Tools

trimstray/mkchain

Open source tool to help you build a valid SSL certificate chain.

jhaddix/awsscrape

A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.

dimastopel/certdepot

Create your self-signed SSL certificate instantly and for free

forceea001/cve-2024-40898-ssl-bypass-detection

This Python script is a Proof-of-Concept (PoC) scanner for detecting the vulnerability CVE-2024-40898, which affects Apache HTTP Server’s SSL…

joda32/certcrunchy

Just a silly recon tool that uses data from SSL Certificates to find potential host names

vichhka-git/universal-flutter-ssl-pinning

Automated SSL pinning bypass for any Flutter & Shorebird version — PyGhidra static analysis auto-discovers BoringSSL and generates ready-to-run Frida…

projectdiscovery/proxify

A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic on the go.

jas502n/cve-2019-19781

Citrix ADC Remote Code Execution

bytereaper77/cve-2025-36041

Exploit (C) of the CVE-2025-36041 vulnerability in IBM MQ

anilpatel199n/cve-2024-40898

This Python script checks for the presence of CVE-2024-40898, a critical vulnerability in Apache HTTP Server that may allow SSL/TLS certificate…

impact-i/reflutter

Patches Flutter engine libraries to enable runtime reverse engineering, traffic interception, and SSL pinning bypass for Android and iOS apps without…

owasp/o-saft

O-Saft - OWASP SSL advanced forensic tool

hakky54/certificate-ripper

🔐 A CLI tool to extract server certificates

0xuhaw/cve-2022-0778

Proof of concept for CVE-2022-0778 in P12 and PEM format

coroner/cryptolyzer

Multi-protocol cryptographic analyzer auditing TLS, SSL, SSH, IKE, DNSSEC, and HTTP security headers. Detects 400+ cipher suites, generates JA3/HASSH…

glincker/sslx

A fast, modern alternative to OpenSSL's CLI - inspect, grade, and manage certificates from the terminal

gojue/ecapture

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.