wifipumpkin3

Wifipumpkin3 Potente framework per attacchi con punti di accesso rogue. Panoramica wifipumpkin3 è un potente framework per attacchi con punti di accesso rogue, scritto in Python, che consente e offre a ricercatori di sicurezza, red teamer e reverse engineer di montare una rete wireless per condur...

PwnSTAR

PwnSTAR Piattaforme Progettato per Kali Linux. Funziona anche su Linux Mint 16. Dovrebbe funzionare su qualsiasi distribuzione Linux con qualche piccolo aggiustamento. Installazione Script di installazione Clone from github https://github.com/SilverFoxx/PwnSTAR.git Spostati nella directory...

eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

CVE-2026-22557-check

CVE-2026-22557 Schwachstellenbewertungswerkzeug Erkennen Sie sicher, ob ein UniFi Network Application Controller anfällig für CVE-2026-22557 ist, ohne Störungen zu verursachen. Siehe den vollständigen Bericht im Bishop Fox Blog. Beschreibung CVE-2026-22557 ist eine nicht authentifizierte...

c41n

c41n c41n ist ein automatisiertes Einrichtungswerkzeug für Rogue Access Points. c41n bietet die automatisierte Einrichtung verschiedener Arten von Rogue Access Points und Evil-Twin-Angriffen. c41n richtet einen Access Point mit benutzerdefinierten Eigenschaften Schnittstelle, Name und Kanal für d...

wifi-agent

wifi-agent wifi-agent Punto di accesso non autorizzato. Il programma è realizzato solo per scopi educativi, per vedere come funziona il metodo del punto di accesso non autorizzato. Qualsiasi uso non necessario del programma è vietato e il produttore non ha alcuna responsabilità per un uso illegal...

zyxel-social-login-bypass-cve-2026-8508

CVE-2026-8508: Zyxel-Captive-Portal-Bypass über vertrauenswürdige, vom Browser übermittelte Facebook-Identität Dieses Repository bündelt den öffentlichen Writeup, das Schnellverifizierungsskript und ausgewählte unterstützende Artefakte für CVE-2026-8508. Worum es geht CVE-2026-8508 ist eine...

panos-captive-portal-rce

CVE-2026-0300 — Scanner RCE per Buffer Overflow nel Captive Portal User-ID di PAN-OS...

POC-CVE-2026-0300-exploit

CVE-2026-0300 — Exploit de Buffer Overflow no Portal de Autenticação User-ID do PAN-OS Crítico CVSS 9.3 — Execução Remota de Código Não Autenticada no Captive Portal do PAN-OS da Palo Alto Networks Sumário Visão Geral Detalhes da Vulnerabilidade Versões Afetadas Diagramas de Arquitetura Estrutura...

SpaceX-Starlink-Router-Gen-2-XSS

SpaceX / Starlink Router Gen 2 XSS CVE-2023-49965 Potete vedere la versione coreana del post qui : https://hackintoanetwork.com/blog/2023-starlink-router-gen2-xss-kor TL;DR Una vulnerabilità Cross-Site Scripting XSS nella pagina iniziale del captive portal del router di seconda generazione potreb...

Hack-Captive-Portal

Hack-Captive-Portal Questo script aiuta a superare i portali captive nelle reti Wi-Fi pubbliche. Sottrae l'IP e il MAC da qualcuno che è già connesso e autorizzato sul portale captive. Installazione e utilizzo Sono necessari sipcalc e nmap per questo script. Poi scarica lo script .sh ed eseguilo...

CVE-2026-38821

A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon denial of service and potentially achieve remote code execution. This is in httpmicrohttpd.c...

CVE-2026-38819

Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes...

DEBIAN-CVE-2026-38821

A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon denial of service and potentially achieve remote code execution. This is in httpmicrohttpd.c...

DEBIAN-CVE-2026-38822

In openNDS before 11.0.0, the clientparams.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command injection through crafted HTTP GET query parameter keys. An authenticated captive portal user can inject arbitrary shell commands by...

DEBIAN-CVE-2026-38819

Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes...

CVE-2026-38822

In openNDS before 11.0.0, the clientparams.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command injection through crafted HTTP GET query parameter keys. An authenticated captive portal user can inject arbitrary shell commands by...

CVE-2026-38822

In openNDS before 11.0.0, the clientparams.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command injection through crafted HTTP GET query parameter keys. An authenticated captive portal user can inject arbitrary shell commands by...

CVE-2026-38822

In openNDS before 11.0.0, the clientparams.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command injection through crafted HTTP GET query parameter keys. An authenticated captive portal user can inject arbitrary shell commands by...

CVE-2026-38822

In openNDS before 11.0.0 , the client_params.sh script—invoked by the openNDS daemon to serve the authenticated client status page—is vulnerable to OS command injection through crafted HTTP GET query parameter keys. An authenticated captive portal user can inject arbitrary shell commands by embed...