IotShark

cs219-f19-final-project IoTShark Este es nuestro proyecto final para CS 219 del trimestre de otoño de 2019. IoTShark es un servicio de monitoreo de IoT que permite a los usuarios monitorear sus dispositivos IoT para detectar tendencias en los datos enviados/recibidos. Normalmente, configurar un...

hyperfox

Hyperfox Hyperfox is a security auditing tool that proxies and records HTTP and HTTPS traffic between two points. Installation You can install the latest version of hyperfox to /usr/local/bin with the following command requires admin privileges: root@kitploit: curl -sL...

arp-scan

arp-scan Acerca de arp-scan es una herramienta de escaneo de red que utiliza el protocolo ARP para descubrir y realizar el fingerprinting de hosts IPv4 en la red local. Está disponible para Linux, BSD, macOS y Solaris bajo la licencia GPLv3. Este es README.md para la versión 1.10.1-git de arp-sca...

LANs.py

LANs.py 注意 我不再维护这个项目。我强烈建议改用 bettercap 来满足 ARP 和 MITM 需求。 自动发现最活跃的 WLAN 用户，然后监视其中一个用户和/或向 ta 访问的页面注入任意 HTML/JS。 单独毒化目标设备、路由器以及必要时的 DNS 服务器的 ARP 表。不会毒化网络上的其他设备。显示所有最有趣的流量，并可以向 ta 访问的页面注入自定义 HTML。使用后自动清理。 也可用于持续干扰附近的 WiFi 网络。其有效范围大约为一个街区半径，但具体取决于你的无线网卡强度。可以微调以干扰所有人，甚至只干扰一个客户端。（无法同时进行 WiFi 干扰和监视）...

netattack2

NETATTACK2 NETATTACK2 是一个用 Python 编写的脚本，可以扫描和攻击网络。它基于图形界面，易于理解。 我能用它做什么？ 扫描 扫描你的网络，获取活跃主机、它们的操作系统、开放端口以及更多信息。 扫描接入点，识别加密类型、WPS 及其他有用数据。 欺骗/嗅探 简单的 ARP 欺骗 通过 ARP 欺骗目标并监听 DNS 查询来实现 DNS 嗅探 踢下线 使用 ARP 欺骗攻击将主机从你的网络中踢出 解除认证 向你所在区域的接入点发送解除认证数据包（DoS 攻击） 解除所有认证（Deauth-All），原理相同，但会扫描网络并周期性地攻击它们。 我需要什么？（前提条件...

isowall

isowall This is a mini-firewall that completely isolates a target device from the local network. This is for allowing infected machines Internet access, but without endangering the local network. Building This project depends upon libpcap, and of course a C compiler. On Debian, the following shou...

creepy

creepy Current Version 1.1 Author Yiannis Kakavas Homepage http://www.geocreepy.com Installation Instructions See http://www.geocreepy.com Description Geolocation OSINT tool. Creepy is a geolocation OSINT tool. Gathers geolocation related information from online sources, and allows for presentati...

wsuks

wsuks Automatizando el ataque WSUS Obtener acceso administrativo local a una máquina Windows unida a un dominio suele ser el primer paso durante una prueba de penetración. En muchos casos, el Windows Server Update Service WSUS está configurado para implementar actualizaciones a los clientes a...

NetRaptor

NetRaptor - ARP欺骗中间人攻击工具 NetRaptor 是一款基于 Python 的 GUI ARP 欺骗工具，可扫描网络、选择目标和网关，并执行中间人（MITM）攻击。本工具仅用于教育目的和授权的网络安全测试。 功能特点 网络扫描 ：扫描指定网络范围内的主机。 目标和网关选择 ：从发现设备中轻松选择目标和网关 IP，或手动输入网关 IP。 网关 IP 即路由器 IP 地址。 ARP 欺骗 ：执行 ARP 欺骗以发起 MITM 攻击。 Wireshark 数据包分析 ：使用 Wireshark 捕获和分析网络流量。 用户友好的 GUI ：基于 Tkinter 构建，操作简便...

kernel: bonding: alb: fix UAF in rlb_arp_recv during bond up/down

A flaw was found in the Linux kernel's bonding driver, specifically within the Active-Backup Load Balancing ALB receive path. A local attacker can trigger a Use-After-Free UAF vulnerability in the rlbarprecv function by rapidly bringing a bond interface up and down while receiving Address...

DNS-Poisoning-Triage-Lab

Laboratorio de Triage de Tráfico DNS y ARP Un ejercicio educativo de análisis de paquetes y endurecimiento de resolución completado en una estación de trabajo Arch Linux. Alcance: Este repositorio es un proyecto de aprendizaje. La captura incluida es útil para practicar la inspección de DNS y ARP...

EVIL-CVE-2021-23017-Update-2025

vulnerabilidad en servidores NGINX versiones 0.6.18–1.20.0. Los scripts tienen como objetivo causar una Denegación de Servicio DoS mediante el envío de respuestas DNS maliciosas, con mejoras para evadir firewalls. Esta es una versión mejorada del PoC original de M507/CVE-2021-23017-PoC. Advertenc...

RITM

RITM Questa è un'implementazione Python dell'attacco man-in-the-middle descritto da Charlie Clark @exploitph nel suo post, New Attack Paths? AS Requested Service Tickets, e dimostrato nel suo proof-of-concept, Roast in the Middle. In breve, questo strumento: 1. Esegue ARP spoofing tra i tuoi targ...

arp-dns-spoof

Installazione su distribuzioni Linux basate su Debian Installare Scapy root@kitploit: % sudo apt-get install tcpdump graphviz imagemagick python-gnuplot python-crypto python-pyx % pip install scapy Installare python-NetfilterQueue root@kitploit: % sudo apt-get install build-essential python-dev...

CVE-2026-80600 batman-adv: dat: acquire ARP hw source only after skb realloc

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: acquire ARP hw source only after skb realloc The pskbmaypull called by batadvgetvid could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an...

CVE-2026-80600

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: acquire ARP hw source only after skb realloc The pskbmaypull called by batadvgetvid could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an...

arpy

Arpy Arpy is an easy-to-use ARP spoofing MiTM tool for Mac. It provides 3 targeted functions: Packet Sniffing Visited Domains Visited Domains with Gource Each function will be explained below. Tested OS to date Darwin 14.3.0 Darwin Kernel Version 14.3.0 Mac OS X Requirements Python 2.7 Gource Sca...

arpy

Arpy Arpy è uno strumento MiTM per Mac facile da usare per lo spoofing ARP. Offre 3 funzionalità mirate: Sniffing di pacchetti Domini visitati Domini visitati con Gource Ciascuna funzione verrà spiegata di seguito. Sistemi operativi testati ad oggi Darwin 14.3.0 Darwin Kernel Version 14.3.0 Mac O...

overload

Overload Uno strumento di stress test di rete basato su Python che utilizza metodi di attacco di Livello 2, Livello 4 e Livello 7 per test di sicurezza autorizzati. !WARNING Questo progetto è stato archiviato e non è più mantenuto attivamente. Sebbene il codice sorgente sia ancora disponibile, no...

ssh-mitm

SSH MITM v2.3-dev Author: Joe Testa @therealjoetesta Overview This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and...