EVIL-CVE-2021-23017-Update-2025

vulnerabilidad en servidores NGINX versiones 0.6.18–1.20.0. Los scripts tienen como objetivo causar una Denegación de Servicio DoS mediante el envío de respuestas DNS maliciosas, con mejoras para evadir firewalls. Esta es una versión mejorada del PoC original de M507/CVE-2021-23017-PoC. Advertenc...

malvinci

malvinci This simple script will introduce a new type of malware that will turn off the firewall, start an HTTP server, forward its port through ngrok, and send the URL of the server through a Telegram bot. You will need to create a new Telegram BOT. Follow the steps the steps here to create one⚡...

waf-community-bypasses

WAF community bypasses Web Application Firewalls a.k.a. WAF are garbage. All the vendors, from the cheapest Cloudflare to "enterpise" like Imperva, Akamai, F5, Checkpoint, or Fortinet are just cheating with their customers by delivering 0 actual protection. 99.9% of WAF signatures are just RegExp...

isowall

isowall これは、対象デバイスをローカルネットワークから完全に隔離するミニファイアウォールです。感染したマシンにインターネットアクセスを許可する一方で、ローカルネットワークを危険にさらさないためのものです。 ビルド このプロジェクトは libpcap と、もちろんCコンパイラに依存しています。 Debianでは、以下でうまくいくはずです。 root@kitploit: apt-get install git gcc make libpcap-dev git clone https://github.com/robertdavidgraham/isowall cd isowall...

Securekit

Securekit Securekit protects what your models execute—across any AI system. Securekit is a protocol-agnostic security kernel for AI tool execution. It sits between any LLM or agent system and the tools they use, enforcing zero-trust execution, sandbox isolation, and policy-driven control. It is...

ICMPTunnel

icmptunnel is a tool to tunnel IP traffic within ICMP echo request and response ping packets. It’s intended for bypassing firewalls in a semi-covert way, for example when pivoting inside a network where ping is allowed. It might also be useful for egress from a corporate network to the Internet,...

2024InformationSecurityEngineer

2024InformationSecurityEngineer 2024 Information Security Engineer, 2024InformationSecurityEngineer 2024 Second Half - Information Security Engineer Exam Question Recollection Soft Exam - Exam Date : 2024年11月08日 1. Firewall Packet Capture 14 points 1. Packet length 2 points Answer: 63 2. Is it a...

FencePost

FencePost Multi-host UFW firewall dashboard. Connects to Linux hosts over SSH, parses firewall rules and listening ports, explains everything in plain English, and flags security gaps. Features Multi-host overview -- see UFW status, default policies, and active services across all hosts at a...

CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check

CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-Check Check if your firewall is vulnerable to CVE-2024-21762 unauthenticated RCE For more information about the vulnerability: https://cuty.io/TKyfFh Subscribe or join my social networks for more HACKING!! Learn to detect the vulnerability and protect...

WindowsFirewallRuleset

Windows Firewall Ruleset Tabla de Contenidos Windows Firewall Ruleset Tabla de Contenidos Acerca de Windows Firewall Ruleset Reglas de firewall Marco de trabajo del firewall La visión de este firewall Licencia Requisitos Detalles de los requisitos No cumplo con los requisitos Usuario primerizo...

shadowd

Logotipo Shadow Daemon es un cortafuegos de aplicaciones web que intercepta las peticiones a nivel de aplicación. Este repositorio contiene el componente principal de Shadow Daemon que maneja el análisis y almacenamiento de peticiones. Documentación Para la documentación completa, consulte...

shadowd

Logo Shadow Daemon is a web application firewall that intercepts requests at the application level. This repository contains the main component of Shadow Daemon that handles the analysis and storage of requests. Documentation For the full documentation please refer to shadowd.zecure.org...

honssh

!!! This project is no longer maintained. !!! HonSSH https://github.com/tnich/honssh Copyright C 2016 Thomas Nicholson HonSSH is designed to be used in conjunction with a high interaction honeypot. HonSSH sits between the attacker and the honey pot and creates two separate SSH conncetions. Read t...

linux-explorer

This project is no longer maintained! Linux Expl0rer Easy-to-use live forensics toolbox for Linux endpoints written in Python & Flask. Capabilities ps View full process list Inspect process memory map & fetch memory strings easly Dump process memory in one click Automatically search hash in publi...

kemon

Kemon An Open Source Pre and Post Callback-based Framework for macOS Kernel Monitoring. Breaking News - 08/28/2019 macOS Catalina 10.15 Beta 7 Release Notes https://developer.apple.com/documentation/macosreleasenotes/macoscatalina1015beta7releasenotes Endpoint Security The kauth API has been...

firefox_tunnel

firefoxtunnel La forma de usar Firefox para crear un túnel hacia comunicación remota. Para E/S de payloads utiliza cookie.sqlite y HTML con JavaScript para auto-enviar, el navegador se ejecuta en modo oculto. Lea la documentación:...

CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPN

CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPN Herramienta de explotación para explotar la vulnerabilidad CVE-2024-24919 en las VPN de Checkpoint Firewall Instalación: root@kitploit: git clone https://github.com/r4p3c4/CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPN Requisitos:...

Cisco Secure Firewall ASA & FTD - Authentication Bypass

A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to access restricted URL endpoints that are related to remote access VPN that should...

pfSense - Arbitrary File Write

diagroutes.php in pfSense 2.5.2 allows sed data injection. Authenticated users are intended to be able to view data about the routes set in the firewall. The data is retrieved by executing the netstat utility, and then its output is parsed via the sed utility. Although the common protection...

Lotus Domino R5 and R6 WebMail - Information Disclosure

Lotus Domino R5 and R6 WebMail with 'Generate HTML for all fields' enabled which is by default allows remote attackers to read the HTML source to obtain sensitive information including the password hash in the HTTPPassword field, the password change date in the HTTPPasswordChangeDate field, and t...