testssl.sh

Intro testssl.sh is a free command line tool which checks a server's service on any port for the support of TLS/SSL ciphers, protocols as well as some cryptographic flaws. Key features Clear output: yo...

httpgrep

Description A fast, asynchronous Python tool that scans HTTPS servers and greps for strings or regex patterns in HTTP response bodies and headers. It takes single hosts, URLs, CIDR ranges, IP ranges or files; scans multiple ports per target single, comma-lists or ranges, auto-detecting TLS vs pla...

sublert

/ / / / / / / / \ / / / / / / / / / / / // / // / / / / / / //,/.//// / Author: Yassine Aboukir Version: 1.4.7 What's this about? Sublert is a security and reconnaissance tool that was written in Python to leverage certificate transparency for the sole purpose of monitoring new subdomains...

sublert

/ / / / / / / / \ / / / / / / / / / / / // / // / / / / / / //,/.//// / 작성자: Yassine Aboukir 버전: 1.4.7 이게 뭐죠? Sublert는 Python으로 작성된 보안 및 정찰 도구로, 인증서 투명성Certificate Transparency을 활용하여 특정 조직에서 배포하고 TLS/SSL 인증서를 발급한 새로운 서브도메인을 모니터링하는 목적으로 사용됩니다. 이 도구는 정기적으로이상적으로는 매일 고정된 시간, 날짜 또는 간격으로 실행되도록...

detect_bluekeep.py

detectbluekeep.py TLS/SSL 지원이 포함된 BlueKeep 취약점CVE-2019-0708 탐지용 Python 스크립트 @zerosum0x0가 작성한 Metasploit 모듈에서 파생된 작업 https://github.com/zerosum0x0/CVE-2019-0708 RC4는 https://github.com/DavidBuchanan314/rc4에서 가져왔습니다. 사전 요구 사항 detectbluekeep.py는 pyasn1 및 cryptography Python 모듈이 필요합니다. 다음 중 하나의 방법으로...

[SECURITY] Fedora 44 Update: stunnel-5.80-1.fc44

Stunnel is a socket wrapper which can provide TLS/SSL Transport Layer Security/Secure Sockets Layer support to ordinary applications. For example, it can be used in conjunction with imapd to create a TLS secure IMAP server...

CVE-2026-56582: Use of a Broken or Risky Cryptographic Algorithm

HCL MyCloud was affected by the SSL/TLS LUCKY13 Vulnerability. An attacker may exploit this vulnerability to decrypt sensitive information through a TLS/SSL padding oracle attack...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the SslStream implementation. An attacker can bypass authorization checks during TLS/SSL communication by exploiting flaws in the processing of secure connections. This may allow access to protected...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the SslStream implementation. An attacker can bypass authorization checks during TLS/SSL communication by exploiting flaws in the processing of secure connections. This may allow access to protected...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the SslStream implementation. An attacker can bypass authorization checks during TLS/SSL communication by exploiting flaws in the processing of secure connections. This may allow access to protected...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the SslStream implementation. An attacker can bypass authorization checks during TLS/SSL communication by exploiting flaws in the processing of secure connections. This may allow access to protected...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the SslStream implementation. An attacker can bypass authorization checks during TLS/SSL communication by exploiting flaws in the processing of secure connections. This may allow access to protected...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the SslStream implementation. An attacker can bypass authorization checks during TLS/SSL communication by exploiting flaws in the processing of secure connections. This may allow access to protected...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the SslStream implementation. An attacker can bypass authorization checks during TLS/SSL communication by exploiting flaws in the processing of secure connections. This may allow access to protected...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the SslStream implementation. An attacker can bypass authorization checks during TLS/SSL communication by exploiting flaws in the processing of secure connections. This may allow access to protected...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the SslStream implementation. An attacker can bypass authorization checks during TLS/SSL communication by exploiting flaws in the processing of secure connections. This may allow access to protected...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the SslStream implementation. An attacker can bypass authorization checks during TLS/SSL communication by exploiting flaws in the processing of secure connections. This may allow access to protected...

RLSA-2026:26275 Important: openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: Use After Free with SSLfreebuffers CVE-2024-4741 openssl: Heap Use-After-Free in OpenSSL...

[SECURITY] [DSA 6281-1] gnutls28 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6281-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 19, 2026 https://www.debian.org/security/faq -...

CVE-2025-70058: Improper Certificate Validation

An issue pertaining to CWE-295: Improper Certificate Validation was discovered in YMFE yapi v1.12.0. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in the HTTPS agent configuration for Axios requests...