ettercap

A suite for man in the middle attacks Copyright 2001-Current The Ettercap Dev Team INTRODUCTION Ettercap is a comprehensive suite for man in the middle attacks. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. It supports active and passive...

ofp_sniffer

OFPSniffer is an OpenFlow sniffer to be used for troubleshooting and learning purposes. Currently on version 1.2, it dissects all OpenFlow 1.0 messages, works with InfluxDB, Grafana, and Slack. OpenFlow 1.3 will be available on OFPSniffer version 1.3 to be released soon. It works directly on Linu...

polymorph

Polymorph Polymorph is a tool that facilitates the modification of network traffic on the fly by allowing the execution of Python code on network packets that are intercepted in real time. This framework can be used to modify in real time network packets that implement any publicly specified...

ratbag-toolbox

ratbag-toolbox Random reverse engineering knowledge and tools Instructions See our wiki page. Overview Dissectors Protocol| Version| Name ---|---|--- HID++| 1.0/2.0| hidpp-dissector.lua Dumps Brand| Model| Description| Driver| Name| Notes ---|---|---|---|---|--- Logitech| G500| Init sequence|...

malware-samples

malware-samples A collection of malware samples and relevant dissection information, most probably referenced from http://blog.inquest.net or https://twitter.com/inquest. Be sure to also check out the Deep File Inspection DFI portion of https://labs.inquest.net for an interactive searchable...

CVE-2026-80905

A flaw was found in the kernel. When processing VLAN-tagged frames, the network header is incorrectly advanced past the VLAN tag before the transport header is probed. This misinterprets the inner protocol header as a VLAN header, resulting in an uninitialized transport header. This issue can lea...

CLSA-2026-1786718192 wireshark: Fix of 2 CVEs

CVE-2023-5371: RTPS dissector: reject offset additions that move the offset backwards to prevent an excessive dissection loop...

Astra Linux – Vulnerability in Wireshark

In Wireshark versions 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash. This issue was addressed in the epan/dissectors/packet-bacapp.c file by limiting the amount of recursion...

AlmaLinux 9.6 [TuxCare] Security Update: wireshark / wireshark-cli / wireshark-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1785564050)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785564050 advisory. - Dissection engine zlib decompression crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service CVE-2026-6535 ...

Friday Squid Blogging: Participatory Squid Dissection in October in Tennessee

I feel like someone who reads this blog will want to go to this: Families are invited to dive into the fascinating world of marine biology during an exciting, hands-on Family Squid Dissection at the Hands-On Science Center. Designed for curious learners of all ages, this unique experience combine...

EUVD-2026-86926

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: restore network header before routing and forwarding ipv6srhrcv runs with skb-data at the Segment Routing Header SRH while skbnetworkheader points at the IPv6 header. When segmentsleft 0, ipv6srhrcv previously restored...

CVE-2026-98096: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: restore network header before routing and forwarding ipv6srhrcv runs with skb-data at the Segment Routing Header SRH while skbnetworkheader points at the IPv6 header. When segmentsleft 0, ipv6srhrcv previously restored...

CVE-2026-98096

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: restore network header before routing and forwarding ipv6srhrcv runs with skb-data at the Segment Routing Header SRH while skbnetworkheader points at the IPv6 header. When segmentsleft 0, ipv6srhrcv previously restored...

Astra Linux – Vulnerability in Wireshark

A bug in the dissection engine exists in Wireshark versions 4.0.0 to 4.0.2, and 3.6.0 to 3.6.10, which allows denial of service through packet injection or malicious capture files...

Astra Linux – Vulnerability in Wireshark

The Dissection engine’s zlib decompression function crashes in Wireshark versions 4.6.0 to 4.6.4, and 4.4.0 to 4.4.14, causing denial of service...

Astra Linux – Vulnerability in Wireshark

The Dissection engine LZ77 decompression function in Wireshark versions 4.6.0 to 4.6.4, and 4.4.0 to 4.4.14 experiences denial-of-service attacks...

CVE-2026-80905

In the Linux kernel, the following vulnerability has been resolved: net: tap: fix wrong transportheader when sending VLAN-tagged frame In tapgetuserxdp, when processing a VLAN-tagged frame e.g. ETHP8021Q, skbsetnetworkheader is called first to advance networkheader past the VLAN tag to the inner...

EUVD-2026-71665

In the Linux kernel, the following vulnerability has been resolved: net: packet: fix wrong transportheader when sending VLAN-tagged frame In packetparseheaders, when processing a VLAN-tagged frame, skbsetnetworkheader is called to advance networkheader past the VLAN tag to the inner protocol...

CVE-2026-80905 net: tap: fix wrong transport_header when sending VLAN-tagged frame

In the Linux kernel, the following vulnerability has been resolved: net: tap: fix wrong transportheader when sending VLAN-tagged frame In tapgetuserxdp, when processing a VLAN-tagged frame e.g. ETHP8021Q, skbsetnetworkheader is called first to advance networkheader past the VLAN tag to the inner...

CVE-2026-80905

Linux kernel tap driver vulnerability in tap_get_user_xdp(). When processing VLAN-tagged frames (e.g., ETH_P_8021Q), skb_set_network_header() was called before skb_probe_transport_header(), causing the flow dissector to misinterpret the inner protocol header (e.g., an IP header) as a VLAN header....