Nac_Bypass_Agent

Agente de Bypass de Nac Este fragmento de código es un script escrito en Python y diseñado para ejecutarse en Kali Linux. A continuación, se presenta un resumen que explica qué hace cada función: runcommandcommand: Esta función ejecuta el comando que recibe como entrada y devuelve su salida...

dontgo403

dontgo403 is a tool to bypass 40X errors. Installation Grab the latest release for your OS from RELEASES Outdated atm Or compile by your own RECOMMENDED: git clone https://github.com/devploit/dontgo403; cd dontgo403; go get; go build Customization If you want to edit or add new bypasses, you can...

ipeeyoupeewepee

ipeeyoupeewepee A scanner and attack suite for hosts on the public internet mostly Cisco routers that forward unauthenticated packets encapsulated in the IP-in-IP and GRE protocols. This vulnerability, known as "Insecure Implementation of Tunneling Protocols," is tracked under CVE-2020-10136 and...

Mr.SIP

SIP Security, Attack and Audit Framework Mr.SIP is...

CVE-2026-14840

CVE-2026-14840 — YOP Poll 7.0.6 Vote Limit Bypass Author: nullwhisper Use case: authorized security research / vulnerability validation only. What is this? YOP Poll plugin versions 7.0.6 enforce a one-vote-per-IP limit. The problem is that to obtain the client IP it checks HTTPCLIENTIP and...

fireprox

FireProx Resumen Beneficios Descargos Mantenedor Crédito Uso básico Instalación Capturas de pantalla Contribuir Resumen Poder ocultar o rotar continuamente la dirección IP de origen al realizar llamadas web puede ser difícil o costoso. Durante algún tiempo han existido varias herramientas, pero...

Dosinator

DoSinator DoSinator is a powerful Denial of Service DoS testing tool developed in Python. Designed for security professionals and researchers, this tool allows them to simulate various DoS attacks, providing a realistic environment for assessing the resilience of networks, systems, and applicatio...

Typecho-Multiple-Vulnerabilities

Typecho Multiple Vulnerabilities This repository contains the exploits of the following vulnerabilities: CVE-2024-35538: In Typecho v1.3.0 there is a Client IP Spoofing vulnerability, which allows malicious actors to falsify their IP addresses by specifying an arbitrary IP as value of...

Cisco-SNMP-Slap

OVERVIEW cisco-snmp-slap utilises IP address spoofing in order to bypass an ACL protecting an SNMP service on a Cisco IOS device. Typically IP spoofing has limited use during real attacks outside DoS. Any TCP service cannot complete the inital handshake. UDP packets are easier to spoof but the...

CVE-2026-72815-poc

CVE-2026-72815: go-chi/chi middleware.RealIP IP Spoofing PoC 日本語版 Overview This repository contains a local Proof of Concept PoC for CVE-2026-72815 GHSA-3fxj-6jh8-hvhx, an IP spoofing vulnerability in go-chi/chi's middleware.RealIP. The vulnerable middleware blindly trusts the first leftmost valu...

burpFakeIP

burpFakeIP Download and use: Releases 2021/09/24 1. Fixed a bug reported by M00nBack. 2. Added an AutoXFF switch, and set AutoXFF to disabled by default. If you need the plugin to add a random XFF header to every request, you can select ON in the right-click menu to enable it. 2021/05/21 Refactor...

CVE-2021-40438

CVE-2021-40438 Apache forward request CVE CVE-2021-40438: A crafted request uri-path can cause modproxy to forward the request to an origin server chosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier. This CVE could be used to spoof the original IPs in DoS attacks...

burpsuiefakeip

Reposted from https://github.com/TheKingOfDuck/burpFakeIP BurpFakeIP Forging IP in Burp Suite, and I'm dead serious. Four small features Forge a specified IP Forge a local IP Forge a random IP Random IP brute-forcing 0x01 Forge a specified IP In the Repeater module, right-click to select the fake...

CVE-2026-37432

CVE-2026-37432 Location: Apiutil.java: 107-113 Principle: Directly trusting the X-Forwarded-For request header, which can be forged to manipulate IP addresses. Exploitation method: X-Forwarded-For: 127.0.0.1...

CVE-2025-12720

g-FFL Cockpit 'POST', 36: 'callback' = CLASS, 'handleenqueueonly', 37: 'permissioncallback' = fn = self::fflcockpitisallowedself::$fflckey, 38: ; The fflcockpitisallowed function uses a hardcoded IP address base64: My4yMTIuMTg1LjE4Nw==, d...

CVE-2023-4631

CVE ID : CVE-2023-4631 Vulnerability Type : IP Address Spoofing Description : The DoLogin Security plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 3.6. This is due to insufficient restrictions on where the IP Address information is being retrieved for...

CVE-2022-46169

CVE-2022-46169 Cacti Blind Remote Code Execution Pre-Auth Disclaimer This is for educational purposes only. I am not responsible for your actions. Use at your own discretion. Explanation This script bruteforces variables required to exploit this vulnerability. This exploit requires the following ...

CVE-2026-100390

Zoraxy versions 3.2.3 through 3.3.4 fail to properly parse IPv6 addresses in the RemoteAddr field when setting forwarded headers. Unauthenticated attackers connecting over IPv6 can supply arbitrary X-Forwarded-For values to spoof their source IP and bypass authorization provider IP-based access...

CVE-2026-100390

Zoraxy versions 3.2.3 through 3.3.4 are vulnerable to client IP spoofing due to a failure to properly parse IPv6 addresses in the RemoteAddr field when setting forwarded headers. This allows unauthenticated attackers connecting over IPv6 to supply arbitrary X-Forwarded-For values. Consequently, a...

CVE-2026-100390 Zoraxy 3.2.3 through 3.3.4 Client IP Spoofing via X-Forwarded-For IPv6

Zoraxy versions 3.2.3 through 3.3.4 fail to properly parse IPv6 addresses in the RemoteAddr field when setting forwarded headers. Unauthenticated attackers connecting over IPv6 can supply arbitrary X-Forwarded-For values to spoof their source IP and bypass authorization provider IP-based access...