johnwchadwick/cve-2009-3555-test-server

PoC

A TLS server using a vendored fork of the Go TLS stack that has renegotation indication extension forcibly disabled.

view exploit source poc_in_githubauthor johnwchadwickpublished 2022-03-30catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2009-3555US	medium5.8	87.3% (100th)	Exploit	2009-11-09
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier,…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.