sslcaudit

简介 sslcaudit 项目的目标是开发一个工具，用于自动化测试 SSL/TLS 客户端对 MITM（中间人）攻击的抵抗能力。它可能有助于测试胖客户端、移动应用、设备，以及几乎所有通过 TCP 上的 SSL/TLS 进行通信的内容。 安装 目前还没有正式的安装流程（Debian 软件包和基于 distutils 的 Python 安装程序即将推出）。现在只需从 GIT 仓库获取发布版本： $ git clone -b release10 https://github.com/grwl/sslcaudit.git Cloning into sslcaudit... 然后在顶层目录中找到...

PT-2026-109164

A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni callback assigns a different context to SSLSocket.context the documented way to select a certificate per server name and nothing else keeps the original ssl.SSLContext alive. Typical cases are...

CVE-2026-0073-Android-ADBD-bypass-POC

CVE-2026-0073 — Android ADBD TLS 认证绕过 EVPPKEYcmp 类型混淆 → 未授权 ADB shell 🔥 概述 Android ADB 守护进程（adbd）中存在一个严重认证绕过 漏洞，允许本地网络上的任何攻击者在未经用户授权 的情况下获取目标设备的完整 shell 。 该漏洞存在于 daemon/auth.cpp 中的 adbdtlsverifycert 函数内，其中 EVPPKEYcmp 被当作布尔值使用。当存储的密钥为 RSA 且提交的 TLS 客户端证书携带非 RSA 密钥 （EC P-256 或 Ed25519）时，EVPPKEYcmp 返...

CVE-2026-87425

An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate Authority CA certificate to an unauthenticated management interface, the attacker can cause the system to trust unauthorized certificates,...

CVE-2026-87425

An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0 . By providing an unauthorized Certificate Authority (CA) certificate to an unauthenticated management interface, an attacker can force the system to trust illegitimate certificates. Thi...

CVE-2026-87425

An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate Authority CA certificate to an unauthenticated management interface, the attacker can cause the system to trust unauthorized certificates,...

EUVD-2026-94796

An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate Authority CA certificate to an unauthenticated management interface, the attacker can cause the system to trust unauthorized certificates,...

PT-2026-107861

An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate Authority CA certificate to an unauthenticated management interface, the attacker can cause the system to trust unauthorized certificates,...

Cisco ASA Buffer Copy without Checking Size of Input (CVE-2022-20927)

A vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper memory...

CVE-2026-19445

A flaw was found in Python. A remote, unauthenticated TLS client can cause a use-after-free in a server that uses SSLContext.snicallback to assign a different SSLSocket.context when selecting a certificate per server name, if nothing else keeps the original SSLContext alive. This can crash the...

RustTLSX

RustTLSX 🦀 . 一个面向 Rust 的高级隐身 HTTP 客户端。 专为注重隐私的开发者打造，让你能够完全掌控自己的网络指纹。 看起来像浏览器。行为像浏览器。用 Rust 编写。 致谢与基础 基于bogdanfinn/tls-client 构建 —— 这是业界领先的 TLS 指纹库，受到全球安全专业人士的信赖。我们通过 FFI 绑定使用 bogdanfinn 久经考验的共享库（.dll/.so/.dylib），原因如下： 多年研究 ：数千小时打磨浏览器 TLS 行为的复现 久经考验 ：被全球安全公司和隐私工具用于生产环境 持续更新 ：定期更新以匹配不断演进的浏览器指纹 性能优化...

CVE-2022-21449

CVE-2022-21449 用于检测针对 TLS 客户端的 CVE-2022-21449 利用尝试的 Zeek 脚本。仅适用于 TLS 1.2 及以下版本。 安装 zkg install https://github.com/thack1/CVE-2022-21449 运行 对提供的 pcap 文件运行： $ zeek -Cr pcaps/CVE-2022-21449.pcap CVE-2022-21449 示例通知 separator \x09 setseparator , emptyfield empty unsetfield - path notice open...

Unauthenticated Certificate Injection on Brocade ASCG before 3.5.0 (CVE-2026-87425)

An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate Authority CA certificate to an unauthenticated management interface, the attacker can cause the system to trust unauthorized certificates,...

BIT-RABBITMQ-2026-67231 RabbitMQ: Trust-store whitelist by Issuer+Serial only

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verifyfun that overrides badcert, unknownca / badcert, selfsignedpeer when the presented cert "matches" a whitelisted one. The match key is extractissuerid/...

PT-2026-105179

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, The trust-store plugin installs a verify fun that overrides bad cert, unknown ca / bad cert, selfsigned peer when the presented cert "matches" a whitelisted one. The match key is extract...

DEBIAN-CVE-2026-19445

A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a different context to SSLSocket.context the documented way to select a certificate per server name and nothing else keeps the original ssl.SSLContext alive. Typical cases are...

CVE-2026-19445 Use-after-free of a server-side SSLContext when sni_callback switches contexts

A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a different context to SSLSocket.context the documented way to select a certificate per server name and nothing else keeps the original ssl.SSLContext alive. Typical cases are...

CVE-2026-19445

A remote, unauthenticated TLS client can trigger a server crash or a use-after-free (calling through a freed pointer) vulnerability. This occurs when the sni_callback assigns a different context to SSLSocket.context —the standard method for selecting certificates per server name—without any other...

CVE-2026-19445

A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a different context to SSLSocket.context the documented way to select a certificate per server name and nothing else keeps the original ssl.SSLContext alive. Typical cases are...

PT-2026-105768

A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni callback assigns a different context to SSLSocket.context the documented way to select a certificate per server name and nothing else keeps the original ssl.SSLContext alive. Typical cases are...