Covenant

Covenant — это .NET-фреймворк для управления и контроля C2, предназначенный для демонстрации поверхности атаки .NET, упрощения использования наступательных .NET-методов и создания совместной платформы управления для участников красных команд. Covenant — это кроссплатформенное приложение на ASP.NE...

CVE-2025-55315-PoC-Exploit

CVE-2025-55315 침투 테스트 도구 ASP.NET Core Kestrel을 위한 HTTP 요청 밀반입 공격 도구 ⚠️ 법적 경고 본 도구는 승인된 보안 테스트 전용입니다! 소유하고 있거나 명시적 서면 승인을 받은 시스템에서만 사용하십시오. 무단 컴퓨터 시스템 접근은 불법 입니다. 도구 제작자는 오용에 대해 책임을 지지 않습니다. 본 도구를 사용함으로써 귀하는 모든 법적 책임을 수락합니다. 📋 개요 CVE-2025-55315 ASP.NET Core Kestrel HTTP 요청 밀반입 취약점에 대한 전문 침투 테스트...

SharpC2

SharpC2 SharpC2 — это платформа для управления и контроля C2, написанная на C. Она включает в себя командный сервер на ASP.NET Core, имплант на .NET Framework и клиент на .NET MAUI...

CVE-2025-55315-Scanner-Monitor

Сканер уязвимости CVE-2025-55315 и TLS-прокси Этот репозиторий содержит инструменты для обнаружения и мониторинга приложений ASP.NET Core, уязвимых к CVE-2025-55315, которая связана с контрабандой HTTP-запросов из-за конфликтующих HTTP-заголовков. Включённые инструменты 1. Сканер уязвимостей на...

CVE-2025-55315-detection-playground

Вот некоторые тесты, которые можно выполнить против этих сервисов, чтобы наблюдать различное поведение на маршрутах GET/POST между пропатченной и непропатченной версиями Kestrel. GET против непропатченной версии отправляет 200, и сокет остаётся открытым printf 'GET / HTTP/1.1\r\nHost:...

CVE-2026-21531

Обход функции безопасности в ASP.NET Core от Microsoft CVE-2026-21531 🌟 Описание Уязвимость в Azure SDK способствует десериализации недоверенных данных, позволяя неавторизованным злоумышленникам выполнять произвольный код через сеть. ⚙️ Установка Чтобы настроить инструмент эксплуатации, выполните...

CVE-2025-55315

CVE-2025-55315 CVE-2025-55315 .NET HTTP 요청 스머글링에 대한 개념 증명 익스플로잇입니다. 취약한 ASP.NET Core/Kestrel 서버에서 청크 인코딩이 제대로 파싱되지 않아 공격자가 프록시와 로드 밸런서를 우회하여 요청을 밀반입할 수 있는 방법을 보여줍니다. 📊 프레젠테이션 대화형 Prezi 프레젠테이션 보기 🎥 위 배지를 클릭하여 Prezi에서 전체 대화형 프레젠테이션을 확인하세요 프로젝트 구조 Api - 통합 ASP.NET Core API, 두 개의 Dockerfile 포함:...

BIT-ASPNET-CORE-2026-69304 ASP.NET Core Denial of Service Vulnerability

Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to deny service over a network...

BIT-DOTNET-SDK-2026-69304 ASP.NET Core Denial of Service Vulnerability

Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to deny service over a network...

BIT-DOTNET-2026-69304 ASP.NET Core Denial of Service Vulnerability

Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to deny service over a network...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-8.0 / aspnetcore-runtime-dbg-8.0 / etc (crlsa-2026_4455)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20264455 advisory. asp.net: ASP.NET Core: Denial of Service via uncontrolled resource allocation CVE-2026-26130 Tenable has extracted the preceding description block directly from the...

Rocky Linux 10.2 [CIQ] Security Update: aspnetcore-runtime-8.0 / aspnetcore-runtime-dbg-8.0 / etc Multiple Vulnerabilities (crlsa-2026_25111)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202625111 advisory. dotnet: .NET: Local file tampering via link following vulnerability CVE-2026-45491 dotnet: ASP.NET Core: Denial of Service via uncontrolled resource...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-5.0 / aspnetcore-targeting-pack-5.0 / etc (crlsa-2022_0495)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20220495 advisory. dotnet: ASP.NET Core Krestel HTTP headers pooling denial of service CVE-2022-219862 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-6.0 / aspnetcore-targeting-pack-6.0 / dotnet / etc (crlsa-2022_6539)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20226539 advisory. dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion. CVE-2022-38013 Tenable has extracted the preceding...

Rocky Linux 10.2 [CIQ] Security Update: aspnetcore-runtime-10.0 / aspnetcore-runtime-dbg-10.0 / etc Multiple Vulnerabilities (crlsa-2026_25115)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202625115 advisory. dotnet: .NET: Local file tampering via link following vulnerability CVE-2026-45491 dotnet: ASP.NET Core: Denial of Service via uncontrolled resource...

Rocky Linux 10.2 [CIQ] Security Update: aspnetcore-runtime-10.0 / aspnetcore-runtime-dbg-10.0 / etc Multiple Vulnerabilities (crlsa-2026_41897)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202641897 advisory. dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM CVE-2026-50651 dotnet: .NET Core: Denial of Service via type...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-8.0 / aspnetcore-runtime-dbg-8.0 / etc Multiple Vulnerabilities (crlsa-2024_4451)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20244451 advisory. dotnet: DoS in System.Text.Json CVE-2024-30105 dotnet: DoS in ASP.NET Core 8 CVE-2024-35264 dotnet: DoS when parsing X.509 Content and ObjectIdentifiers...

Rocky Linux 9 [CIQ] Security Update: aspnetcore-runtime-8.0 / aspnetcore-runtime-dbg-8.0 / etc Multiple Vulnerabilities (crlsa-2024_4450)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20244450 advisory. dotnet: DoS in System.Text.Json CVE-2024-30105 dotnet: DoS in ASP.NET Core 8 CVE-2024-35264 dotnet: DoS when parsing X.509 Content and ObjectIdentifiers...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-9.0 / aspnetcore-runtime-dbg-9.0 / etc Multiple Vulnerabilities (crlsa-2026_25113)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202625113 advisory. dotnet: .NET: Local file tampering via link following vulnerability CVE-2026-45491 dotnet: ASP.NET Core: Denial of Service via uncontrolled resource...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-3.1 / aspnetcore-targeting-pack-3.1 / etc (crlsa-2022_6523)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20226523 advisory. dotnet: DenialOfService - ASP.NET Core MVC vulnerable to stack overflow via ModelStateDictionary recursion. CVE-2022-38013 Tenable has extracted the preceding...