CVE-2026-86411

An ftp:// transfer configured with CURLUSESSLNONE can reuse a pooled FTP control connection that a previous easy handle upgraded with STARTTLS and authenticated using a client certificate. The second handle performs neither a new TLS handshake nor a new FTP login, so the server continues to...

CVE-2026-86411

An "ftp://" transfer configured with "CURLUSESSLNONE" can reuse a pooled FTP control connection that a previous easy handle upgraded with "STARTTLS" and authenticated using a client certificate. The second handle performs neither a new TLS handshake nor a new FTP login, so the server continues to...