CVE-2009-3555

This is a proof-of-concept exploit for CVE-2009-3555, the TLS renegotiation vulnerability. It acts as a man-in-the-middle to inject arbitrary data into a TLS session by exploiting the renegotiation flaw.

This exploit demonstrates CVE-2009-3555, a vulnerability in Mozilla Network Security Services (NSS) where a NULL byte in a certificate's Common Name (CN) allows domain validation bypass. The provided RSA private key and certificate request show a crafted certificate with a NULL byte in the CN field, enabling man-in-the-middle attacks.

This repository contains a TLS server implementation with a modified Go TLS stack that disables renegotiation indication extension, triggering CVE-2009-3555 mitigations in OpenSSL 3.0+. It serves as a test server to verify client behavior when connecting to servers with insecure renegotiation configurations.