gori

Piratez depuis le terminal. Installation • Utilisation • Documentation • Contribution gori 고리 — mot coréen pour anneau, lien, boucle se place dans la boucle entre votre client et sa cible, capturant chaque requête et réponse sous forme de flux que vous pouvez rejouer, fuzzer et scanner sur...

golang-CVE-2023-44487

اختبار Golang CVE-2023-44487 يحتوي هذا المستودع على موارد اختبار ونتائج لـ CVE-2023-44487. يستخدم نسخة معدلة من https://github.com/secengjeff/rapidresetclient لاختبار تكوينات خادم Golang المختلفة. الاختبار ضد خادم عادي go run server.go go run attacker.go -requests 500000 النتائج go 1.21.0 350% CP...

CVE2026-42926

CVE-2026-42926 Laboratoire d'injection de trames HTTP/2 NGINX Un laboratoire de cybersécurité contrôlé pour valider et comparer le comportement lié à CVE-2026-42926 , un problème d'injection de trames HTTP/2 affectant des versions spécifiques de NGINX lorsqu'une configuration de proxy vulnérable...

nice-cve-poc

Nice CVE PoCs Une collection de PoCs CVE intéressants CVE-2023-44487 - HTTP/2 Rapid Reset Attack...

CVE-2023-44487

Rapid Reset Client Rapid Reset Client هي أداة لاختبار التخفيفات والتعرض لـ CVE-2023-44487 ناقل هجوم DDoS لإعادة التعيين السريع. تنفذ عميل HTTP/2 أدنى يفتح مقبس TCP واحد، ويتفاوض TLS، ويتجاهل الشهادة، ويتبادل إطارات CONFIGURATION. ثم يرسل العميل إطارات HEADERS سريعة متبوعة بإطارات RSTSTREAM. يراقب...

midonescanner-android

MidONe Scanner اسکنر حرفه‌ای آی‌پی تمیز CDN · CLOUDFLARE · DNS ⬇️ دانلود APK · 🖥️ دانلود Windows · 📣 کانال تلگرام 🔍 چرا MidONe Scanner؟ بیشتر ابزارهای اسکن IP فقط یک ping ساده می‌زنند — عددی که هیچ ربطی به سرعت واقعی اتصال ندارد. MidONe Scanner متفاوت است: داده واقعی دانلود می‌کند. سرعتی که اپ نشان...

CVE-2026-107938

In Apache CXF, the Netty-based HTTP client transport cxf-rt-transports-http-netty-client did not verify that the hostname in the server’s TLS certificate matched the host being called. This applied over both HTTP/1.1 and HTTP/2, even when disableCNCheck was left at its default value of false. The...

CVE-2026-107938

The Apache CXF project's Netty-based HTTP client transport (cxf-rt-transports-http-netty-client ) fails to perform TLS hostname verification over both HTTP/1.1 and HTTP/2. While the certificate chain is validated against a trust store, the software does not verify that the certificate's hostname ...

EUVD-2026-95703

In Apache CXF, the Netty-based HTTP client transport cxf-rt-transports-http-netty-client did not verify that the hostname in the server’s TLS certificate matched the host being called. This applied over both HTTP/1.1 and HTTP/2, even when disableCNCheck was left at its default value of false. The...

CVE-2026-107938 Apache CXF: The Netty HTTP client transport does not perform TLS hostname verification.

In Apache CXF, the Netty-based HTTP client transport cxf-rt-transports-http-netty-client did not verify that the hostname in the server’s TLS certificate matched the host being called. This applied over both HTTP/1.1 and HTTP/2, even when disableCNCheck was left at its default value of false. The...

CVE-2026-11118-HTTP-2-Rapid-Reset-DDoS

CVE-2026-11118 – Attaque DDoS par réinitialisation rapide HTTP/2 Code du programme client + serveur Python/http2 http2serversim.py - Simple HTTP/2 server that processes reset streams import socket, ssl, h2.connection, h2.events def handle: sock = socket.socket sock.setsockoptsocket.SOLSOCKET,...

h2buster

h2buster v0.4d أداة مسح سريعة، متعددة الخيوط، متكررة، لقوائم الدلائل على الويب عبر HTTP/2 باستخدام hyper، مستوحاة من Gobuster. الميزات سريعة وقابلة للنقل - قم بتثبيت hyper وشغّلها. مسح متعدد الاتصالات. اتصالات متعددة الخيوط. قابلة للتوسع: يمكن أن تكون عمليات المسح هادئة أو عدوانية حسب تكوينك. دعم...

h2buster

h2buster v0.4d A fast, threaded, recursive, web directory brute-force scanner over HTTP/2 using hyper, inspired by Gobuster. Features Fast and portable - install hyper and run. Multiconnection scanning. Multithreaded connections. Scalable: scans can be as docile or aggressive as you configure the...

CVE-2026-32136_exploit

CVE-2026-32136exploit - تجاوز المصادقة عبر ترقية h2c في AdGuard Home تجاوز مصادقة غير موثّق في AdGuard Home 0.107.73 عبر ترقية HTTP/2 بنص واضح h2c. | ---|--- CVE| CVE-2026-32136 CVSS| 9.8 حرجة — AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-287 مصادقة غير صحيحة المتأثر| AdGuard Home 0.107.73 تم...

Linux Distros Unpatched Vulnerability : CVE-2026-97032

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder...

Linux Distros Unpatched Vulnerability : CVE-2026-78669

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS...

CVE-2026-78663

A flaw was found in Go's HTTP/2 server implementation. A remote attacker can bypass connection-level flow control limits—mechanisms that regulate incoming network data—potentially causing excessive memory consumption and a Denial of Service DoS. This issue occurs because the server improperly...

CVE-2026-97032

A flaw was found in Go's net/http package. A remote attacker can cause a Denial of Service DoS by crashing the HTTP/2 server. Due to missing synchronization, the server concurrently modifies its HPACK HTTP/2 header compression encoder when encoding response headers while processing incoming table...

CVE-2026-78669

A flaw was found in the Go net/http package. This flaw allows a remote attacker to cause a Denial of Service DoS by triggering excessive CPU consumption on an affected client or server. By opening a large number of HTTP/2 streams and repeatedly sending small configuration SETTINGS frames that...

CVE-2026-97032

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...