nexmon

nexmon とは? Nexmon は、Broadcom/Cypress WiFi チップ向けの C 言語ベースのファームウェアパッチフレームワークです。これを使用すると、例えば radiotap ヘッダー付きモニターモードやフレームインジェクションを有効にするなど、独自のファームウェアパッチを作成できます。 以下に、nexmon で可能なことの概要を示します。このリポジトリは主に、多くのチップでモニターモードとフレームインジェクションを有効にすることに焦点を当てています。追加機能が必要な場合は、次のプロジェクトが参考になるかもしれません: http://nexmon.org/jamme...

rtl8812au

RTL8812AU/21AU and RTL8814AU linux driver with monitor mode and frame injection The master branch is based on https://github.com/ulli-kroll/rtl8821au branch v4.3.22-beta/rework. According to rtwversion.c the real driver version is 4.3.20. The branch v4.3.21 may be built for RTL8814AU or...

r00kie-kr00kie

r00kie-kr00kie 면책 조항 이것은 CVE-2019-15126 kr00k 취약점에 대한 PoC 익스플로잇입니다. 이 프로젝트는 오직 교육 목적으로만 제공되며, 법 위반이나 개인 이익을 위해 사용될 수 없습니다. 이 프로젝트의 저자는 자료로 인해 발생할 수 있는 모든 피해에 대해 책임을 지지 않습니다. 요구 사항 이 스크립트를 사용하려면 프레임 인젝션이 가능한 액티브 모니터 모드를 지원하는 WiFi 카드가 필요합니다. 코드를 개발하고 테스트하는 데 사용한 Atheros AR9280 칩IEEE 802.11n을 권장합니다....

CVE2026-42926

CVE-2026-42926 NGINX HTTP/2 Frame Injection Lab A controlled cybersecurity lab for validating and comparing behavior related to CVE-2026-42926 , an HTTP/2 frame injection issue affecting specific NGINX versions when a vulnerable proxy configuration is used. This repository is intended for defensi...

fracture

Fracture FragAttacks WiFi Penetration Framework CVE-2020-24586 / CVE-2020-24587 / CVE-2020-24588 Fracture automates three novel attack chains via 802.11 frame injection. It exploits the A-MSDU aggregation vulnerability in WPA2/WPA3 to inject arbitrary plaintext frames into encrypted networks —...

RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr

Summary A critical stream desynchronization vulnerability has been identified in the AMQP wire-protocol parser. When parsing a long string readLongstr within a table field, providing a length that exceeds the maximum signed 32-bit integer 2^31 - 1, or roughly 2.1 GiB triggers an improper...

CVE-2026-77411 RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, readLongstr in read.go returns an empty string and a nil error when a declared AMQP longstr length exceeds 0x7FFFFFFF instead of returning ErrSyntax. The function leaves the declared field bytes unread, while readTable treats the...

CVE-2026-77411

RabbitMQ amqp091-go (a Go AMQP 0.9.1 client) is vulnerable to protocol desynchronization and frame injection in versions prior to 1.13.0 . The root cause is in readLongstr (read.go): when a declared AMQP longstr length exceeds 0x7FFFFFFF, the function returns an empty string and a nil error inste...

CVE-2026-77411 RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, readLongstr in read.go returns an empty string and a nil error when a declared AMQP longstr length exceeds 0x7FFFFFFF instead of returning ErrSyntax. The function leaves the declared field bytes unread, while readTable treats the...

CVE-2026-77411 RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, readLongstr in read.go returns an empty string and a nil error when a declared AMQP longstr length exceeds 0x7FFFFFFF instead of returning ErrSyntax. The function leaves the declared field bytes unread, while readTable treats the...

Astra Linux – Vulnerability in Linux 6.1

IEEE P802.11-REVme D1.1 through D7.0 allow FragAttacks against mesh networks. In mesh networks that use Wi-Fi Protected Access WPA, WPA2, or WPA3 or Wired Equivalent Privacy WEP, an adversary can exploit this vulnerability to inject arbitrary frames towards devices that support receiving non-SSP...

Astra Linux – Vulnerability in Linux

A issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implementations allow fragmented plaintext frames to be transmitted in a protected Wi-Fi network. An adversary can exploit this vulnerability to inject arbitrary data frames independently...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel versions 5.8 through 5.19.x, prior to 5.19.16, local attackers who were able to inject WLAN frames into the mac80211 stack could carry out a NULL pointer dereferencing denial-of-service attack against the beacon protection of P2P devices...

CVE-2026-54511

LogTape is an unobtrusive logging library. Prior to 1.3.11, 2.0.14, and 2.1.5, the @logtape/syslog package's escapeStructuredDataValue function in packages/syslog/src/syslog.ts does not neutralize C0 control characters from U+0000 through U+001F in structured data values, and formatStructuredData...

USN-8666-2 linux-azure-5.4, linux-azure-fips vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

CVE-2026-42926

A flaw was found in NGINX Open Source. When NGINX is configured to proxy HTTP/2 traffic and uses proxysetbody, a remote attacker may be able to inject malicious data into the upstream peer. This could lead to unintended data manipulation or bypass of security controls. Mitigation To mitigate this...

CVE-2026-61634 RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_max

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, the AMQP connection tuning path records the negotiated AMQP framemax value, but src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java and...

CVE-2026-60113

AMMOS Instrument Toolkit AIT Deep Space Network DSN Interface before 2.2.2 contains a missing authentication vulnerability in the Space Link Extension SLE interface manager that allows unauthenticated network attackers to access seven unprotected API routes by sending direct HTTP requests with no...

CVE-2026-60113

AMMOS Instrument Toolkit AIT Deep Space Network DSN Interface before 2.2.2 contains a missing authentication vulnerability in the Space Link Extension SLE interface manager that allows unauthenticated network attackers to access seven unprotected API routes by sending direct HTTP requests with no...

CVE-2026-60113 AIT-DSN < 2.2.2 Missing Authentication via SLE API Routes

AMMOS Instrument Toolkit AIT Deep Space Network DSN Interface before 2.2.2 contains a missing authentication vulnerability in the Space Link Extension SLE interface manager that allows unauthenticated network attackers to access seven unprotected API routes by sending direct HTTP requests with no...