CVE-2009-3555

Deep dive in DataPower TLS configuration

DataPower TLS Configuration for certificates validation with a SSL Client Profile This small article is a go at explaining some of the possible configurations and the benefits of each configuration The goal is to demonstrate the behavior of the various configurations In fact, we are concentrating on the following parameters of a SSL Client Profile in the red boxes below: Thi

eGov España - API abierto de acceso a datos púbicos

eGov España - API de acceso a datos púbicos ¿Te entra la risa floja cuando oyes hablar de transformación digital? ¿Ya no crees en promesas de datos abiertos? ¿Crees que está feo dilapidar dinero público en "portalitos"? Estás en el sitio adecuado El plan es construir APIs decentes que consulten fuentes d

Make Faraday speak Japanese

hanase Speak Japanese! / 日本語で話せ！ A simple tool to make Faraday Status Report (Vulnerabilities name, description, severiry, references, etc) in Japanese The trick is actually on getting CVE numbers of each vulnerability, in Japan we have a public CVE DB (in Japanese of course) where we can lookup for CVE's, called JVN iPedia Also, will add the JVN CVE's f

Renew your let's encrypt certificates monthly, using lighttpd as webserver.

Let's Encrypt renewal for Lighttpd This script automatize the renewal process for certificates issued by Let's Encrypt Setup Let's Encrypt on Lighttpd (for the first time) Long story short, run as root: certbot certonly --manual Follow the steps required for every domain (and subdomain) and then for every domain do: cd /etc

Pulse Secure VPN mitm Research - CVE-2020-8241, CVE-2020-8239

pulse-secure-vpn-mitm-research Pulse Secure mitm research Release date Joint release date with vendor: 26 Oct 2020 Author David Kierznowski, @withdk Credits Sahil Mahajan from the Pulse Secure PSIRT Team for support throughout the disclosure process Alyssa Herrera, Justin Wagner, and Mimir, and Rich Warren for their write-up, "Red Teamer’s Guide to Pulse Secure SSL

Using the iGrill as a control unit for a DIY smoker

Starting with Raspberry Pi Stretch 🔴 Note: You are 100% responsible for ensuring safe food practices are followed 🔴 Check and modify temperatures as appropriate Table of Contents Problem Statement Design Equipment Requirements Installation Software Setup Using iGrill Mini Grill Setup Running Lighttpd Setup Project Notes iGrill Smoker Board Rev *A *A Board *A N

A TLS server using a vendored fork of the Go TLS stack that has renegotation indication extension forcibly disabled.

What is this? This is a TLS server using a vendored fork of the Go TLS stack that has renegotation indication extension forcibly disabled, which will trigger CVE-2009-3555 mitigations in OpenSSL 30+ Note that it isn't truly vulnerable to CVE-2009-3555 because the Go TLS stack doesn't allow renegotiations at all The function of this program is to act as a test serve

CVE assignment documentation

CVE-HOWTO CVE assignment documentation - this document replaces peopleredhatcom/kseifrie/CVE-OpenSource-Request-HOWTOhtml Please note that this document pertains to CVE's for issues found in Open Source programs, not closed source programs, if you need a CVE for a closed source program I suggest you go to MITRE directly Copyright: Red Hat 2016 Author: Kurt Seifr

Pulse Secure VPN mitm Research - CVE-2020-8241, CVE-2020-8239

pulse-secure-vpn-mitm-research Pulse Secure mitm research Release date Joint release date with vendor: 26 Oct 2020 Author David Kierznowski, @withdk Credits Sahil Mahajan from the Pulse Secure PSIRT Team for support throughout the disclosure process Alyssa Herrera, Justin Wagner, and Mimir, and Rich Warren for their write-up, "Red Teamer’s Guide to Pulse Secure SSL

Tools for Web Learning of Tsinghua University.

Thu Learn 2018 Tools for Web Learning of Tsinghua University 20231128 Fix UNSAFE_LEGACY_RENEGOTIATION_DISABLED error It has been confirmed on some Linux distros that the depreciation of legacy unsafe renegotiation in OpenSSL causes UNSAFE_LEGACY_RENEGOTIATION_DISABLED error By refering to stackoverflowcom/questions/71603314/ssl-error-unsafe-legacy-renegotiation-di