openclaw-security-monitor

OpenClaw Security Monitor Monitoreo proactivo de seguridad, escaneo de amenazas y visibilidad en tiempo real para implementaciones de OpenClaw. Detecta amenazas de la campaña ClawHavoc más de 824 habilidades maliciosas, stealer AMOS , infostealer Vidar , proxy malicioso GhostSocks , fuerza bruta...

undici: undici: Denial of Service via unrequested WebSocket subprotocol

A flaw was found in undici. A remote attacker can exploit this vulnerability by responding with an unrequested WebSocket subprotocol during the opening handshake. This causes the undici WebSocket client to crash the entire Node.js process, leading to a denial of service DoS...

CVE-2026-39987-Marimo-Preauth-RCE

CVE-2026-39987 Investigación de RCE pre-autenticación en Marimo Descripción general Este proyecto se centra en CVE-2026-39987, una vulnerabilidad de ejecución remota de código pre-autenticación en Marimo relacionada con el endpoint WebSocket del terminal /terminal/ws. Marimo es un notebook de...

chisel-ng

| | | | /| ' | / |/ \ | | ' \ / | | | | | | \ / || | | | | | || | ||/ || | | || , | |/ chisel-ng Una implementación en Rust de chisel para pruebas de penetración y operaciones de equipo rojo. Establece túneles inversos sobre SSH sobre WebSocket sobre TLS, permitiendo a los operadores pivotar a...

CVE-2024-41570

CVE-2024-41570 | Havoc C2 SSRF con RCE | Exploit automatizado de shell inversa vía WebSocket Este proyecto proporciona un script de prueba de concepto PoC basado en Python para explotar un servicio vulnerable basado en WebSocket. El script automatiza el registro de agentes, la entrega de payloads...

CVE-2024-55591-POC

PoC de I+D de ScaryByte para CVE-2024-55591 Un script integral todo-en-uno de prueba de concepto basado en Python para descubrir y explotar una vulnerabilidad crítica de bypass de autenticación CVE-2024-55591 en ciertos dispositivos Fortinet. Este script: 1. Instala las dependencias faltantes...

gotestwaf

GoTestWAF GoTestWAF is a tool for API and OWASP attack simulation that supports a wide range of API protocols including REST, GraphQL, gRPC, SOAP, XMLRPC, and others. It was designed to evaluate web application security solutions, such as API security proxies, Web Application Firewalls, IPS, API...

grdpwasm

grdpwasm Un cliente RDP basado en web construido con Go WebAssembly y grdp. Conéctate a un servidor de Escritorio Remoto de Windows directamente desde tu navegador — sin necesidad de complementos. Arquitectura Browser WASM ──WebSocket──► proxy Go ──TCP──► RDP Server Debido a que los navegadores n...

CVE-2024-55591-POC

--port 443 --ssl Then use the prompt: FortiOS get system status FortiOS exit Reset admin password: python3 poc.py --host --port 443 --ssl \ --reset-user Admin2 --new-pass Forti2024! Developer Telegram: @chernyzhizn Disclaimer: This tool is provided for educational and authorized testing purposes...

wssip

This repository does not have a README...

gohide

gohide 通过AES-GCM加密的混淆通道，对端口到端口的流量进行隧道传输。 混淆模式 会话Cookie HTTP GET http-client Set-Cookie 会话Cookie HTTP/2 200 OK http-server WebSocket握手"Sec-WebSocket-Key" websocket-client WebSocket握手"Sec-WebSocket-Accept" websocket-server 无混淆，仅使用AES-GCM加密消息 none 以上每个选项默认启用AES-GCM。 用法 root@WOPR-KALI:/opt/gohide-dev...

resterm

Resterm An API-as-code workbench for the terminal. resterm.app · docs Resterm is an API client that stores requests in plain .http and .rest files that can live side by side in your repo like the rest of your code. You can use the terminal UI, or run the same files in CI with resterm run. Quick...

fortios-auth-bypass-poc-CVE-2024-55591

CVE-2024-55591 Un PoC de omisión de autenticación en Fortinet FortiOS Descripción Use este PoC, puede omitir la autenticación y ver el registro del sistema USO sysirq@sysirq-machine:/Work/Fortinet/FortiGate7016/CVE-2024-55591$ python3 poc.py usage: poc.py -h --target TARGET --port PORT poc.py:...

thats_no_pipe

Thats no pipe Frida-based project to intercept Windows named pipe communication Objectives This project aims at intercepting IPC communications by hooking specific WinAPI functions and forwarding them to an HTTP proxy using a websocket. Architecture Read from and write to a named pipe can happen ...

CVE-2026-103057

AiSOC versions 5.1.0 before 12.0.0 contain an authentication bypass vulnerability in the realtime service internal endpoints POST /internal/agent-event and POST /internal/push. Attackers can post arbitrary events with spoofed tenant identifiers to broadcast malicious content over WebSocket and...

CVE-2026-103055

AiSOC versions 7.5.0 before 12.0.0 use a hard-coded constant for JWT verification in the realtime WebSocket and SSE service when the AISOCREALTIMEJWTSECRET environment variable is not set. Unauthenticated attackers can forge subscription tickets with arbitrary tenant identifiers to access...

fortios-auth-bypass-exploit-CVE-2024-55591

CVE-2024-55591 Un exploit de omisión de autenticación de Fortinet FortiOS Descripción Usa este exploit para evitar la autenticación y ejecutar comandos. USO sysirq@sysirq-machine:/Work/Fortinet/FortiGate7016/CVE-2024-55591$ python3 exp.py usage: exp.py -h --target TARGET --port PORT --username...

CVE-2026-103057 AiSOC 5.1.0 before 12.0.0 Missing Authentication on Realtime Service Internal Endpoints

AiSOC versions 5.1.0 before 12.0.0 contain an authentication bypass vulnerability in the realtime service internal endpoints POST /internal/agent-event and POST /internal/push. Attackers can post arbitrary events with spoofed tenant identifiers to broadcast malicious content over WebSocket and...

CVE-2026-103057 AiSOC 5.1.0 before 12.0.0 Missing Authentication on Realtime Service Internal Endpoints

AiSOC versions 5.1.0 before 12.0.0 contain an authentication bypass vulnerability in the realtime service internal endpoints POST /internal/agent-event and POST /internal/push. Attackers can post arbitrary events with spoofed tenant identifiers to broadcast malicious content over WebSocket and...

CVE-2026-103057

AiSOC versions 5.1.0 before 12.0.0 are vulnerable to an authentication bypass in the realtime service internal endpoints POST /internal/agent-event and POST /internal/push . This flaw allows attackers to post arbitrary events using spoofed tenant identifiers , enabling them to broadcast malicious...