iptables-essentials

Iptables Essentials: 일반적인 방화벽 규칙 및 명령어 ☑️ TODO 유용한 Iptables 구성 예제 추가 유용한 커널 설정 sysctl 구성 추가 유용한 외부 리소스 링크 추가 고급 구성 예제, 명령어, 규칙 추가 목차 Iptables 구성을 도와주는 도구 매뉴얼/하우투/튜토리얼 유용한 커널 설정 sysctl 구성 rpfilter logmartians sendredirects acceptsourceroute acceptredirects tcpsyncookies icmpechoignorebroadcasts...

fail2ban

root@kitploit: / | | | | / | | |/ /| ' / | ' \ || ,||/|./,|||| v1.1.0.dev1 20??/??/?? Fail2Ban: 여러 인증 오류를 유발하는 호스트 차단 Fail2Ban은 /var/log/auth.log와 같은 로그 파일을 스캔하여 너무 많은 실패한 로그인 시도를 수행하는 IP 주소를 차단합니다. 이는 시스템 방화벽 규칙을 업데이트하여 해당 IP 주소의 새 연결을 설정 가능한 시간 동안 거부함으로써 이루어집니다. Fail2Ban은 sshd 및 Apache와 같은 많은...

gibson

Gibson プロセスとネットワーク接続のマッピング、クラウドプロバイダーの識別、ファイアウォールルールの生成を行うネットワーク監視ツール。収集用の軽量エージェント、集約用のサーバー、分析用のパーサーを備えています。 スクリーンショット マシン間の概要 — OSバージョン比較、共有IP検出、全ホストにわたるビーコン候補: ホスト別詳細 — クリティカルアラート EOL OS、nc.exe が不明IPにビーコン: ホスト別詳細 — 警告 ビーコン候補がフラグ: ホスト別詳細 — 正常 異常なし: 機能 コレクター エージェント 🔒 セキュア : オプションのAES-256-GCM暗号化 🗜️...

firewall-cve

firewall-cve Windows AppContainer ファイアウォール規則のセキュリティ機能バイパスの脆弱性 CVE-2021-41338 セキュリティ脆弱性 公開日: 2021年10月12日 CNA割当: Microsoft MITRE CVE-2021-41338 CVSS:3.1 5.5 / 5.0 攻撃ベクトル ローカル 攻撃の複雑さ 低 必要な権限 低 ユーザー操作 なし 影響の範囲 変更なし 機密性への影響 高 完全性への影響 なし 可用性への影響 なし エクスプロイトコードの成熟度 概念実証 修正レベル 公式修正 報告の信頼性 確認済み...

Firewall-Rules

此存储库没有 README。...

Reachability-Check

到達可能性チェック 🌐 EN | TR ブラウザベースの到達可能性チェッカー — ネットワーク接続、ファイアウォールルール、アクセス制限をテストします。 単一HTMLファイル。依存関係ゼロ。実行にウェブサーバーは不要。 特徴 二重測定: HTTP Fetch + Image Ping（各サービスの独自ファビコン経由） サービスパック: JSONベース、コミュニティによる拡張可能 RuleCheck: 企業ネットワークポリシーの監査 — アクセス可能/ブロックされるべき + ピングしきい値 フィルタリングとグループ化:...

stop-bots

Stop Bots A TUI, a web UI and a CLI that help you configure your server to stop bad bots without hiding behind a CDN. It works alongside NGINX and your existing firewall iptables or nftables: NGINX config. - It classifies known bots by category scanners, search engines, AI crawlers and blocks or...

CVE-2026-56127

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewallrulesedit.php. The firewall rule description is stored in the pfSense XML configuration with only backslash-escaping...

EUVD-2026-70496

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewallrulesedit.php. The firewall rule description is stored in the pfSense XML configuration with only backslash-escaping...

CVE-2026-56127 pfSense Plus < 26.07 / CE < 2.9.0 Stored XSS via firewall_rules_edit.php

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewallrulesedit.php. The firewall rule description is stored in the pfSense XML configuration with only backslash-escaping...

PT-2026-85052

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewall rules edit.php. The firewall rule description is stored in the pfSense XML configuration with only backslash-escapin...

PT-2026-85053

pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Schedules: Edit privilege to inject arbitrary JavaScript via the descr parameter in /firewall schedule edit.php. The schedule description is stored without HTML sanitization and subsequently inserted into a...

CVE-2026-51720

Incorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to remove firewall filter rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83898

Incorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to remove firewall filter rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51720

Incorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to remove firewall filter rules via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 17, 2026 to August 23, 2026)

Last week, there were 274 vulnerabilities disclosed in 213 WordPress Plugins and 17 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 116 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabiliti...

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 3, 2026 to August 9, 2026)

Last week, there were 294 vulnerabilities disclosed in 233 WordPress Plugins and 14 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 149 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabiliti...

CVE-2026-56846

A flaw was found in Node.js's handling of HTTP/2. This vulnerability allows a remote attacker to bypass maxSessionMemory limits by sending specially crafted HTTP/2 retained header blocks. This can lead to memory exhaustion, resulting in a denial of service DoS for the affected system. Mitigation ...

CVE-2026-20028

A vulnerability in the network driver of Cisco Terminal Service TS Agent could allow an authenticated, remote attacker to bypass firewall rules that are associated with the account of the attacker. This vulnerability is due to an incorrect mapping of network connections to user accounts. An...

CVE-2026-20028 Cisco Terminal Services Agent Firewall Rules Bypass Vulnerability

A vulnerability in the network driver of Cisco Terminal Service TS Agent could allow an authenticated, remote attacker to bypass firewall rules that are associated with the account of the attacker. This vulnerability is due to an incorrect mapping of network connections to user accounts. An...