onionscan

Что такое OnionScan? OnionScan — это бесплатный инструмент с открытым исходным кодом для исследования Тёмной сети. Несмотря на все удивительные технологические инновации в области анонимности и конфиденциальности, всегда существует постоянная угроза, для которой нет эффективного технологического...

terminalphone

TerminalPhone Tor 히든 서비스를 통한 암호화된 푸시투토크 음성 통신. TerminalPhone은 Tor 네트워크를 통해 둘 이상의 당사자 간에 익명의 종단 간 암호화 음성 및 텍스트 통신을 제공하는 단일 자체 포함 Bash 스크립트입니다. 워키토키 방식으로 작동합니다: 음성 메시지를 녹음하면 압축, 암호화되어 단일 단위로 원격 당사자에게 전송됩니다. 통화 중에는 암호화된 텍스트 메시지도 보낼 수 있습니다. 서버 인프라, 계정, 전화번호가 필요 없습니다. Tor 히든 서비스 .onion 주소가 곧 당신의 신원입니다...

tor-rootkit

tor-rootkit A Python 3 standalone Windows 10 / Linux Rootkit. The networking communication get's established over the tor network. This rootkit is WIP. Disclaimer Use for educational purposes only. How to use 1. Clone the repo and change directory: root@kitploit: git clone...

tornado

tornado onion 네트워크를 통해 숨겨진 서비스를 이용하는 익명 리버스 셸 포트 포워딩 불필요 문서 살펴보기 완전히 탐지되지 않는 리버스 셸 · 데모 보기 · 무적의 익명성 목차 1. tornado란 무엇인가? 2. 사용된 기술 3. 시작하기 설치 4. 사용법 5. 로드맵 6. 기여하기 7. 라이선스 8. 면책 조항 운영 체제 호환성 문제가 있으면 알려주세요. 가능한 빨리 수정하도록 하겠습니다. 문서를 살펴보세요. tornado란 무엇인가? Tornado는 Tor 네트워크를 Metasploit-framework 도구 및...

xtor

xtor Tor 인스턴스를 프로그래밍 방식으로 관리하는 Python 라이브러리입니다. 기능 새 Tor 프로세스 시작 또는 기존 프로세스에 연결 SOCKS5 프록시가 포함된 사전 구성된 httpx 클라이언트 동기 + 비동기 새 IP를 기다리는 옵션을 포함한 ID 회전 트래픽 분리를 위한 스트림 격리 회로 및 스트림 관리 종료 노드 정보 국가, 대역폭, 플래그 임시 히든 서비스 .onion 이벤트 리스너 회로, 스트림, 대역폭 이벤트 라운드 로빈 및 무작위 선택을 지원하는 여러 인스턴스 관리를 위한 TorPool CLI 관리를...

CVE-2026-35465 SecureDrop Client has path injection in read_gzip_header_filename()

SecureDrop Client is a desktop app for journalists to securely communicate with sources and handle submissions on the SecureDrop Workstation. In versions 0.17.4 and below, a compromised SecureDrop Server can achieve code execution on the Client's virtual machine sd-app by exploiting improper...

CVE-2019-25249

devolo dLAN 500 AV Wireless+ 3.1.0-1 contains an authentication bypass vulnerability that allows attackers to enable hidden services through the htmlmgr CGI script. Attackers can enable telnet and remote shell services, reboot the device, and gain root access without a password by manipulating...

CVE-2019-25249 devolo dLAN 500 AV Wireless+ 3.1.0-1 Remote Code Execution via htmlmgr

devolo dLAN 500 AV Wireless+ 3.1.0-1 contains an authentication bypass vulnerability that allows attackers to enable hidden services through the htmlmgr CGI script. Attackers can enable telnet and remote shell services, reboot the device, and gain root access without a password by manipulating...

CVE-2019-25249

The vulnerability CVE-2019-25249 affects devolo dLAN 500 AV Wireless+ (firmware 3.1.0-1). The issue is an authentication bypass in the htmlmgr CGI script, allowing an attacker to enable hidden services (e.g., telnet, remote shell) and reboot the device to gain root access without a password by ma...

CVE-2019-25249 devolo dLAN 500 AV Wireless+ 3.1.0-1 Remote Code Execution via htmlmgr

devolo dLAN 500 AV Wireless+ 3.1.0-1 contains an authentication bypass vulnerability that allows attackers to enable hidden services through the htmlmgr CGI script. Attackers can enable telnet and remote shell services, reboot the device, and gain root access without a password by manipulating...

PT-2025-53335

Name of the Vulnerable Software and Affected Versions devolo dLAN 500 AV Wireless+ version 3.1.0-1 Description The device contains a flaw that allows attackers to bypass authentication and enable hidden services through the htmlmgr CGI script. Attackers can enable services like telnet and remote...

Devolo dLAN 500 AV Wireless+ 安全漏洞

The Devolo dLAN 500 AV Wireless+ is a powerline communication adapter from Devolo, Germany. A security vulnerability exists in the Devolo dLAN 500 AV Wireless+ version 3.1.0-1, which stems from an authentication bypass that could result in enabling hidden services and gaining root privileges...

Time Will Tell: Large-Scale De-Anonymization of Hidden I2P Services Via Live Behavior Alignment (Extended Version)

I2P Invisible Internet Project is a popular anonymous communication network. While existing de-anonymization methods for I2P focus on identifying potential traffic patterns of target hidden services among extensive network traffic, they often fail to scale effectively across the large and diverse...

EUVD-2014-5015

Malware in sbrugna...

EUVD-2021-3132

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-36325

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2p before 2.3.0 Java allows de-anonymizing the public IPv4 and IPv6 addresses of i2p hidden services aka eepsites via a correlation attack across the IPv4 and...

Hunting the Ghost: Towards Automatic Mining of IoT Hidden Services

In this paper, we proposes an automatic firmware analysis tool targeting at finding hidden services that may be potentially harmful to the IoT devices. Our approach uses static analysis and symbolic execution to search and filter services that are transparent to normal users but explicit to...

Snorkeling in Dark Waters: a Longitudinal Surface Exploration of Unique Tor Hidden Services (Extended Version)

The Onion Router Tor is a controversial network whose utility is constantly under scrutiny. On the one hand, it allows for anonymous interaction and cooperation of users seeking untraceable navigation on the Internet. This freedom also attracts criminals who aim to thwart law enforcement...

CVE-2025-24888

The CVE-2025-24888 issue affects the SecureDrop Client, specifically the API.download_reply() path traversal flaw. The vulnerability arises from using the filename in the Content-Disposition header to write the encrypted reply to disk; although server-side filenames are sanitized, the file can be...

UBUNTU-CVE-2023-36325

i2p before 2.3.0 Java allows de-anonymizing the public IPv4 and IPv6 addresses of i2p hidden services aka eepsites via a correlation attack across the IPv4 and IPv6 addresses that occurs when a tunneled, replayed message has a behavior discrepancy it may be dropped, or may result in a Wrong...