Mtls — PoC Archivehttps://poc.intelseclab.com/tags/mtls/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Sliver C2 Server mTLS Nil-Pointer Panic / Infrastructure Kill-Switch — CVE-2026-29781https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-29781-sliver-c2-mtls-panic/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-29781-sliver-c2-mtls-panic/High severity — network · CVE-2026-29781 (GHSA-hx52-cv84-jr5v). Status: PoC. Affects: Sliver C2 server (BishopFox). Tags: sliver-c2, denial-of-service, nil-pointer-dereference, protobuf, mtls, golang, red-team-tooling.networkHighsliver-c2denial-of-servicenil-pointer-dereferenceprotobufmtlsgolangred-team-toolingApache Tomcat Mutual TLS OCSP Soft-Fail Authentication Bypass — CVE-2026-29145https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-29145-tomcat-mtls-ocsp-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-29145-tomcat-mtls-ocsp-bypass/Critical severity (CVSS 9.1) — web · CVE-2026-29145. Status: PoC. Affects: Apache Tomcat (CLIENT_CERT / Mutual TLS authentication). Tags: tomcat, mtls, client-cert, ocsp, auth-bypass, revocation-check, docker-lab, java.webCriticaltomcatmtlsclient-certocspauth-bypassrevocation-checkdocker-labjavalibcurl mTLS Connection Reuse Authentication Bypass (CVE-2026-8932)https://poc.intelseclab.com/pocs/network/2026-06-30_cve-2026-8932-libcurl-mtls-auth-bypass/Tue, 30 Jun 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-06-30_cve-2026-8932-libcurl-mtls-auth-bypass/Low severity — network · CVE-2026-8932. Status: PoC. Affects: libcurl (embedded library; standalone curl CLI unaffected). Tags: authentication-bypass, mTLS, TLS, libcurl, connection-reuse, client-certificate, C, Low.networkLowauthentication-bypassmTLSTLSlibcurlconnection-reuseclient-certificateCLow