CVE-2026-0073

🔓 CVE-2026-0073: Android adbd Authentication Bypass Weaponized Proof of Concept for the Wireless ADB TLS Auth Bypass vulnerability. Discovered by Barghest, Weaponized PoC by devtint. 📋 Overview CVE-2026-0073 is a critical cryptographic logic failure in the Android Debug Bridge daemon adbd that...

CVE-2018-6789

CVE-2018-6789 Configuración del entorno Instalar dependencias root@kitploit: apt-get install gcc net-tools vim gdb python wget git make procps libpcre3-dev libdb-dev libxt-dev libxaw7-dev Descargar una versión antigua de exim root@kitploit: wget...

heartpatch.us

heartpatch.us En Construcción Parcheando vulnerabilidades Heartbleed de OpenSSL en servidores de toda la World Wide Web. Inspiración Heartbleed es un bug de seguridad en la librería criptográfica OpenSSL, una implementación ampliamente utilizada del protocolo Transport Layer Security TLS. Fue...

sslscan

SSLScan SSLScan queries SSL services, such as HTTPS, in order to determine the ciphers that are supported. SSLScan is designed to be easy, lean and fast. The output includes preferred ciphers of the SSL service, the certificate and is in Text and XML formats. Features Query SSL services Supported...

cve-2009-3555-test-server

¿Qué es esto? Esto es un servidor TLS que utiliza un fork integrado del stack TLS de Go que tiene la extensión de indicación de renegociación forzosamente deshabilitada, lo que activará las mitigaciones de CVE-2009-3555 en OpenSSL 3.0+. Tenga en cuenta que no es realmente vulnerable a CVE-2009-35...

sslx

sslx openssl, pero no tienes que buscar las opciones en Google. Un solo binario que maneja certificados, conexiones TLS y todo lo que normalmente necesitas tres invocaciones diferentes de openssl. Construido con Rust y rustls, no requiere OpenSSL del sistema. Instalar root@kitploit: cargo install...

game-of-kingshot-re

got-re — Ingeniería Inversa: Game of Thrones: Conquest Android Proyecto educativo. El objetivo es entender cómo se comunica un juego moderno de Unity/IL2CPP para Android, cómo funcionan sus SDK de protección nativos y cómo aplicar técnicas de análisis estático y dinámico a un APK real. Qué es est...

Ticketbleed

Ticketbleed Cet outil est conçu pour exploiter la vulnérabilité Ticketbleed CVE-2016-9244. La bibliothèque Ticketbleed dans le dossier src est une version modifiée de crypto/tls de Go. Elle comporte quelques modifications dans les fichiers handshakeclient.go, tls.go, common.go mais reste quasimen...

adbHijacker

CVE-2026-0073 — Android ADB TLS Authentication Bypass A proof-of-concept exploit and network scanner for CVE-2026-0073 , a critical zero-click, no-interaction remote code execution vulnerability in Android adbd's ADB-over-TCP authentication path. The vulnerability is a logic bug in...

CVE-2026-0073-Research

CVE-2026-0073-Research CVE-2026-0073 is an RCE with a CVSS severity score of 8.3, and here we will explain how it works. First Part : Code analysis: At first, the only thing that could possibly be interesting is learn more about the bug itself. My first source is :...

poc-CVE-2026-0073

CVE-2026-0073 PoC Wireless ADB TLS Auth Bypass This directory contains a Python proof of concept for CVE-2026-0073. The script is generated using AI-assisted code generation techniques. Summary CVE-2026-0073 is a logic issue in ADB daemon certificate verification adbdtlsverifycert in auth.cpp. Th...

CVE-2026-0073-Android-ADBD-bypass-POC

CVE-2026-0073 — Android ADBD TLS Auth Bypass EVPPKEYcmp type confusion → unauthorized ADB shell 🔥 Overview A critical authentication bypass in Android's ADB daemon adbd allows any attacker on the local network to obtain a full shell on a target device without user authorization. The vulnerability...

CryptoLyzer

CryptoLyzer is a fast, flexible, and comprehensive server cryptographic protocol TLS, SSL, SSH, IKE, DNSSEC and related setting HTTP headers, DNS records analyzer and fingerprint JA3, HASSH generator with API and interfaces...

instrumentation_callbacks

instrumentationcallbacks Instrumentation callbacks are quite a fun undocumented part of Windows. All the code in this repository is released under the MIT license. This repository uses google style C++ spacing. PRs are welcome if you find issues, bugs, or believe a specific feature should be adde...

CVE-2026-25961-SumatraPDF-3.5.0---3.5.2-RCE

SumatraPDF Insecure Update PoC CVE-2026-25961 – Remote Code Execution via Malicious Update Server Author: Mohammed Idrees Banyamer Date: February 2026 CVE: CVE-2026-25961 GHSA: GHSA-xpm2-rr5m-x96q CVSS v3.1: 7.5 High AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected versions: SumatraPDF 3.5.0 – 3.5.2...

peetch

peetch peetch est une collection d'outils visant à expérimenter différents aspects d'eBPF pour contourner les protections du protocole TLS. Actuellement, peetch comprend trois sous-commandes. La première appelée dump vise à sniffer le trafic réseau en associant des informations sur le processus...

peetch

peetch peetch is a collection of tools aimed at experimenting with different aspects of eBPF to bypass TLS protocol protections. Currently, peetch includes three subcommands. The first called dump aims to sniff network traffic by associating information about the source process with each packet...

UltraViolet

UltraViolet Self-hosted network discovery & search — your own Shodan, on your hardware. TCP/UDP scanning · 100 protocol probes · TLS/JARM fingerprints · CVE matching · full-text search · delta tracking · alerts Quick start · Features · Architecture · Documentation · Production Important. Scan onl...

CVE-2016-8610-PoC

CVE-2016-8610 PoC CVE-2016-8610 Alerta de Muerte SSL PoC Uso: python ssl-death-alert.py DOMINIO/IP PUERTO VERSIÓN-PROTOCOLOSSLv3, TLS1.0, TLS1.1, TLS1.2 NÚMERO-DE-ALERTAS1000 HILOS50 python ssl-death-alert.py test.tdl 443 TLS1.2 1000 50 Más información: http://security.360.cn/cve/CVE-2016-8610/...

openmagic

openmagic openmagic puede ayudarte en la automatización de pruebas y explotación de sistemas vulnerables a la lectura excesiva del heartbeat TLS de OpenSSL CVE-2014-0160. El módulo base incluye una versión modificada del programa "ssltest.py" de Jared Stafford y proporciona las siguientes...