0day.today - наибольшая база данных эксплоитов в мире.
![](/img/logo_green.jpg)
Мы используем один основной домен 0day.today
Если Вы желаете приобрести эксплоит или заплатить за услуги - Вам необходимо приобрести Золото (Gold). Мы не хотим чтобы Вы использовали наш сайт как инструмент для взломов, поэтому любые действия, которые могут незаконно влиять на других пользователей или на сайты, к которым у Вас нет прав доступа будут запрещены и Ваш профиль со всей вложенной информацией будет уничтожен.
Администрация сайта использует официальные контакты. Опасайтесь обманщиков!
![We DO NOT use Telegram or any messengers / social networks!](/img/no_telegram_big.png)
Please, beware of scammers!
- Прочитайте [ соглашение ]
- Прочитайте [ Отправить ] правила
- Посетите страницу [ faq ] page
- [ Зарегистрируйте ] профиль
- Получите [ Gold ]
- Если Вы хотите [ продать ]
- Если Вы хотите [ купить ]
- Если Вы потеряли [ Счет ]
- Любые вопросы [ [email protected] ]
- Страница авторизации
- Страница регистрации
- Страница восстановления
- Страница FAQ
- Страница контактов
- Правила публикации
- Страница с соглашением
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Вы можете связаться с нами по:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Search results for exploits by request: OpenSSL
[ remote exploits ]
Remote exploits and vulnerabilities category
A "remote exploit" works over a network and exploits the security vulnerability without any prior access to the vulnerable system.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR
21 763
![](/img/risk/critlow_4.gif)
Security Risk Critical
D
Download
C
CVE-2002-0082
![](/img/check.png)
Verified by
free
You can open this exploit for free
Brian Peters
Эксплоиты:
3
BusinessLevel:
3
10 010
![](/img/risk/critlow_3.gif)
Security Risk High
D
Download
C
CVE-2015-1793
![](/img/check.png)
Verified by
free
You can open this exploit for free
Google Security Research
Эксплоиты:
1019
BusinessLevel:
56
7 650
![](/img/risk/critlow_3.gif)
Security Risk High
D
Download
C
CVE-2014-0160
![](/img/check.png)
Verified by
free
You can open this exploit for free
Ayman Sagy
Эксплоиты:
4
BusinessLevel:
6
OpenSSL Heartbeat (Heartbleed) Information Leak Exploit
Комметариев:
0
9 758
![](/img/risk/critlow_3.gif)
Security Risk High
D
Download
C
CVE-2014-0160
![](/img/check.png)
Verified by
free
You can open this exploit for free
metasploit
Эксплоиты:
1633
BusinessLevel:
92
OpenSSL 1.0.1f TLS Heartbeat Extension - Memory Disclosure (Multiple SSL/TLS versions)
Комметариев:
0
6 996
![](/img/risk/critlow_4.gif)
Security Risk Critical
D
Download
C
CVE-2014-0160
![](/img/check.png)
Verified by
free
You can open this exploit for free
Fitzl Csaba
Эксплоиты:
5
BusinessLevel:
5
OpenSSL TLS Heartbeat Extension - Memory Disclosure
Комметариев:
0
6 974
![](/img/risk/critlow_3.gif)
Security Risk High
D
Download
C
CVE-2014-0160
![](/img/check.png)
Verified by
free
You can open this exploit for free
Jared Stafford
Эксплоиты:
2
BusinessLevel:
5
OpenSSL 1.0.1 ASN1 BIO Vulnerability
Комметариев:
0
5 945
![](/img/risk/critlow_3.gif)
Security Risk High
D
Download
-
![](/img/warning.png)
Not verified yet
free
You can open this exploit for free
Tavis Ormandy
Эксплоиты:
35
BusinessLevel:
11
OpenSSL 1.0.1 Memory Corruption
Комметариев:
0
6 491
![](/img/risk/critlow_4.gif)
Security Risk Critical
D
Download
-
![](/img/warning.png)
Not verified yet
free
You can open this exploit for free
Tavis Ormandy
Эксплоиты:
35
BusinessLevel:
11
unsorted
5 670
![](/img/risk/critlow_0.gif)
Security Risk Unsored
D
Download
-
![](/img/warning.png)
Not verified yet
free
You can open this exploit for free
Bodo Moeller
Эксплоиты:
1
BusinessLevel:
7
6 613
![](/img/risk/critlow_0.gif)
Security Risk Unsored
D
Download
-
![](/img/warning.png)
Not verified yet
free
You can open this exploit for free
WarCat team
Эксплоиты:
1
BusinessLevel:
8
5 546
![](/img/risk/critlow_0.gif)
