Heartbleed

Heartbleed A checker site and tool for CVE-2014-0160. Public site at https://filippo.io/Heartbleed/ Tool usage: Heartbleed -service="servicename" example.com:443 Heartbleed servicename://example.com:443 Exit codes: 0 - SAFE; 1 - VULNERABLE; 2 - ERROR. recently changed See the online FAQ for an...

openssl

Welcome to the OpenSSL Project !openssl logowww.openssl.org !github actions ci badgegithub actions ci OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations ar...

striptls

striptls - auditing proxy poc implementation of STARTTLS stripping attacks A generic tcp proxy implementation and audit tool to perform protocol independent ssl/tls interception and STARTTLS stripping attacks on SMTP, POP3, IMAP, FTP, NNTP, XMPP, ACAP and IRC. Python2! 🏆 Trophies CVE-2016-0772 -...

cipherscan

CipherScan Cipherscan tests the ordering of the SSL/TLS ciphers on a given target, for all major versions of SSL and TLS. It also extracts some certificates informations, TLS options, OCSP stapling and more. Cipherscan is a wrapper above the openssl sclient command line. Cipherscan is meant to ru...

starttls-mitm

starttls-mitm is a mitm proxy that will transparently proxy and dump both plaintext and TLS traffic. It uses a user-provided keyfile and certificate file to impersonate remote servers. The user must explicitly instruct the device being man-in-the-middled to trust this certificate authority -- so...

sslyze

Note Current development of SSLyze now takes place on a separate repository: https://github.com/nabla-c0d3/sslyze. This repository will periodically be updated from this new parent repository, but for the most current version, please check the new repo. If you cloned the repository but wish to...

ldapserver

This package is a work in progress. ldapserver is a helper library for building server software capable of speaking the LDAP protocol. This could be an alternate implementation of LDAP, a custom LDAP proxy or even a completely different backend capable of "masquerading" its API as a LDAP Server...

p5-ssl-tools

Collection of SSL Tools This repository contains various tools, which are intended to debug or analyze problems related to SSL/TLS. Analyzing state of TLS analyze-ssl.pl check support for various SSL/TLS version check which ciphers are support verfiy certificate check OCSP state check if SNI is...

sslscan

SSLScan SSLScan queries SSL services, such as HTTPS, in order to determine the ciphers that are supported. SSLScan is designed to be easy, lean and fast. The output includes preferred ciphers of the SSL service, the certificate and is in Text and XML formats. Features Query SSL services Supported...

cve-2026-45185-detection-script

CVE-2026-45185 Detection Scripts c SECPlayground Platform —https://www.secplayground.com These detection scripts are property of the SECPlayground Platform. Two safe detection scripts. Neither drives the closenotify-mid-BDAT trigger, so they will not crash the daemon or leave panic-log entries...

CVE-2026-116200

The software Snipe-IT versions before 8.6.3 is vulnerable to an LDAP StartTLS Downgrade via the Ldap::connectToLdap() function. The root cause is that the application ignores the return value of ldap_start_tls(), which allows an on-path attacker to intercept the connection and force a cleartext L...

CLSA-2026-1792597970 389-ds-base: Fix of 2 CVEs

CVE-2026-86345: reject StartTLS when plaintext data is buffered after the request - CVE-2026-86344: fix worker pool exhaustion via partial LDAP messages...

CVE-2026-86411

An ftp:// transfer configured with CURLUSESSLNONE can reuse a pooled FTP control connection that a previous easy handle upgraded with STARTTLS and authenticated using a client certificate. The second handle performs neither a new TLS handshake nor a new FTP login, so the server continues to...

CVE-2026-86411

An "ftp://" transfer configured with "CURLUSESSLNONE" can reuse a pooled FTP control connection that a previous easy handle upgraded with "STARTTLS" and authenticated using a client certificate. The second handle performs neither a new TLS handshake nor a new FTP login, so the server continues to...

CVE-2026-86411 FTP connection reuse inherits client-certificate

An ftp:// transfer configured with CURLUSESSLNONE can reuse a pooled FTP control connection that a previous easy handle upgraded with STARTTLS and authenticated using a client certificate. The second handle performs neither a new TLS handshake nor a new FTP login, so the server continues to...

EUVD-2026-105276

An ftp:// transfer configured with CURLUSESSLNONE can reuse a pooled FTP control connection that a previous easy handle upgraded with STARTTLS and authenticated using a client certificate. The second handle performs neither a new TLS handshake nor a new FTP login, so the server continues to...

CVE-2026-86411

An ftp:// transfer configured with CURLUSESSLNONE can reuse a pooled FTP control connection that a previous easy handle upgraded with STARTTLS and authenticated using a client certificate. The second handle performs neither a new TLS handshake nor a new FTP login, so the server continues to...

CVE-2026-86411

A flaw in curl allows unauthorized access due to improper session reuse. When an unencrypted FTP transfer reuses a pooled control connection that was previously authenticated with a client certificate and upgraded via STARTTLS , curl fails to perform a new TLS handshake or authentication. Consequ...

CVE-2026-86411

An ftp:// transfer configured with CURLUSESSLNONE can reuse a pooled FTP control connection that a previous easy handle upgraded with STARTTLS and authenticated using a client certificate. The second handle performs neither a new TLS handshake nor a new FTP login, so the server continues to...

SUSE CVE-2026-86411

An ftp:// transfer configured with CURLUSESSLNONE can reuse a pooled FTP control connection that a previous easy handle upgraded with STARTTLS and authenticated using a client certificate. The second handle performs neither a new TLS handshake nor a new FTP login, so the server continues to...