4464 matches found
CVE-2023-44487
Rapid Reset Client Rapid Reset Client is a tool for testing mitigations and exposure to CVE-2023-44487 rapid reset DDoS attack vector. It implements a minimal HTTP/2 client that opens a single TCP socket, negotiates TLS, ignores the certificate, and exchanges SETTINGS frames. The client then send...
dBmonster
With dBmonster, you are able to scan for nearby WiFi devices and track them through the signal strength dBm of their sent packets. Therefore, you can identify the exact location of nearby WiFi devices use a directional WiFi antenna for the best results or find out in which direction your self mad...
Envoy-CPU-Exhaustion-Vulnerability-PoC
Envoy CPU Exhaustion Vulnerability PoC This repository contains a proof-of-concept PoC Python script to demonstrate the CPU exhaustion vulnerability in Envoy caused by a flood of CONTINUATION frames. Author: blackmagic 2024 Description Envoy is a cloud-native, open-source edge and service proxy...
GHOST
GHOST General Hacking & Observation Security Tool Standalone WPA/WPA2 handshake capture firmware for the Adafruit ESP32-S3 Reverse TFT Feather : built-in 240×135 TFT and three buttons — no companion phone app or browser required for normal use. Captures are saved as .pcap on LittleFS; Captures →...
http2-bomb
HTTP/2 Bomb — CVE-2026-49975 HTTP/2 Stream Amplification PoC · Docker · Web Console Vulnerability HTTP/2 allows multiplexing multiple streams over a single TCP connection. This PoC crafts specially formed HEADERS frames containing a large number of internal references, forcing the server to...
WPAxFuzz
A full-fledged Wi-Fi Fuzzer Report Bug · Request Feature Table of Contents 1. About The Project 2. Fuzz Management and Control and Data Frames Requirements and Dependencies Description 3. Fuzz SAE-exchange 4. DoS attack module Description 5. Vulnerabilities 6. Related Work 7. License 8. Contact 9...
zizzania
zizzania zizzania sniffs wireless traffic listening for WPA handshakes and dumping only those frames suitable to be decrypted one beacon + EAPOL frames + data. In order to speed up the process, zizzania sends IEEE 802.11 DeAuth frames to the stations whose handshake is needed, properly handling...
undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames
A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion,...
wifi-monitor
wifi-monitor Prints the IPs on your local network that're sending the most packets ack = 802.11 control frame acknowledgement or block acknowledgement req = 802.11 control frame request to send clear = 802.11 control frame clear to send data = QoSData or Data Options: -j: prints new devices that...
undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames
A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion,...
GhostTunnel
GhostTunnel GhostTunnel is a covert backdoor transmission method that can be used in an isolated environment. It can attack the target through the HID device only to release the payload agent, then the HID device can be removed after the payload is released. GhostTunnel use 802.11 Probe Request...
CVE-2026-87437
Information leak in Frames in Google Chrome prior to 153.0.8010.36 all...
cve-2023-44487-demo
⚡ CVE-2023-44487 Demo – HTTP/2 Rapid Reset Attack This project demonstrates the HTTP/2 "Rapid Reset" vulnerability CVE-2023-44487 that allows attackers to overwhelm servers using RSTSTREAM frames, causing denial-of-service DoS. It includes: ✅ Exploit test using Golang-based tool ✅ Vulnerable Apac...
DEBIAN-CVE-2026-87437
Information leak in Frames in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87437
Information leak in Frames in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...
net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame
A flaw was found in the HTTP/2 protocol implementation within the Go standard library golang.org/x/net and net/http/internal/http2. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGSMAXFRAMESIZE parameter set to zero. This...
skylift
SkyLift V0.4 Will be posted June 15 python3 click easier to use CLI parser workflow fix timestamp SkyLift V0.3 SkyLift is a low-cost geolocation spoofing device. It currently uses the ESP8266 to broadcast WiFi Beacon Frames to exploit a longstanding 2008 vulnerability in WiFi geolocation services...
CVE-2025-69822-Atomberg_Erica_SmatFan_Security_Assessment
CVE-2025-69822-AtombergEricaSmatFanSecurityAssessment This vulnerability impacts device availability and reliable operation of Atomberg Erica Smart FanFirmware Version 1.0.36. The issue arises due to a lack of protection mechanisms against forged deauthentication frames and lack of fallback or...
CVE-2026-87437
CVE-2026-87437 is an information leak in the Frames component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can exploit it via a crafted HTML page to leak sensitive information. Chromium rates the severity as Low , while the assigned CVSS 3.1 score is 6.5 (MEDIUM) with high ...
