🧰 openssl

The items that name it 26

• TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices
  articleas classification.technologies2026-10-28
• Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks
  writeupas tools2026-10-23It is written here as OpenSSL: used by the collector as an encryption backend (AES-256-CBC and RSA key wrapping).

  AES-256-CBC and RSA key wrapping

• Anti-Forensics: Building a Phantomdrive
  articleas classification.technologies2026-10-22
• There isn't an easy exploit for this PHP vulnerability
  articleas affected products2026-10-21It is written here as OpenSSL (Heartbleed, historical comparison; the page does not name OpenSSL, so listed as Heartbleed only).

  Heartbleed, historical comparison; the page does not name OpenSSL, so listed as Heartbleed only

• eMudhra CA Compromise: The Trust Stores You Didn't Patch | Endor Labs
  articleas tools2026-10-21It is written here as OpenSSL: used to verify the published signatures and to compute SHA-256 certificate fingerprints.
• Best practices for integrating IAM Roles Anywhere with your PKI
  articleas tools2026-10-21It is written here as OpenSSL: decodes PEM-encoded certificate files.
• Your MCU likely escaped the eMudhra intermediate CA compromise
  articleas classification.technologies2026-10-21
• Energy Consumption of Post-Quantum Cryptography on Constrained and General-Purpose Architectures
  paperas classification.technologies2026-10-19
• ARMORY CASTLE Exploits BeyondTrust
  writeupas classification.technologies2026-10-15
• curl HTTP/2 upload UAF turned RCE (CVE-2026-92392)
  articleas classification.technologies2026-10-14
• Quantum-resistant signing on AWS, Part 1: Build a software supply chain with ML-DSA
  articleas classification.technologies2026-10-12
• US Disrupts Chinese State-Sponsored Hacking Tools
  articleas affected products2026-10-09

  Targeted by MicroScan vulnerability scanning

• Randomness-Anchored Runtime Discovery of Cryptographic Operations on Linux Using eBPF
  paperas affected products2026-10-05
• Post-Quantum: Lattice or Hash-Based (one question, two right answers)
  articleas affected products2026-09-15

  Different OpenSSL versions historically disagreed on ECDSA signature encoding edge cases, prompting Bitcoin's BIP66.

• pgj11: Analysis of Bincrypter and gsocket (gs-netcat)
  writeupas tools2026-08-31

  Used (enc -d -aes-256-cbc) to decrypt the encrypted blob/ELF payload stages

• Post-DEF CON Phishing Uses Malicious Google Doc to Deliver Malware
  writeupas tools2026-08-19

  Used by Huntress analysts to inspect/demonstrate the rogue certificate authority and forged VirusTotal certificate (Figure 26)

• Have We Seen an Acceleration in Discoveries?
  articleas affected products2026-08-14It is written here as OpenSSL: 6 CVEs in all of 2025, 39 through 2026-08-05, 18 corroborated AI discoveries and 9 AI-affiliated with method unverified.

  6 CVEs in all of 2025, 39 through 2026-08-05, 18 corroborated AI discoveries and 9 AI-affiliated with method unverified

• Flowsint - OSINT Framework
  repoas tools2026-07-31

  Used to generate AUTH_SECRET via 'openssl rand -hex 32'

• Inside FakeAgent: How a Claude Desktop Malvertising Campaign Hit 29 Organizations with SectopRAT
  writeupas tools2026-07-22

  Used (unsuccessfully at first, due to a transcription error in the recovered AES key) to attempt decryption of the payload with the derived AES-256-CTR key/nonce.

• jscrambler npm Package Compromised in Supply Chain Attack
  writeupas tools2026-07-11

  Used by researchers to cross-validate AEAD (ChaCha20-Poly1305) decryption of malware strings

• Thinkst Package Proxy
  toolas affected products2026-06-26

  Example of a bundled vulnerable library historically causing dependency risk via old versions

• State of Post Quantum Cryptography | Wiz Blog
  articleas affected products2026-05-28

  Version 3.5.0 (released April 2025) added support for ML-DSA and SLH-DSA; less than 15% of observed instances use a version supporting PQC; ~4% of companies have at least one OpenSSL instance misconfigured to exclude ML-KEM key exchange groups

• Hardening the Hypervisor | Huntress
  articleas tools2025-12-08

  Built-in tool leveraged by attackers to encrypt virtual machine volumes directly, avoiding the need to upload custom ransomware binaries

• DMARC Identifier Alignment: relax, don't do it, when you want to go to it
  writeupas tools2023-01-25

  Used to generate the RSA private key and derive the base64 public key for DKIM signing

• HoF-Bench: Rediscovering Real AI-Discovered CVEs Without Frontier Models
  paperas affected products

  one of 78 projects with CVEs credited to AISLE's analyzer; example of a mature open-source project covered by HoF-Bench's underlying CVE set

• OpenAnt: LLM-Powered Vulnerability Discovery Through Code Decomposition, Adversarial Verification, and Dynamic Testing
  paperas affected products

  evaluated as target codebase for vulnerability discovery