totp-ssh-fluxer

TOTP SSH port fluxing Some people change their SSH port on their servers so that it is slightly harder to find for bots or other nasties, and while that is generally viewed as an action of security through obscurity it does work very well at killing a lot of the automated logins you always see in...

fwknop

fwknop - Single Packet Authorization Introduction fwknop implements an authorization scheme known as Single Packet Authorization SPA for strong service concealment. SPA requires only a single packet which is encrypted, non-replayable, and authenticated via an HMAC in order to communicate desired...

iptables-essentials

Iptables Essentials: 일반적인 방화벽 규칙 및 명령어 ☑️ TODO 유용한 Iptables 구성 예제 추가 유용한 커널 설정 sysctl 구성 추가 유용한 외부 리소스 링크 추가 고급 구성 예제, 명령어, 규칙 추가 목차 Iptables 구성을 도와주는 도구 매뉴얼/하우투/튜토리얼 유용한 커널 설정 sysctl 구성 rpfilter logmartians sendredirects acceptsourceroute acceptredirects tcpsyncookies icmpechoignorebroadcasts...

firehol

FireHOL http://firehol.org/ root@kitploit: FireHOL, an iptables stateful packet filtering firewall for humans! FireQOS, a TC based bandwidth shaper for humans! Git These instructions are for people who are working with the git repository. There are more general instructions starting with Upgrade...

silverboxcc

Red Alert V2.0이라는 안드로이드 악성코드를 리버스 엔지니어링했습니다. 분석 당시, 더 이상 실행 중인 C2 서버가 없어서 악성코드와 C2 서버 간의 트래픽을 관찰할 수 없었습니다. 그래서 C2 프로토콜을 알아내고 이 제어판을 작성했습니다. 장치의 봇 트래픽은 iptables를 사용하여 리디렉션할 수 있으므로 모든 봇 통신이 우리 C2 서버로 전송됩니다. root@kitploit: iptables -t nat -A OUTPUT -p tcp --dport -j DNAT --to-destination : 동영상 보기...

cuckooautoinstall

About CuckooAutoinstall Cuckoo Sandbox . auto install script What is Cuckoo Sandbox? Cuckoo Sandbox is a malware analysis system. What does that mean? It means that you can throw any suspicious file at it and get a report with details about the file's behavior inside an isolated environment. We...

psad

psad - Intrusion Detection with iptables Logs Introduction The Port Scan Attack Detector psad is a lightweight system daemon written in is designed to work with Linux iptables/ip6tables/firewalld firewalling code to detect suspicious traffic such as port scans and sweeps, backdoors, botnet comman...

network-security-snort

Snort IDS/IPS 배포 실습 Snort 3 을 침입 탐지 시스템수동 모니터링과 침입 방지 시스템iptables를 통한 능동 차단으로 모두 사용하는 전체 사이클 배포로, Kali Linux상의 세 대의 가상 머신 네트워크에서 네 가지 공격 벡터에 대해 검증했습니다. 이 실습은 탐지 와 방지 의 운영적 차이를 증명합니다. 동일한 네 가지 벡터 공격 체인을 두 번 실행합니다. 처음에는 로그만 기록하고 차단할 수 없는 IDS를 대상으로, 그 다음에는 선택적으로 공격을 차단하면서도 정상 트래픽은 유지하는 IDS + iptable...

POC-2020-8559

POC-2020-8559 CVE-2020-8559 のエクスプロイト。iptables を使用して kubelet へのすべての接続を奪い、101 または 302 応答を 307 に書き換えます。101 は新しい Kubernetes バージョン用で、302 は古いバージョン用です。 kube-apiserver の x509 証明書にアクセスできないため、kubelet の webhook 認証が問題になる可能性があります。次の kubelet 設定フラグメントを使用すれば問題ありません。これは基本的に昔の kubelet エクスプロイトを再び有効にします：...

NFtables-IPtables-integration-script

🛡️ Q-Feeds Linux 방화벽 블록리스트 통합 리눅스 서버용 자동화된 악성코드 IP 블록리스트 — nftables 및 iptables+ipset 지원 📋 목차 빠른 시작 개요 작동 방식 사전 요구 사항 상세 설치 가이드 설정 사용 및 확인 문제 해결 제거 라이선스 🚀 빠른 시작 1단계: API 토큰 받기 tip.qfeeds.com에서 무료 API 키를 받으세요. 2단계: 스크립트 다운로드bash git clone...

Astra Linux – Vulnerability in Linux

A issue was discovered in netfilter within the Linux kernel before version 5.10. There may be a use-after-free situation in the packet processing context, as the per-CPU sequence count is mishandled during concurrent iptables rule replacements. This vulnerability could be exploited with the...

Astra Linux – Vulnerability in Linux

A flaw was discovered in the Linux kernel’s implementation of string matching within packets. A privileged user with root or CAPNETADMIN status can insert rules into iptables, and this action may cause the system to panic. The issue affects kernels prior to version 5.5-rc1...

CVE-2026-16503

Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that is published on all interfaces 0.0.0.0:5432 with a default database password set to "postgres". Because Docker installs its own iptables rules, this exposure bypasses a standard host UFW configuration...

CVE-2026-16503 VPS.org one-click Supabase template deployment instance contains multiple vulnerabilities

Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that is published on all interfaces 0.0.0.0:5432 with a default database password set to "postgres". Because Docker installs its own iptables rules, this exposure bypasses a standard host UFW configuration...

EUVD-2026-51547

Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that is published on all interfaces 0.0.0.0:5432 with a default database password set to "postgres". Because Docker installs its own iptables rules, this exposure bypasses a standard host UFW configuration...

CVE-2026-16503

CVE-2026-16503 concerns VPS.org’s one-click Supabase template, which deploys PostgreSQL bound to all interfaces (0.0.0.0:5432) with the default password postgres . This exposure can bypass host firewall rules (Docker iptables), enabling potential remote database access. The linked sources indicat...

PT-2026-66762

Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that is published on all interfaces 0.0.0.0:5432 with a default database password set to "postgres". Because Docker installs its own iptables rules, this exposure bypasses a standard host UFW configuration...

PYSEC-2026-852 OpenStack Neutron Intended MAC-spoofing protection mechanism bypass

The IPTables firewall in OpenStack Neutron up to 7.0.4 and 8.x before 8.1.0 allows remote attackers to bypass an intended MAC-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via 1 a crafted DHCP discovery message or 2 crafted non-IP traffic...

PYSEC-2026-856 OpenStack Neutron Improper Input Validation vulnerability

OpenStack Neutron before 2014.2.4 juno and 2015.1.x before 2015.1.1 kilo, when using the IPTables firewall driver, allows remote authenticated users to cause a denial of service L2 agent crash by adding an address pair that is rejected by the ipset tool...

OpenStack Neutron Improper Input Validation vulnerability

OpenStack Neutron before 2014.2.4 juno and 2015.1.x before 2015.1.1 kilo, when using the IPTables firewall driver, allows remote authenticated users to cause a denial of service L2 agent crash by adding an address pair that is rejected by the ipset tool...