dnscat2-powershell

dnscat2는 @iagox86 Ron Bowes가 개발한 DNS 은닉 채널 도구로, DNS 요청을 통해 데이터를 전송하는 데 사용됩니다. 이것은 dnscat2 C 클라이언트의 PowerShell 버전입니다. 블로그 글에서 이 스크립트의 목적과 사용 방법에 대한 자세한 설명을 확인하세요. 이 스크립트를 사용하려면 Ruby dnscat2 서버가 필요합니다. 서버를 실행할 때 반드시--no-cache 옵션을 추가하세요. 이 클라이언트는 서버의 캐싱과 호환되지 않습니다. 설정 먼저 dnscat2 서버를 설치하세요. --no-cach...

webscan

webscan webscan is a browser-based network IP scanner and local IP detector. It detects IPs bound to the user/victim by listening on an RTP data channel via WebRTC and looping back to the port across any live IPs, as well as discovering all live IP addresses on valid subnets by monitoring for...

OpenVPN: denial of service

OpenVPN team reports: OpenVPN 2.x allows attackers to potentially cause a denial of service against the control channel reliability layer, either by driving the reliable TLS retransmission timeout to grow without bound, or by sending acknowledgements for packets that cannot be outstanding...

Linux Distros Unpatched Vulnerability : CVE-2026-56855

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC...

CVE-2025-32433

Erlang/OTP SSH CVE-2025-32433에 대한 보안 연구 Erlang/OTP SSH의 인증되지 않은 원격 코드 실행을 위한 Python 익스플로잇 개념 증명 CVE-2025-32433. 또한 배너 그랩 Nuclei 템플릿과 Nuclei RCE 확인 기능도 있습니다. Suricata와 Zeek IDS 로그는 성공적인 Paramiko 공격, 두 번의 일반 OpenSSH9.8 연결공격 없음, ProDefense/CVE-2025-32433을 사용한 두 번의 성공적인 공격, 그리고 iamnoooob, rootxharsh,...

CVE-2026-23006-Kyber-Ciphertext-Length-Side-Channel

CVE-2026-23006 – Kyber 암호문 길이 부채널 프로그램 코드 Python root@kitploit: kyberlengthleak.py - Leaks secret key bit based on ciphertext length import random Simulate encapsulation: ciphertext length depends on message bit def encapsulatepk, bit: In a flawed implementation, the ciphertext size varies based ...

Fenrir

Fenrir NCC Group Plc가 오픈 소스로 공개함 - http://www.nccgroup.com/ Dave Spencer, david dot spencer at nccgroup dot com 개발 http://www.github.com/nccgroup/Fenrir AGPL에 따라 공개됨, 자세한 내용은 LICENSE 참조 설명 Fenrir는 RDP 가상 채널을 통해 네트워크 트래픽을 터널링하는 것이 가능하다는 것을 입증하기 위해 만들어졌지만, 아직 초기 단계에 불과합니다. 이 PoC는 meterpreter revers...

Phoenix: Unbounded channel joins per transport enables DoS over few connections

Summary Phoenix transports do not limit the number of channels in a given connection, making it easy to spawn hundreds of thousands of processes over a single connection, and, eventually reaching the max processes VM limit. The solution is to limit the number of channels per transport, so an...

EUVD-2026-42050

Phoenix: Presence keys colliding with Object.prototype members break existence checks...

CVE-2026-33630

c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...

Microsoft Entra ID Elevation of Privilege Vulnerability

Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-85156

WWBN AVideo fails to properly validate access controls on the public channel page, allowing unauthenticated visitors to view unlisted and group-restricted videos through hardcoded visibility flags and an undefined property. Attackers can access the channel endpoint to retrieve sensitive video...

CVE-2025-68935

creationtimestamp| type| source ---|---|--- 2026-09-03 12:00:06+00:00| seen| https://t.me/bizonechannel/2808 2026-09-04 00:00:51+00:00| seen| https://t.me/bizonechannel/2808...

CVE-2025-68936

creationtimestamp| type| source ---|---|--- 2026-09-03 12:00:06+00:00| seen| https://t.me/bizonechannel/2808 2026-09-04 00:00:51+00:00| seen| https://t.me/bizonechannel/2808...

CVE-2026-41030

creationtimestamp| type| source ---|---|--- 2026-09-03 12:00:06+00:00| seen| https://t.me/bizonechannel/2808 2026-09-04 00:00:51+00:00| seen| https://t.me/bizonechannel/2808...

CVE-2026-85156 WWBN AVideo Broken Access Control via Channel Page

WWBN AVideo fails to properly validate access controls on the public channel page, allowing unauthenticated visitors to view unlisted and group-restricted videos through hardcoded visibility flags and an undefined property. Attackers can access the channel endpoint to retrieve sensitive video...

CVE-2026-85156

WWBN AVideo has a broken access control vulnerability on its public channel page. The root cause involves hardcoded visibility flags and an undefined property that fail to properly validate access controls, allowing unauthenticated visitors to view unlisted and group-restricted videos—including f...

EUVD-2026-70391

WWBN AVideo fails to properly validate access controls on the public channel page, allowing unauthenticated visitors to view unlisted and group-restricted videos through hardcoded visibility flags and an undefined property. Attackers can access the channel endpoint to retrieve sensitive video...

CVE-2026-85156 WWBN AVideo Broken Access Control via Channel Page

WWBN AVideo fails to properly validate access controls on the public channel page, allowing unauthenticated visitors to view unlisted and group-restricted videos through hardcoded visibility flags and an undefined property. Attackers can access the channel endpoint to retrieve sensitive video...

next88

next88 - React Server Components RCE 스캐너 React Server Components RCE 취약점CVE-2025-55182 및 CVE-2025-66478을 탐지하기 위한 고성능 Go 구현체입니다. 기능 🚀 고성능 : goroutine 기반 동시성을 갖춘 컴파일된 Go 바이너리 🔍 다중 탐지 방식 : 안전한 부채널side-channel 탐지 RCE PoC 검사 WAF 우회 기법 정크 데이터, 이중 인코딩, 세미콜론 우회 Vercel 전용 WAF 우회 ACTIONID 추출을 통한 소스 코드 노출 탐...