Security Risk Unsored
D
Download
-
![](/img/warning.png)
Not verified yet
free
You can open this exploit for free
L4teral
Эксплоиты:
2
BusinessLevel:
8
Debian OpenSSL Predictable PRNG Bruteforce SSH Exploit
Комметариев:
0
4 980
![](/img/risk/critlow_0.gif)
Security Risk Unsored
D
Download
-
![](/img/warning.png)
Not verified yet
free
You can open this exploit for free
Markus Mueller
Эксплоиты:
1
BusinessLevel:
8
6 251
![](/img/risk/critlow_2.gif)
Security Risk Medium
D
Download
-
![](/img/warning.png)
Not verified yet
free
You can open this exploit for free
vade79
Эксплоиты:
31
BusinessLevel:
12
6 730
![](/img/risk/critlow_0.gif)
Security Risk Unsored
D
Download
-
![](/img/warning.png)
Not verified yet
free
You can open this exploit for free
spabam
Эксплоиты:
2
BusinessLevel:
10
[ web applications ]
Webapplication (webapps) exploits and vulnerabilities category
This category is full with vulnerabilities, which was found in web projects and web applications.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR
OpenSSL Alternative Chains Certificate Forgery Vulnerability
Комметариев:
0
4 009
![](/img/risk/critlow_1.gif)
Security Risk Low
D
Download
C
CVE-2015-1793
![](/img/check.png)
Verified by
free
You can open this exploit for free
Ramon de C Valle
Эксплоиты:
2
BusinessLevel:
4
[ dos / poc ]
DOS exploits and vulnerabilities category
PoC DoS (denial of service exploit) it exploits remote steps to check the resistance on the affected server or software denial of service vulnerability. The purpose of these attacks is to check the server or the software for resistance.
PoC (Proof Of Concept exploit) An attack against a computer or network that is performed only to prove that it can be done. It generally does not cause any harm, but shows how a hacker can take advantage of a vulnerability in the software or possibly the hardware.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR
OpenSSL 1.1.0 - Remote Client Denial of Service Exploit
Комметариев:
0
5 210
![](/img/risk/critlow_3.gif)
Security Risk High
D
Download
C
CVE-2017-3730
![](/img/check.png)
Verified by
free
You can open this exploit for free
Guido Vranken
Эксплоиты:
2
BusinessLevel:
4
OpenSSL 1.1.0a/1.1.0b - Denial of Service Exploit
Комметариев:
0
4 454
![](/img/risk/critlow_2.gif)
Security Risk Medium
D
Download
C
CVE-2016-7054
![](/img/check.png)
Verified by
free
You can open this exploit for free
Silverfox
Эксплоиты:
1
BusinessLevel:
4
OpenSSL OCSP Status Request Extension Unbounded Memory Growth Vulnerability
Вверх:
0
Вниз:
0
Комметариев:
0
12 001
![](/img/risk/critlow_3.gif)
Security Risk High
D
Download
C
CVE-2016-6304
![](/img/check.png)
Verified by
![](/img/btc.png)
0.001
Open this exploit for 0.001 BTC
Open this exploit for 70 Gold
teneciousD
Эксплоиты:
1
BusinessLevel:
4
OpenSSL - Padding Oracle in AES-NI CBC MAC Check
Комметариев:
0
3 605
![](/img/risk/critlow_2.gif)
Security Risk Medium
D
Download
C
CVE-2016-2107
![](/img/check.png)
Verified by
free
You can open this exploit for free
Juraj Somorovsky
Эксплоиты:
1
BusinessLevel:
4
OpenSSL DTLS Fragment Buffer Overflow DoS Exploit
Комметариев:
0
11 597
![](/img/risk/critlow_3.gif)
Security Risk High
D
Download
-
![](/img/check.png)
Verified by
free
You can open this exploit for free
metasploit
Эксплоиты:
1633
BusinessLevel:
92
PHP openssl_x509_parse() Memory Corruption Vulnerability
Комметариев:
0
8 256
![](/img/risk/critlow_4.gif)
Security Risk Critical
D
Download
C
CVE-2013-6420
![](/img/warning.png)
Not verified yet
free
You can open this exploit for free
Stefan Esser
Эксплоиты:
31
BusinessLevel:
11
PHP openssl_x509_parse() Memory Corruption Vulnerability
Комметариев:
0
6 390
![](/img/risk/critlow_2.gif)
Security Risk Medium
D
Download
C
CVE-2013-6420
![](/img/check.png)
Verified by
free
You can open this exploit for free
Stefan Esser
Эксплоиты:
31
BusinessLevel:
11
PHP 6.0 openssl_verify() Local Buffer Overflow PoC
