ipeeyoupeewepee

ipeeyoupeewepee Un escáner y suite de ataque para hosts en internet público principalmente routers Cisco que reenvían paquetes no autenticados encapsulados en los protocolos IP-in-IP y GRE. Esta vulnerabilidad, conocida como "Insecure Implementation of Tunneling Protocols", está rastreada bajo...

CVE-2026-14840

CVE-2026-14840 — YOP Poll 7.0.6 Vote Limit Bypass Author: nullwhisper Use case: authorized security research / vulnerability validation only. What is this? YOP Poll plugin versions 7.0.6 enforce a one-vote-per-IP limit. The problem is that to obtain the client IP it checks HTTPCLIENTIP and...

CVE-2021-40438

CVE-2021-40438 Apache forward request CVE CVE-2021-40438: A crafted request uri-path can cause modproxy to forward the request to an origin server chosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier. This CVE could be used to spoof the original IPs in DoS attacks...

dontgo403

dontgo403은 40X 오류를 우회하는 도구입니다. 설치 최신 릴리즈를 운영체제에 맞게 RELEASES에서 받으세요 현재 구식입니다 또는 직접 컴파일하세요 권장: root@kitploit: git clone https://github.com/devploit/dontgo403; cd dontgo403; go get; go build 사용자 정의 새로운 우회 방법을 편집하거나 추가하려면 payloads 폴더의 해당 파일에 직접 추가하면 도구가 이를 사용합니다. 옵션 root@kitploit: ./dontgo403 -h...

burpsuiefakeip

https://github.com/TheKingOfDuck/burpFakeIP 에서 전재 BurpFakeIP burpsuite IP 위조, 저는 진지합니다. 네 가지 작은 기능 지정 IP 위조 로컬 IP 위조 랜덤 IP 위조 랜덤 IP 브루트포스 0x01 지정 IP 위조 Repeater 모듈에서 마우스 오른쪽 버튼을 클릭해 fakeIp 메뉴를 선택한 다음 inputIP 기능을 클릭하고 지정된 IP를 입력합니다: 프로그램이 위조 가능한 모든 필드를 요청 헤더에 자동으로 추가합니다. 0x02 로컬 IP 위조 Repeater 모듈에...

Nac_Bypass_Agent

Agente de Bypass de Nac Este fragmento de código es un script escrito en Python y diseñado para ejecutarse en Kali Linux. A continuación, se presenta un resumen que explica qué hace cada función: runcommandcommand: Esta función ejecuta el comando que recibe como entrada y devuelve su salida...

Cisco-SNMP-Slap

OVERVIEW cisco-snmp-slap يستخدم انتحال عنوان IP لتجاوز قائمة التحكم بالوصول ACL التي تحمي خدمة SNMP على جهاز Cisco IOS. عادةً ما يكون انتحال IP ذا فائدة محدودة في الهجمات الحقيقية خارج نطاق هجمات حجب الخدمة DoS. لا يمكن لأي خدمة TCP إكمال المصافحة الأولية. أما حزم UDP فمن الأسهل انتحالها، لكن...

Dosinator

DoSinator DoSinator ist ein leistungsstarkes Tool zum Testen von Denial-of-Service-Angriffen DoS, das in Python entwickelt wurde. Es wurde für Sicherheitsexperten und Forscher konzipiert und ermöglicht es ihnen, verschiedene DoS-Angriffe zu simulieren. Damit bietet es eine realistische Umgebung z...

CVE-2023-4631

CVE आईडी : CVE-2023-4631 भेद्यता प्रकार : आईपी पता स्पूफिंग विवरण : वर्डप्रेस के लिए DoLogin Security प्लगइन संस्करण 3.6 तक और इसमें शामिल, आईपी पता स्पूफिंग के प्रति संवेदनशील है। यह इस कारण है कि अनुरोध लॉगिंग और लॉगिन प्रतिबंधों के लिए आईपी पता जानकारी कहाँ से प्राप्त की जा रही है, इस पर...

CVE-2022-46169

CVE-2022-46169 Execução Remota de Código Cega no Cacti Pré-Autenticação Aviso Legal Isso é apenas para fins educacionais. Não sou responsável por suas ações. Use por sua conta e risco. Explicação Este script realiza força bruta nas variáveis necessárias para explorar esta vulnerabilidade. Este...

CVE-2026-37432

CVE-2026-37432 Posizione: Apiutil.java: 107-113 Principio: fidarsi direttamente dell'header di richiesta X-Forwarded-For, che può essere falsificato per manipolare gli indirizzi IP. Metodo di sfruttamento: X-Forwarded-For: 127.0.0.1...

fireprox

FireProx Panoramica Vantaggi Avvertenze Manutentore Crediti Utilizzo Base Installazione Screenshot Contribuire Panoramica Potere nascondere o ruotare continuamente l'indirizzo IP di origine quando si effettuano chiamate web può essere difficile o costoso. Esistono diversi strumenti da tempo, ma...

CVE-2025-12720

g-FFL Cockpit = 1.7.1 - Eliminazione arbitraria di prodotti non autenticata Il plugin g-FFL Cockpit non implementa controlli di autorizzazione adeguati sugli endpoint REST API queue e process, consentendo a utenti non autenticati di eliminare prodotti WooCommerce arbitrari spoofando gli header HT...

Typecho-Multiple-Vulnerabilities

Typecho ثغرات متعددة يحتوي هذا المستودع على استغلالات الثغرات التالية: CVE-2024-35538: في Typecho الإصدار 1.3.0 توجد ثغرة تزوير عنوان IP العميل، والتي تسمح للجهات الخبيثة بتزوير عناوين IP الخاصة بهم عن طريق تحديد عنوان IP عشوائي كقيمة لرؤوس "X-Forwarded-For" أو "Client-Ip" أثناء تنفيذ طلبات HTTP...

EUVD-2026-62921

In Splunk SOAR versions below 8.6.0, an unauthenticated user could spoof the source IP address in a crafted request to an Automation Broker notification endpoint and execute arbitrary code on the Splunk SOAR host. The vulnerability is possible because the Splunk SOAR Automation Broker trusts a...

CVE-2026-76356

In Splunk SOAR versions below 8.6.0, an unauthenticated user could spoof the source IP address in a crafted request to an Automation Broker notification endpoint and execute arbitrary code on the Splunk SOAR host. The vulnerability is possible because the Splunk SOAR Automation Broker trusts a...

CVE-2026-76356 Authentication Bypass through IP Address Spoofing in the Automation Broker in Splunk SOAR

In Splunk SOAR versions below 8.6.0, an unauthenticated user could spoof the source IP address in a crafted request to an Automation Broker notification endpoint and execute arbitrary code on the Splunk SOAR host. The vulnerability is possible because the Splunk SOAR Automation Broker trusts a...

CVE-2026-76356

Splunk SOAR versions below 8.6.0 are vulnerable: the Automation Broker trusts a client-supplied source IP header, allowing an unauthenticated attacker to spoof the local system IP and execute arbitrary code on the host. CVSS 8.1 (HIGH). No exploit code or in-the-wild exploitation is documented. U...

PT-2026-78783

Name of the Vulnerable Software and Affected Versions Splunk SOAR versions prior to 8.6.0 Description An unauthenticated user can execute arbitrary code on the host by spoofing the source IP address in a crafted request to an Automation Broker notification endpoint. This occurs because the...

CVE-2026-72817

A flaw was found in the go-chi/chi component. The RealIP middleware, responsible for resolving the request source IP, does not properly validate trusted proxies when processing the X-Forwarded-For header. A remote attacker can exploit this by prepending a forged IP address to the X-Forwarded-For...