iptable_evil

iptableevil iptableevil is a very specific backdoor for iptables that allows all packets with the evil bit set, no matter the firewall rules. The initial implementation is in iptableevil.c, which adds a table to iptables and requires modifying a kernel header to insert a spot for it. The second...

dhcpoptinj

DHCP option injector Have you ever wanted to intercept DHCP requests and squeeze in a few extra DHCP options, unbeknownst to the sender? Probably not. However, should the need ever come, dhcpoptinj will hopefully help you. Why There can be many a reason to mangle DHCP requests, although chances a...

totp-ssh-fluxer

TOTP SSH port fluxing Some people change their SSH port on their servers so that it is slightly harder to find for bots or other nasties, and while that is generally viewed as an action of security through obscurity it does work very well at killing a lot of the automated logins you always see in...

fwknop

fwknop - Single Packet Authorization Introduction fwknop implements an authorization scheme known as Single Packet Authorization SPA for strong service concealment. SPA requires only a single packet which is encrypted, non-replayable, and authenticated via an HMAC in order to communicate desired...

firehol

FireHOL http://firehol.org/ root@kitploit: FireHOL, an iptables stateful packet filtering firewall for humans! FireQOS, a TC based bandwidth shaper for humans! Git These instructions are for people who are working with the git repository. There are more general instructions starting with Upgrade...

opensnitch

Join the project community on our server! OpenSnitch is a GNU/Linux application firewall. •• Key Features • Download • Installation • Usage examples • In the press •• Key features Interactive outbound connections filtering. Block ads, trackers or malware domains system wide. Ability to configure...

nipe

一个让 Tor 网络成为默认网关的引擎。 摘要 Tor 项目允许用户通过其自身机制匿名上网、聊天和发送即时消息。它被各种各样的人群、公司和组织使用，既用于合法活动，也用于其他非法目的。Tor 一直广泛被情报机构、黑客组织、犯罪活动甚至关心数字世界隐私的普通用户使用。 Nipe 是一个用 Perl 开发的引擎，旨在让 Tor 网络成为你的默认网络网关。Nipe 可以将你机器的流量通过 Tor 网络路由到互联网，从而让你在上网时获得更强大的隐私和匿名保护。 Nipe 支持通过 Tor 网络路由 IPv4 和 IPv6 流量。只有发往本地和/或回环地址的流量不会经过 Tor 路由。所有非本地...

POC-2020-8559

POC-2020-8559 Exploit for CVE-2020-8559. We steal all the connections to the kubelet using iptables then rewrite the 101 or 302 responses to 307. The 101s are for modern Kubernetes versions, the 302s are for older ones. We don't have access to the kube-apiserver's x509 cert, so kubelet webhook au...

egressbuster

EgressBuster Copyright 2015 TrustedSec - EgressBuster Written by: David Kennedy ReL1K Company: TrustedSec DISCLAIMER: This is only for testing purposes and can only be used where strict consent has been given. Do not use this for illegal purposes period. Please read the LICENSE for the licensing ...

kalitorify

Kali Linux 通过 Tor 的透明代理 关于 kalitorify kalitorify 是一个为 Kali Linux 编写的 shell 脚本，它使用 iptables 设置来创建 通过 Tor 网络的透明代理 ，该程序还允许您执行各种检查，例如检查 Tor 出口节点（即您在 Tor 代理下时的公共 IP 地址），或者通过检查服务和网络设置来确认 Tor 是否已正确配置。 简单来说，使用 kalitorify 可以将您的 Kali Linux 操作系统的所有流量重定向到 Tor 网络。 本程序专为 Kali Linux 操作系统（Kali Linux rolling...

net-Shield

net-Shield An Easy and Simple Anti-DDoS solution for VPS,Dedicated Servers and IoT devices based on iptables/ipsets Requirements Linux System with golang, iptables/ipsets Nginx Quickstart Run the bash script install.sh to install all the required dependencies. bash install.sh You will be prompted...

cuckooautoinstall

About CuckooAutoinstall Cuckoo Sandbox . auto install script What is Cuckoo Sandbox? Cuckoo Sandbox is a malware analysis system. What does that mean? It means that you can throw any suspicious file at it and get a report with details about the file's behavior inside an isolated environment. We...

firehol

FireHOL http://firehol.org/ root@kitploit: ¡FireHOL, un cortafuegos de filtrado de paquetes con estado basado en iptables para humanos! ¡FireQOS, un modelador de ancho de banda basado en TC para humanos! Git Estas instrucciones son para personas que trabajan con el repositorio git. Hay...

silverboxcc

Reverse engineered android malware called Red Alert V2.0. At the time of analysis, there were no longer any C2 servers running and so we were unable to observe any traffic between the malware and the C2 server. So we figured out the C2 protocol and wrote this control panel. Bot's traffic from the...

spoilerwall

¡Cuidado! ¡Spoilers por delante! Spoilerwall introduce un concepto completamente nuevo en el campo del endurecimiento de redes. ¡Evita ser escaneado estropeando películas en todos tus puertos! ¿Firewall? ¡Mejor Fuego a todos! ¡Deja de gastar miles de dólares en grandes equipos que no necesitas!...

access-point

Fake Access Point Rogue open Wi-Fi AP for traffic capture in controlled environments. Uses hostapd native nl80211 AP mode + dnsmasq DHCP/DNS + iptables NAT toward an uplink interface. Requirements Linux, root. Wireless card with AP-mode support iw phy → Supported interface modes: ... AP. Packages...

iptables-essentials

Iptables Essentials: Common Firewall Rules and Commands ☑️ TODO Add useful Iptables configuration examples Add useful Kernel Settings sysctl configuration Add links to useful external resources Add advanced configuration examples, commands, rules Table of Contents Tools to help you configure...

NFtables-IPtables-integration-script

🛡️ Q-Feeds Linux Firewall Blocklist Integration Automated malware IP blocklist for Linux servers — supports nftables and iptables+ipset 📋 Table of Contents Quick Start Overview How It Works Prerequisites Detailed Installation Configuration Usage and Verification Troubleshooting Uninstalling Licens...

network-security-snort

Laboratorio de Implementación de Snort IDS/IPS Un despliegue completo de Snort 3 como Sistema de Detección de Intrusiones monitoreo pasivo y como Sistema de Prevención de Intrusiones bloqueo activo mediante iptables, validado contra cuatro vectores de ataque en una red virtual de tres máquinas...

CFC

Centralized Firewall Control script Centralized firewall control provides a centralized way to manage the firewall on multiple servers or loadbalancers running iptables. This way you can quickly allow/block/del/search abuse ranges etc. with one command on several servers. It accesses those server...