DrMITM

D̳r̳M̳I̳T̳M̳ DrMITM es un programa diseñado para registrar globalmente todo el tráfico. Diagrama: C̳ó̳m̳o̳ f̳u̳n̳c̳i̳o̳n̳a̳ DrMITM envía una solicitud al sitio web y devuelve la IP del sitio web por si acaso el servidor del sitio web está diseñado para confiar en la IP del sitio para las...

CVE-2014-1266-poc

OS X/iOS SSL Flaw POC Overview This repository contains some Go code that demonstrates the recently discovered SSL verification vulnerability in iOS and OS X. Apple Update Announcement Adam Langley's writeup Usage $ git clone https://github.com/gabrielg/CVE-2014-1266-poc.git $ cd CVE-2014-1266-po...

Kibana 8.19.22, 9.4.7, 9.5.4 Security Update (ESA-2026-187)

Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interception Authorization Bypass Through User-Controlled Key CWE-639 in Kibana could lead to cross-tenant data interception. In this context, "tenant" refers to a user or team sharing the same Kibana...

IIS-Backdoor

IIS-Backdoor In this article I will explain how I designed a rootkit for Microsoft Internet Information Services IIS.The question is: why a backdoor in a web server? First obvious but useless answer: because we can. Ok, let us give a more clever answer. The purpose of backdooring a web sever is...

CVE-2021-33699_Task_Hijacking

CVE-2021-33699TaskHijacking What is it? An attacker app and a victim app to practice the CVE-2021-33699Task Hijacking vulnerability. Reference https://naro-security.tistory.com/55...

socksmon

socksmon Monitor arbitrary TCP traffic using your HTTP interception proxy of choice What is socksmon? socksmon is a SOCKSv4 server based on Twisted, that tunnels incoming TCP traffic through an HTTP proxy. socksmon does this by starting an internal webserver on port 2357, posts the traffic to usi...

CVE-2026-100725

A flaw was found in http4k-core. The client-side cookie storage mechanism fails to enforce standard scoping rules for domain, path, and secure transmission attributes. When an application communicates with multiple destinations using a single cookie store, cookies intended for one server can be...

polymorph

Polymorph Polymorph 是一个工具，它允许在实时拦截的网络数据包上执行 Python 代码，从而动态修改网络流量。 该框架可用于实时修改实现任何公开指定网络协议的网络数据包。此外，通过创建自定义抽象和字段，它还可用于修改私有网络协议。 安装 Polymorph 专为在 Linux 操作系统上安装和运行而设计。安装该框架前，必须先安装以下依赖项： sudo apt install build-essential python3-dev libnetfilter-queue-dev tshark tcpdump python3-pip wireshark git...

FstHook

FstHook A library for intercepting native functions by hooking KiFastSystemCall Note: KiFastSystemCall hooking only works on the following systems: Windows XP Service Pack 3 32-bit Windows Vista 32-bit Windows 7 32-bit...

CVE-2020-8554

Mitigate CVE-2020-8554 with Policy Controller This repository contains configuration files for using Policy Controller, which is based on the open source OPA Gatekeeper project, to block Kubernetes Services from public IP access. The security advisory for this issue states: A security issue was...

CVE-2026-79551-Tenda

CVE-2026-79551 Tenda Hardcoded TLS Private Key CNVD ID: CNVD-2026-25884 Vendor: Tenda Technology Co., Ltd. Product: NVR4H network video recorder hardware version CH3V2.1 Firmware: V27.5.58.6 Class: CWE-321 — Use of Hard-coded Cryptographic Key Overview The NVR4H firmware stores an ECDSA key pair ...

binder-trace

Binder Trace Binder Trace es una herramienta para interceptar y analizar mensajes de Android Binder. Piénsalo como "Wireshark para Binder". Requisitos versión de python = 3.9 ⚙️ Instalación Necesitarás un dispositivo Android rooteado o un emulador. Solo Linux - instala xclip o xsel para la...

htcap

HTCAP htcap 是一个能够通过拦截 Ajax 调用和 DOM 变化递归爬取单页应用程序（SPA）的 Web 应用扫描器。 主要功能 递归 DOM 爬取引擎 发现 ajax/fetch/jsonp/websocket 请求 支持 cookies、代理、自定义头部、HTTP 认证等 基于文本相似性的启发式页面去重引擎 可脚本化的登录序列 所有发现结果保存到 SQLite 数据库，并可导出为交互式 HTML 报告 内置的模糊测试器可检测 SQL 注入、XSS、命令执行、文件泄露等多种漏洞 可以轻松与 Sqlmap、Arachni、Wapiti、Burp 等众多工具接口...

pip3line

Pip3line Codacy Badge Linux / MacOS 构建 Windows 构建 原始字节操作工具，能够应用众所周知的以及不太知名的转换、快速二进制搜索、网络代理拦截等功能。 在Windows上安装： 从这里下载发行版压缩包 记得从压缩包中安装/修复VS可再发行组件 在MacOs上安装： $ brew tap metrodango/pip3line $ brew install pip3line 如果启动时出现关于缺少共享库 libtransform 的错误，请确保 homebrew 的 lib 目录在路径中，或者只需从 /usr/local/lib 创建一个链接...

mitm-router

☠ 中间人路由器 🌐 将任何 Linux 计算机变成一个公共 Wi-Fi 网络，默默地对所有 HTTP 流量实施中间人攻击。它在 Docker 容器内运行，使用 hostapd、dnsmasq 和 mitmproxy 创建一个名为 "Public" 的开放蜜罐无线网络。为了增加趣味性，将网络名称改为 "xfinitywifi"，可以自动连接任何曾经连接过这些网络的人……它们无处不在。 免责声明：本软件仅供教育目的。不得用于非法活动。作者不对其使用负责。不要做混蛋。 克隆仓库 git clone https://github.com/brannondorsey/mitm-router cd...

CVE-2024-3094

CVE-2024-3094 Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specifi...

PT-2026-107156

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana could lead to cross-tenant data interception. In this context, "tenant" refers to a user or team sharing the same Kibana deployment, not a separate Elastic Cloud organization or customer. Kibana's Fleet package installation proces...

impostor

Impostor SMB1 server for intercepting NTLMv2 Hashes, written in C. The goal of the project is to implement an SMB1 server as a state machine that correctly accepts and responds to client requests in order to deceive it, leading it to complete an NTLM authentication and thus reveal its own NTLMv2...

cve-2019-11477-poc

cve-2019-11477-poc Simple Test 1. Start two VMs one for an SSL server and the other for an SSL client 2. Server Execute the server application cd apps ./server.sh 7000 3. Client Install the required packages sudo apt-get install libmnl-dev sudo apt-get install libnetfilter-queue-dev 4. Client Add...

CVE-2026-77804

In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, a time-of-check time-of-use TOCTOU race condition exists in the installation of the HTTPS interception root certificate into the Local Computer certificate store. Fiddler writes the certificate to a temporary...