peetch is a collection of tools aimed at experimenting with different aspects of eBPF to bypass TLS protocol protections. Currently, …
PR-DNSd – Passive-Recursive DNS Daemon
Passive-Recursive DNS daemon. Quickstart <div class="highlight highlight-source-shell notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="go get github.com/korc/PR-DNSd sudo setcap cap_net_bind_service,cap_sys_chroot=ep go/bin/PR-DNSd go/bin/PR-DNSd -upstream 9.9.9.9:53 …
Jarm – Active Transport Layer Security (TLS) server fingerprinting tool
Please read the initial JARM blog post for more information. JARM is an active Transport Layer Security (TLS) server fingerprinting …
Gtunnel – A Robust Tunelling Solution Written In Golang
A TCP tunneling suite built with golang and gRPC. gTunnel can manage multiple forward and reverse tunnels that are all …
Researcher: Identifying non-decryption DNS-Over-HTTPS traffic
Apparently, without even decrypting it, DNS-over-HTTPS (DoH) traffic can be detected, a security researcher has discovered. The aim of the …
Transport Layer Security (TLS) 1.3 approved by IETF With the 28th Draft
The much required Transport Layer Security version TLS 1.3 approved finally by IETF after 28 drafts. TLS 1.3 is not …
Fast and Complete SSL Scanner to Find Mis-configurations affecting TLS/SSL Severs-A Detailed Analysis
We are moving fast to the encrypted world and the usage of TLS certificates increased dramatically.Transport Layer Security is the …
New Method to Establish Covert Channel Communication by Abusing X.509 Digital Certificates
Security researchers from Fidelis identified a new method to establish a covert channel communication by abusing widely implemented X.509 public …
SSL/TLS Certificate Revocation is Broken Time for More Reliable Revocation Checking Mechanism
We are moving fast to the encrypted world and the usage of TLS certificates increased dramatically.Security researcher Scott Helme discovered …
testssl.sh – Tool to check cryptographic flaws and TLS/SSL Ciphers on any Ports
testssl.sh is a free command line tool which checks a server’s administration on any port for the help of TLS/SSL …