This repository has been archived by the owner on Jul 30, 2024. It is now read-only.
Releases: aniko33/Charles-CSEC
Releases · aniko33/Charles-CSEC
V.1.2
V1.1
Version 1.1 📣
Exploit
This exploit allowed the attacker to connect with a client, for example Netcat: he entered the username and started sending unencrypted messages, the other clients tried to decrypt but without success crashing the application.
CVSS score
link
| Value | Score |
|---|---|
| CVSS Base Score | 7.3 |
| Impact Subscore | 3.4 |
| Exploitability Subscore | 3.9 |
| CVSS Temporal Score | 6.8 |
| CVSS Environmental Score | 6.8 |
| Modified Impact Subscore | 3.4 |
| Overall CVSS Score | 6.8 |
Changelog
- 💣 Vulnerability fixed (Denial of Service - PoC).
- 🐛 Bug fixing.
Additions
- ✔ Username check
- 📜 Get username (/nick)
V1.0
Version 1.0 📣
Changelog
- 🐛 Fixed bugs.
- ✍ Docs edited by @Chiarchiaooo.
- 📁 Compiled versions for Windows available.
- 📰 Comments added and PEP-8 style added.
Additions
- 👋 Welcome message
Contributors
Chiarchiaooo