PySCTChecker

PySCTChecker 説明 これは、ドメインがCertificate Transparencyを適切に実装しているかを確認するための、簡易的なPythonスクリプトです。実装されている場合、サーバ側でCertificate Transparencyがどのように実装されているかを確認することができます。 サーバがCertificate Transparencyを実装する場合、少なくとも1つのSCT（サーバTLS証明書がTransparency Logに含まれていることの証明）を提供する必要があります。SCTは、証明書に埋め込まれる方法、TLS拡張として提供される方法、OCSP...

Sububy

Sububy Sububy 是一款用 Ruby 编写的一站式子域名枚举套件，它专注于准确性与质量，并允许你单独调用部分模块而无需遵循工具的执行流程，从而能够将之集成到你的工作流中。 Sububy 总共包含九个模块，其中六个用于枚举，其余执行枚举后操作。 类别| 模块| 描述 ---|---|--- 枚举| Cert| 从证书透明度日志中检索子域名。 | Brute| 使用提供的字典暴力枚举子域名。 | Dnsd| 从 DnsDumpster 获取子域名（需要 API 密钥：免费）。 | Vtotal| 从 VirusTotal 获取子域名（需要 API 密钥：免费）。 | WebArch...

columbus-server

Columbus server This repository is deprecated! ‼️ The server component is moved to https://github.com/elmasy-com/columbus. Columbus Project is an API first subdomain discovery service, blazingly fast subdomain enumeration service with advanced features. Subdomain Lookup Columbus returned 638...

columbus-server

Columbus server このリポジトリは非推奨です！ ‼️ サーバーコンポーネントは https://github.com/elmasy-com/columbus に移動されました。 Columbus Project は API ファーストのサブドメイン発見サービスであり、高度な機能を備えた驚くほど高速なサブドメイン列挙サービスです。 Subdomain Lookup Columbus は tesla.com の 638 のサブドメインを 0.231 秒で返しました。 使用方法 デフォルトでは、Columbus はサブドメインのみを JSON 文字列配列で返します。 curl...

crtsh

crtsh crt.sh の API クライアント crtsh を使用すると、HTTPS ウェブサイトに関する情報を取得できます。 例：サブドメインの検索。 このツールは Certificate Transparency ログを使用しています。 詳細については、https://crt.sh/ を確認してください。 例 サブドメイン example.com のサブドメインを検索する 組織 --query では、% をワイルドカードとして使用できます。 インストール バイナリ リリースページ からバイナリをダウンロードしてください ソース $ go get -u...

CLEANSTART-2026-ZT93395 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log

CVE-2026-56864 affects multiple packages. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...

key-transparency-auditor

key-transparency-auditor 基于 密钥透明度 规范，为 Signal 的密钥透明度服务实现的一个第三方审计器参考实现。 概述 该服务使用 Java 编写，基于 Micronaut 框架。要构建并运行单元测试，请运行以下命令： ./mvnw clean test 在根目录中执行。 主类是...

Astra Linux – Vulnerability in libpng1.6

LIBPNG is a reference library used in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to version 1.6.52, there was an out-of-bounds read vulnerability in libpng’s simplified API, allowing for reading of up to 10^12 bytes beyond the...

crypto-lab-merkle-proofs

crypto-lab-merkle-proofs What It Is This is an interactive demo of Merkle trees and Merkle inclusion proofs , built on SHA-256 via the browser's WebCrypto API. A Merkle tree hashes a set of data blocks into a single root hash that commits to all of them at once; an inclusion proof is the short li...

DockTransparent

DockTransparent iOS 14 - 16.1.2 デバイスを再起動すると変更が元に戻ります。iOS14❌ インストール TrollStore AltStore クレジット https://github.com/zhuowei MacDirtyCow exploit https://twitter.com/straighttamago DockTransparent...

CLEANSTART-2026-FZ80823 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log

CVE-2026-56864 affects multiple packages. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...

CLEANSTART-2026-QU13613 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log

CVE-2026-56864 affects multiple packages. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...

EUVD-2026-83123

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, An indexed psd with transparency metadata creates fewer stored channelbuffers than the spec.nchannels value advertised ...

CLEANSTART-2026-FS45115 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log

Multiple security vulnerabilities affect the atlantis package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...

CVE-2026-56864

A flaw was found in golang.org/x/mod/sumdb. A malicious Go checksum database GOSUMDB can serve arbitrary module content that is not recorded in the transparency log. This allows a coordinated Go proxy GOPROXY and GOSUMDB to deliver malicious module content to a client, which cannot be detected by...

CLEANSTART-2026-KO31881 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log

Multiple security vulnerabilities affect the dex package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...

CLEANSTART-2026-XV99350 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log

Multiple security vulnerabilities affect the kyverno package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...

Accountability in Certificate Transparency and Variants

Certificate Transparency CT aims to reduce the trust required in Certificate Authorities CAs within the TLS certificate ecosystem. It is supported by all major browsers. The protocol obliges all CAs to record the certificates they issue in a public log, which itself is monitored for compliance an...

CLEANSTART-2026-BY91066 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log

Multiple security vulnerabilities affect the dynatrace-operator package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...

CLEANSTART-2026-SH05010 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log

Multiple security vulnerabilities affect the opentelemetry-collector-contrib package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...