Inveigh

Inveigh Inveigh is a cross-platform .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers. This repo contains the primary C version as well as the legacy PowerShell version. Overview Inveigh conducts spoofing attacks and hash/credential captures through both packet sniffing and protoc...

mitm

mitm A simple yet effective python3 script to perform DNS spoofing via ARP poisoning Installation root@kitploit: adam@paradise:$ git clone https://github.com/blackeko/mitm/ adam@paradise:$ cd mitm adam@paradise:$ pip3 install -r requirements.txt adam@paradise:$ sudo python3 mitm.py Demo Outcome...

CVE-2023-51073

CVE-2023-51073 - Firmware Update Server Verification Vulnerability on Buffalo LS210D Version 1.78-0.03 Christopher J. Pace and Ryan Miller The Buffalo LS210D is a Network Attached Storage NAS server designed and marketed towards small-businesses and individuals. Within the LS210D is the ability t...

creak

creak Performs some of the most famous MITM attack on target addresses located in a local network. Among these, deny navigation and download capabilities of a target host in the local network performing an ARP poison attack and sending reset TCP packets to every request made to the router. Born a...

cve-2022-28944

CVE-2022-28944 EMCO Software Múltiples productos Vulnerabilidad de ejecución remota de código sin autenticación en la actualización. Uso: python3 cve-2022-28944poc.py Detalles en el informe en gerr.re. Pasos para reproducir 1. Instale un producto afectado de EMCO Software; 2. Configure la...

DNSSpoof

DNSSpoof A DNS spoofer tool written in Python3. How to use it? root@kitploit: usage: dnsspoof.py -h -d DOMAIN -i INTERFACE -t TARGET -r IP optional arguments: -h, --help show this help message and exit -d DOMAIN Domain to spoof default: all -i INTERFACE Interface to listen on default: default -t...

dnschef

root@kitploit: | | versión 0.4 | | / | | | | | | | / | ' / |/| ' \ / \ | | | | | | \ | | | | / | ,|| | |/ || ||| | root@kitploit: D O C U M E N T A C I Ó N DNSChef es un proxy DNS altamente configurable para evaluadores de penetración y analistas de malware. Un proxy DNS también conocido como "Fa...

cve-2022-24644

CVE-2022-24644 ZZ Inc. KeyMouse 3.08 Windows Vulnerabilidad de ejecución remota de código en actualización no autenticada Uso: python3 cve-2022-24644poc.py Detalles en el informe en gerr.re. Pasos para reproducir 1. Instala KeyMouse Windows 3.08; 2. Configura el suplantador www.keymouse.com a la ...

dns-spoof

This repository does not have a README...

cve-2022-27438

CVE-2022-27438 Caphyon Ltd Advanced Installer 19.3 "CustomDetection" Update Check Remote Code Execution Vulnerability. Usage: python3 cve-2022-27438poc.py Details in the report at gerr.re. Steps to reproduce For other affected products, you have to change the update server and update configuratio...

Windows DNS Spoofing Vulnerability

Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network...

arp-dns-spoof

Installationon Debian-based Linux Distribution Install Scapy root@kitploit: % sudo apt-get install tcpdump graphviz imagemagick python-gnuplot python-crypto python-pyx % pip install scapy Install python-NetfilterQueue root@kitploit: % sudo apt-get install build-essential python-dev...

mitmAP

root@kitploit: | / \ | \ | | / /\ | |/ / | ' | | | ' | || / | | | | | | | || | | | | | | | || | || || ||||| || || |/| 2.2 ⚠️ Warning! This project is no longer maintained and may not work as excepted. A python program to create a fake AP and sniff data. new in 2.0: SSLstrip2 for HSTS bypass...

WiFi-Pumpkin-deprecated

This repository is ⛔️ DEPRECATED, wifipumpkin3 is Released, checkout! WiFi-Pumpkin - Framework for Rogue Wi-Fi Access Point Attack Description The WiFi-Pumpkin is a rogue AP framework to easily create these fake networks, all while forwarding legitimate traffic to and from the unsuspecting target...

AZL-98232 CVE-2026-80212 affecting package ruby for versions less than 3.3.5-9

An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.getclass, Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create generate a new class for each unknown DNS resource record type, class pair, or each unknown SvcParamKey, encountered...

CVE-2026-66787 Lighthouse: go pprof profiling endpoint enabled unconditionally on lighthouse-agent :8082

A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability stems from insufficient validation of advertised IP addresses within EndpointSlice objects. A compromised spoke cluster can exploit this by creating EndpointSlices with...

CVE-2026-66787 Lighthouse: go pprof profiling endpoint enabled unconditionally on lighthouse-agent :8082

A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability stems from insufficient validation of advertised IP addresses within EndpointSlice objects. A compromised spoke cluster can exploit this by creating EndpointSlices with...

CVE-2026-70465

A buffer copy without checking size of input 'classic buffer overflow' vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.11 may allow an unauthenticated attacker in a position to alter or craft DNS responses to the targeted host to execute...

New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables

Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation NAT connection state to hijack active TCP sessions, spoof DNS responses, expose mapped ports, and exhaust NAT tables. Presented at Black Hat USA 2026, the research found...

Oracle Linux 9 : ELSA-2026-50108-0: / ldns (ELSA-2026-501080)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-501080 advisory. 1.7.1-12.1 - Fix CVE-2026-10846: DNS response spoofing via missing address/port/TXID and question section validation RHEL-210701 Tenable has extracted the...