starttls-mitm

starttls-mitm è un proxy mitm che fa da proxy in modo trasparente e cattura sia il traffico in chiaro che quello TLS. Utilizza un keyfile e un file di certificato forniti dall'utente per impersonare i server remoti. L'utente deve istruire esplicitamente il dispositivo sottoposto a man-in-the-midd...

openssl

Welcome to the OpenSSL Project OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations are based on a full-strength general purpose cryptographic library, which...

sslscan

SSLScan SSLScan interroga servizi SSL, come HTTPS, per determinare i cifrari supportati. SSLScan è progettato per essere semplice, leggero e veloce. L'output include i cifrari preferiti del servizio SSL, il certificato, ed è disponibile in formato testo e XML. Funzionalità Interrogazione di servi...

striptls

striptls - auditing proxy poc implementation of STARTTLS stripping attacks A generic tcp proxy implementation and audit tool to perform protocol independent ssl/tls interception and STARTTLS stripping attacks on SMTP, POP3, IMAP, FTP, NNTP, XMPP, ACAP and IRC...

striptls

striptls - proxy di auditing implementazione proof-of-concept di attacchi di rimozione STARTTLS Un'implementazione generica di proxy TCP e strumento di audit per eseguire intercettazioni ssl/tls indipendenti dal protocollo e attacchi di rimozione STARTTLS su SMTP, POP3, IMAP, FTP, NNTP, XMPP, e...

sslyze

Nota O desenvolvimento atual do SSLyze agora ocorre em um repositório separado: https://github.com/nabla-c0d3/sslyze. Este repositório será atualizado periodicamente a partir deste novo repositório pai, mas para a versão mais atual, verifique o novo repositório. Se você clonou o repositório mas...

Heartbleed

Heartbleed Un checker sito e strumento per CVE-2014-0160. Sito pubblico su https://filippo.io/Heartbleed/ Utilizzo dello strumento: root@kitploit: Heartbleed -service="servicename" example.com:443 Heartbleed servicename://example.com:443 Codici di uscita: 0 - SICURO; 1 - VULNERABILE; 2 - ERRORE...

CVE-2020-28018

POC CVE-2020-28018 Einführung Das Qualys-Team hat 21 kritische Schwachstellen im Mailserver Exim4 entdeckt und veröffentlicht. https://blog.qualys.com/vulnerabilities-research/2021/05/04/21nails-multiple-vulnerabilities-in-exim-mail-server Im folgenden Link finden Sie detaillierte technische...

p5-ssl-tools

Raccolta di Strumenti SSL Questo repository contiene vari strumenti, pensati per eseguire il debug o analizzare problemi relativi a SSL/TLS. Analisi dello stato di TLS analyze-ssl.pl verifica il supporto per varie versioni di SSL/TLS verifica quali cifrari sono supportati verifica il certificato...

EUVD-2026-63376

aiosmtplib: STARTTLS response injection...

GHSA-VXJ7-4XRP-5VR4 aiosmtplib: STARTTLS response injection

Impact When a connection is upgraded with STARTTLS, aiosmtplib reads the server's 220 go-ahead reply and immediately performs the TLS handshake without discarding any data still sitting in the receive buffer. Bytes the protocol read off the plaintext socket before the handshake survive across the...

cve-2026-45185-detection-script

CVE-2026-45185 Erkennungsskripte c SECPlayground Platform —https://www.secplayground.com Diese Erkennungsskripte sind Eigentum der SECPlayground Platform. Zwei sichere Erkennungsskripte. Keines davon löst den closenotify-mid-BDAT-Trigger aus, sodass sie den Daemon nicht abstürzen lassen oder...

ldapserver

Dieses Paket ist noch in Arbeit. ldapserver ist eine Hilfsbibliothek zum Erstellen von Serversoftware, die das LDAP-Protokoll beherrscht. Das kann eine alternative Implementierung von LDAP, ein benutzerdefinierter LDAP-Proxy oder sogar ein völlig anderes Backend sein, das seine API als LDAP-Serve...

cipherscan

CipherScan Cipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl sclient command line. Cipherscan is meant to ru...

Linux Distros Unpatched Vulnerability : CVE-2026-55558

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.2, SMTPProtocol.starttls in src/aiosmtplib/protocol.py consumes the server's 220...

CVE-2026-55558

aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.2, SMTPProtocol.starttls in src/aiosmtplib/protocol.py consumes the server's 220 response and starts the TLS handshake without clearing SMTPProtocol.buffer. An active network attacker can place attacker-chosen SMTP...

DEBIAN-CVE-2026-55558

aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.2, SMTPProtocol.starttls in src/aiosmtplib/protocol.py consumes the server's 220 response and starts the TLS handshake without clearing SMTPProtocol.buffer. An active network attacker can place attacker-chosen SMTP...

CVE-2026-55558 aiosmtplib: STARTTLS response injection

aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.2, SMTPProtocol.starttls in src/aiosmtplib/protocol.py consumes the server's 220 response and starts the TLS handshake without clearing SMTPProtocol.buffer. An active network attacker can place attacker-chosen SMTP...

CVE-2026-55558 aiosmtplib: STARTTLS response injection

aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.2, SMTPProtocol.starttls in src/aiosmtplib/protocol.py consumes the server's 220 response and starts the TLS handshake without clearing SMTPProtocol.buffer. An active network attacker can place attacker-chosen SMTP...

CVE-2026-55558

CVE-2026-55558 affects aiosmtplib , an asynchronous SMTP client for Python's asyncio, in versions prior to 5.1.2 . The vulnerability resides in SMTPProtocol.start_tls (src/aiosmtplib/protocol.py), which consumes the server's 220 response and initiates the TLS handshake without clearing SMTPProtoc...