Комметариев:
0
5 565
![](/img/risk/critlow_3.gif)
Security Risk High
D
Download
-
![](/img/warning.png)
Not verified yet
free
You can open this exploit for free
Yakir Wizman
Эксплоиты:
78
BusinessLevel:
12
OpenSSL 1.0.1 Buffer Overflow
Комметариев:
0
6 125
![](/img/risk/critlow_3.gif)
Security Risk High
D
Download
-
![](/img/warning.png)
Not verified yet
free
You can open this exploit for free
Vincent Buccigrossi
Эксплоиты:
1
BusinessLevel:
6
OpenSSL ASN1 BIO Memory Corruption Vulnerability
Комметариев:
0
5 423
![](/img/risk/critlow_4.gif)
Security Risk Critical
D
Download
-
![](/img/warning.png)
Not verified yet
free
You can open this exploit for free
Tavis Ormandy
Эксплоиты:
35
BusinessLevel:
11
OpenSSL remote Denial of Service
Комметариев:
0
5 599
![](/img/risk/critlow_0.gif)
Security Risk Unsored
D
Download
-
![](/img/warning.png)
Not verified yet
free
You can open this exploit for free
n/a
Эксплоиты:
233
BusinessLevel:
22
OpenSSL < 0.9.8i DTLS ChangeCipherSpec Remote DoS Exploit
Комметариев:
0
4 911
![](/img/risk/critlow_0.gif)
Security Risk Unsored
D
Download
-
![](/img/warning.png)
Not verified yet
free
You can open this exploit for free
Jon Oberheide
Эксплоиты:
22
BusinessLevel:
9
4 771
![](/img/risk/critlow_0.gif)
Security Risk Unsored
D
Download
-
![](/img/warning.png)
Not verified yet
free
You can open this exploit for free
Jon Oberheide
Эксплоиты:
22
BusinessLevel:
9
OpenSSL < 0.9.7l / 0.9.8d SSLv2 Client Crash Exploit
Комметариев:
0
4 548
![](/img/risk/critlow_0.gif)
Security Risk Unsored
D
Download
-
![](/img/warning.png)
Not verified yet
free
You can open this exploit for free
Noam Rathaus
Эксплоиты:
7
BusinessLevel:
10
unsorted
4 440
![](/img/risk/critlow_0.gif)
Security Risk Unsored
D
Download
-
![](/img/warning.png)
Not verified yet
free
You can open this exploit for free
Bram Matthys
Эксплоиты:
1
BusinessLevel:
10
[ shellcode ]
Shellcode category
In computer security, a shellcode is a small piece of code used as the payload in the exploitation of a software vulnerability. It is called "shellcode" because it typically starts a command shell from which the attacker can control the compromised machine, but any piece of code that performs a similar task can be called shellcode. Because the function of a payload is not limited to merely spawning a shell, some have suggested that the name shellcode is insufficient. Shellcode is commonly written in machine code.
Classification:
There are several methods of classifying exploits. The most common is by how the exploit contacts the vulnerable software. A remote exploit works over a network and exploits the security vulnerability without any prior access to the vulnerable system. A local exploit requires prior access to the vulnerable system and usually increases the privileges of the person running the exploit past those granted by the system administrator. Exploits against client applications also exist, usually consisting of modified servers that send an exploit if accessed with a client application. Exploits against client applications may also require some interaction with the user and thus may be used in combination with the social engineering method. Another classification is by the action against the vulnerable system; unauthorized data access, arbitrary code execution, and denial of service are examples. Many exploits are designed to provide superuser-level access to a computer system. However, it is also possible to use several exploits, first to gain low-level access, then to escalate privileges repeatedly until one reaches root. Normally a single exploit can only take advantage of a specific software vulnerability. Often, when an exploit is published, the vulnerability is fixed through a patch and the exploit becomes obsolete until newer versions of the software become available Shellcodes any types.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR