tlsx

功能 • 安装 • 用法 • 运行tlsx • 加入Discord 一个快速且可配置的TLS抓取工具，专注于基于TLS的数据收集与分析 。 功能 快速且完全可配置的TLS连接 多种TLS连接模式 多种TLS探针 自动TLS回退 以支持旧版TLS 预握手 TLS连接（提前终止） 可自定义的加密套件/SNI/TLS 选择 JARM/JA3 TLS指纹 TLS错误配置 ASN、CIDR、IP、HOST 和URL 输入 标准输入/输出 和TXT/JSON 输出 安装 tlsx 需要 Go 1.24 才能成功安装。要安装，只需运行以下命令或从发布页面下载预编译的二进制文件。console go...

tlsx v1.4.0

Features • Installation • Usage • Running tlsx • Join Discord A fast and configurable TLS grabber focused on TLS based data collection and analysis. Features Fast And fully configurable TLS Connection Multiple Modes for TLS Connection Multiple TLS probes Auto TLS Fallback for older TLS version Pr...

CVE-2026-5503 out-of-bounds write in TLSX_EchChangeSNI via attacker-controlled publicName

In TLSXEchChangeSNI, the ctx-extensions branch set extensions unconditionally even when TLSXFind returned NULL. This caused TLSXUseSNI to attach the attacker-controlled publicName to the shared WOLFSSLCTX when no inner SNI was configured. TLSXEchRestoreSNI then failed to clean it up because its...

CVE-2026-5503

CVE-2026-5503 affects wolfSSL’s TLSX_EchChangeSNI: the code path sets ctx->extensions unconditionally even when TLSX_Find returns NULL, causing an attacker-controlled publicName to be bound to the shared WOLFSSL_CTX when no inner SNI is configured. TLSX_EchRestoreSNI cannot clean it up because...