CVE-2025-22870

PoC – CVE-2025-22870 – HTTP Proxy Bypass via IPv6 Zone ID in Go Summary This Proof of Concept demonstrates the exploitation of CVE-2025-22870, a vulnerability in the golang.org/x/net/http/httpproxy package prior to v0.36.0, which can be used to bypass HTTP proxy restrictions by abusing the way IP...

topera

Topera project page You can see more extensive reference of Topera at our web page at github: Topera project page What's Topera? Topera is a new security tools for IPv6, with the particularity that their attacks can't be detected by Snort. Snort is the most known IDS/IPS and is widely used in man...

ipv6tools

IPv6Tools IPv6Tools フレームワークは、IPv6 対応ネットワークを監査できる堅牢なモジュールとプラグインのセットです。組み込みモジュールは、ICMPv6 やマルチキャストリスナーディスカバリー MLD などの IPv6 機能の列挙をサポートします。さらに、このフレームワークは、マルチキャスト DNS mDNS やリンクローカルマルチキャスト名前解決 LLMNR などの上位層プロトコル ULP の列挙もサポートします。ユーザーは Python 言語でプラグインやモジュールを作成することで、フレームワークの機能を簡単に拡張できます。 解説記事...

ipv6tools

IPv6Tools The IPv6Tools framework is a robust set of modules and plugins that allow a user to audit an IPv6 enabled network. The built-in modules support enumeration of IPv6 features such as ICMPv6 and Multicast Listener Discovery MLD. In addition, the framework also supports enumeration of Upper...

CVE-2020-16898-EXP-POC

CVE-2020-16898 CVE-2020-16898 Windows TCP/IP リモートコード実行脆弱性 EXP&POC 再現 forforever：https://www.cnblogs.com/forforever/p/13846077.html POC CVE-2020-16898Checker-poc コマンド： 管理者として PowerShell/CMD を起動 Powershell.exe -ExecutionPolicy UnRestricted -File .\CVE-2020-16898-poc.ps1 EXP cve-2020-16898-exp2...

PS5-IPV6-Kernel-Exploit

PS5 3.xx / 4.xx Kernel Exploit Summary This repo contains an experimental WebKit ROP implementation of a PS5 kernel exploit based on TheFlow's IPV6 Use-After-Free UAF , which was reported on HackerOne. The exploit strategy is for the most part based on TheFlow's BSD/PS4 PoC with some changes to...

eero-zero-length-ipv6-options-header-dos

eeroOS Ethernet Interface Denial of Service Vulnerability CVE-2023-5324 If eero Pro 5 devices receive an IPv6 packet where the payload length is zero and contains a hop-by-hop or destination options extension header that refers to another hop-by-hop or destination options extension header that...

pocsuite3

pocsuite3 Legal Disclaimer Usage of pocsuite3 for attacking targets without prior mutual consent is illegal. pocsuite3 is for security testing purposes only 法律免责声明 未经事先双方同意，使用 pocsuite3 攻击目标是非法的。 pocsuite3 仅用于安全测试目的 Overview pocsuite3 is an open-sourced remote vulnerability testing and...

Disable-IPv6-CVE-2024-38063-Fix

Disable IPv6 to Mitigate CVE-2024-38063 Without Installing KB Update Overview This script is designed to mitigate the effects of the critical vulnerability CVE-2024-38063, a remote code execution RCE vulnerability in the Windows TCP/IP stack related to IPv6. By disabling IPv6 on the system, this...

morpheus

Morpheus - automated ettercap TCP/IP Hijacking tool Version release: v2.2 - STABLE Author: pedro ubuntu r00t-3xp10it Codename: oneiroi phobetor The mithologic dream greek god Distros Supported: Linux Ubuntu, Kali, Debian, BackBox, Parrot OS Suspicious-Shell-Activity© SSA RedTeam develop @2018 LEG...

sylkie

sylkie A command line tool and library for testing networks for common address spoofing security vulnerabilities in IPv6 networks using the Neighbor Discovery Protocol. Getting Started Note: This project is still in the early phases of development. If you run into any problems, please consider...

sylkie

sylkie IPv6ネットワークにおける近隣探索プロトコルを使用した、一般的なアドレススプーフィングのセキュリティ脆弱性をテストするためのコマンドラインツールおよびライブラリです。 はじめに 注意: このプロジェクトはまだ開発の初期段階にあります。問題が発生した場合は、issue を提出してください。現在、Linux上でのみ動作します。 依存関係 libseccomp （オプションですが、強く推奨） json-c （オプションですが、推奨） 詳細は The Wiki をご覧ください。 ビルド コードを取得してコンパイルします！ コードを取得 git clone...

CVE-2020-16899

CVE-2020-16899: Microsoft Windows TCP/IP Denial of Service Vulnerability CVSS Score: 7.5 CVSS Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C Overview On October 13, Microsoft announced a critical vulnerability in the Windows IPv6 stack, which allows an attacker to send...

CVE-2024-38063-poc

Real POC published https://github.com/ynwarcs/CVE-2024-38063 and I have updated in my code as well, This can cause crash into your system so use VM or just learning thing, you can get RCE by making changes in the code. Usage iface Most probably this is enabled bydefault. Check the...

CVE-CVSS--CVE-2024-38063-IPv6-TCP-IP-Remote-Code-Execution-Analysis

🔐 CVE-2024-38063 — IPv6 TCP/IP Remote Code Execution Analysis 📌 Project Description This project presents a technical analysis and practical demonstration of the critical vulnerability CVE-2024-38063 , disclosed by Microsoft during Patch Tuesday August 13, 2024. The vulnerability affects the...

CVE-2024-38063

CVE-2024-38063 mitigation script by disabling ipv6 of all interfaces HOW TO Import the script like a module on a elevated Powershell run as admin . .\CVE-2024-38063 Use the functions Show-IPV6EnabledAdapters Show all adapters that have IPV6 enabled! PS C:\users\public Show-IPV6enabledAdapters...

CVE-2022-34718-PoC

CVE-2022-34718 IPv6 Remote Code Execution exploit sample This repository contains an exploit of CVE-2022-34718, a Remote Code Execution RCE vulnerability in IPv6 on Windows systems. How to Since the vulnerability requires specially crafted IPv6 packets, it depends on the Scapy module and therefor...

CVE-2022-25061

CVE-2022-25061 该脚本利用了TPLink WR840N路由器中oalsetIp6DefaultRoute组件下的一个远程命令执行漏洞。...

mitm6

mitm6 mitm6는 Windows의 기본 구성을 악용하여 기본 DNS 서버를 장악하는 침투 테스트 도구입니다. DHCPv6 메시지에 응답하여 피해자에게 링크-로컬 IPv6 주소를 제공하고 공격자의 호스트를 기본 DNS 서버로 설정하는 방식으로 작동합니다. DNS 서버로서 mitm6는 공격자가 선택한 DNS 쿼리에 선택적으로 응답하여 피해자의 트래픽을 합법적인 서버 대신 공격자 머신으로 리디렉션합니다. 이 공격에 대한 자세한 설명은 mitm6 블로그에서 확인할 수 있습니다. Mitm6는 WPAD 스푸핑 및 자격 증명 릴레이를...

CVE-2024-38063

CVE-2024-38063 — Windows IPv6 Stack Vulnerability Analysis & PoC -red Technical analysis and Proof-of-Concept PoC for CVE-2024-38063 , a critical Remote Code Execution RCE vulnerability in the Windows IPv6 stack tcpip.sys. Discovered by KunLun Lab, this issue is zero-click , meaning it can be...