ARP-poisoning-packet-sniffer

ARP Poisoning - Packet Sniffer Two scripts written to perform ARP poisoning on target computers on the same network and to monitor network traffic. The arpspoofy.py script is used to perform ARP poisoning on a target computer on the same network. While the arpspoofy.py script performs ARP poisoni...

habu

Habu Hacking Toolkit I'm developing Habu to teach and learn some concepts about Python and Network Hacking. Some techniques implemented in the current version are: ARP Poisoning and Sniffing DHCP Discover and Starvation Subdomains Identification Certificate Cloning TCP Analysis ISN, Flags Usernam...

IotShark

cs219-f19-final-project IoTShark This is our final project for CS 219 for the Fall 2019 quarter. IoTShark is a IOT monitoring service that allows users to monitor their IOT devices for trends in data sent/received. Ordinarily, setting up a man in the middle attack with proper configurations can...

creak

creak 对局域网中的目标地址执行一些最著名的中间人（MITM）攻击。其中包括：通过执行ARP投毒攻击并向路由器发出的每个请求发送重置TCP数据包，从而拒绝目标主机的浏览和下载能力。 该项目最初是为学习Python语言而创建的教学项目。对于任何滥用、包括恶意或非法使用此代码的行为，我不承担任何责任。 安装 root@kitploit: $ git clone https://github.com/codepr/creak.git $ cd creak $ python setup.py install 或者直接克隆仓库，并在安装所有依赖后运行 creak.py：...

mitm

mitm A simple yet effective python3 script to perform DNS spoofing via ARP poisoning Installation root@kitploit: adam@paradise:$ git clone https://github.com/blackeko/mitm/ adam@paradise:$ cd mitm adam@paradise:$ pip3 install -r requirements.txt adam@paradise:$ sudo python3 mitm.py Demo Outcome...

arp-validator

arp-validator Security Tool to detect arp poisoning attacks Features Uses a faster approach in detection of arp poisoning attacks compared to passive approaches Detects not only presence of ARP Poisoning but also valid IP-MAC mapping when LAN hosts are using non-customized network stack Stores...

arp-validator

arp-validator 用于检测 ARP 投毒攻击的安全工具 功能特点 采用比被动方式更快速的方法检测 ARP 投毒攻击 不仅能检测 ARP 投毒的存在，还能验证有效的 IP-MAC 映射（当局域网主机使用非自定义网络协议栈时） 存储已验证的主机信息以提升速度 作为守护进程运行，不干扰正常流量 将日志记录到任意外部文件 架构 root@kitploit: +-------------+ +---------------+ +------------+ | ARP 数据包 | ARP 回复 | MAC-ARP 头部 | 一致性 | 欺骗 | | 嗅探器 | ------------ |...

LANs.py

LANs.py NOTE I do not maintain this anymore. I highly suggest using bettercap instead for ARP and MITM needs. Automatically find the most active WLAN users then spy on one of them and/or inject arbitrary HTML/JS into pages they visit. Individually poisons the ARP tables of the target box, the...

evillimiter

Evil Limiter 本项目是 bitbrute/evillimiter 的维护分支。上游仓库已不再维护，因此本分支继续开发——包括错误修复、新功能和兼容性更新。参见下文 分支特有变更。 一款无需物理或管理权限即可监控、分析并限制本地网络中设备带宽（上传/下载）的工具。 evillimiter 采用 ARP 欺骗 和 流量整形 来限制网络中主机的带宽。在启用 IPv6 的网络中，NDP 欺骗 与 ARP 欺骗同时使用，以切断主机的 IPv6 流量，否则该流量将绕过仅限 IPv4 的限制/阻断。 正在寻找兼容 Windows 的版本？ 请查看开源替代方案 EvilLimiter for...

NetRaptor

NetRaptor - ARP Poisoning MITM Tool NetRaptor is a GUI-based ARP poisoning tool built with Python that allows you to scan a network, select a target and gateway, and perform a Man-in-the-Middle MITM attack. This tool is designed for educational purposes and authorized network security testing onl...

robot

Good all day, my friends, I finally finished the first versio...

CVE-2013-6014

Juniper Junos 10.4 before 10.4S15, 11.4 before 11.4R9, 11.4X27 before 11.4X27.44, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.2 before 12.2R6, 12.3 before 12.3R3, 13.1 before 13.1R3, and 13.2 before 13.2R1, when Proxy ARP is enabled on an unnumbered interface,...

EUVD-2008-5207

Malware in sbrugna...

EUVD-2012-4909

Malware in sbrugna...

EUVD-2002-1916

Malware in sbrugna...

EUVD-2021-15917

Malware in sbrugna...

EUVD-2013-5844

Malware in sbrugna...

CVE-2021-29280

In TP-Link Wireless N Router WR840N an ARP poisoning attack can cause buffer overflow...

CVE-2008-5230

The Temporal Key Integrity Protocol TKIP implementation in unspecified Cisco products and other vendors' products, as used in WPA and WPA2 on Wi-Fi networks, has insufficient countermeasures against certain crafted and replayed packets, which makes it easier for remote attackers to decrypt packet...

CVE-2002-1937

Symantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator's MAC address inside the firewall's configuration, which allows remote attackers to spoof the administrator's MAC address and perform an ARP poisoning man-in-the-middle attack to obtain the administrator's password...