
TLS-Attacker
Java-based framework for systematic fuzzing and analysis of TLS libraries. Enables arbitrary protocol message crafting, modification, and testing of…

Java-based framework for systematic fuzzing and analysis of TLS libraries. Enables arbitrary protocol message crafting, modification, and testing of…

Multi-protocol cryptographic analyzer auditing TLS, SSL, SSH, IKE, DNSSEC, and HTTP security headers. Detects 400+ cipher suites, generates JA3/HASSH…

Curated list of web application security resources including books, tools, cheat sheets, labs, and courses for learning penetration testing and…

AES-CFB Key Generation and Management Vulnerability in Reolink Desktop Application

AES-CFB IV Generation Vulnerability in Reolink Desktop Application

Exploit for CVE-2024-5124 targeting ChuanhuChatGPT via TLS timing side-channel attack. Uses tlsfuzzer to perform character-by-character credential…

This repo describes a vulnerability affecting the QR code based pairing process of the eWeLink IoT devices (CVE-2020-12702).

Proof-of-concept exploit that recovers the site_key for OSSN 5.3 and above, exploiting CVE-2020-10560 arbitrary file read vulnerability.

RememberMe Padding Oracle Vulnerability RCE

Multithreaded Padding Oracle Attack on Oracle OAM (CVE-2018-2879)

Detects Windows and Linux systems with enabled Trusted Platform Modules (TPM) vulnerable to CVE-2017-15361. #nsacyber

Vulnerability Assessment and Auditing Framework for all the Crypto Implementations.