tcpreplay

Tcpreplay Tcpreplay is a suite of GPLv3 licensed utilities for UNIX and Windows under Cygwin for editing and replaying network traffic previously captured by tools like tcpdump and Wireshark. It classifies traffic as client or server, rewrites Layer 2/3/4 headers, and replays it back onto the...

CVE-2021-37152

CVE-2021-37152 Explota el acceso a clientes de red enviando paquetes en wirless TP-LINK y preparándose para un ataque MITM exploit Este exploit está diseñado para acceder y escanear clientes de red y podrá acceder fácilmente y prepararse para un ataque MITM, el exploit atacará en las capas tres y...

nemesis

N E M E S I S - 构建与注入 Nemesis 项目旨在为类 UNIX 和 Windows 系统提供一个基于命令行的、可移植的人类 IP 栈。该套件按协议分类，允许通过简单的 shell 脚本对注入的数据包进行有用的脚本化处理。 最新版本始终可在 GitHub 上获取： https://github.com/libnet/nemesis/releases 主要特点 支持 ARP/RARP、DNS、ETHERNET、ICMP、IGMP、IP、OSPF、RIP、TCP 和 UDP 协议 在类 UNIX 系统上进行第 2 层或第 3 层注入 在 Windows 系统上仅支持第 2...

hcxdumptool

hcxdumptool Una herramienta para capturar paquetes de dispositivos WLAN y descubrir posibles puntos débiles en redes WiFi propias ejecutando ataques de capa 2 contra el protocolo WPA. Diseñada para ejecutarse mayormente sin cabeza en sistemas pequeños como una Raspberry Pi Zero. hcxnmealog Una...

pico-usb-wifi

= pico-usb-wifi :toc: macro :toclevels: 3 :idprefix: :idseparator: - pico-usb-wifi es un firmware para la Raspberry Pi Pico W que la convierte en un adaptador USB Wi-Fi sin controlador, enumerándose como un dispositivo USB CDC-NCM. :figure-caption: Slop de IA .Diagrama de pico-usb-wifi...

CVE-2025-14558

CVE-2025-14558 Inyección de comandos DNSSL en rtsold de FreeBSD RCE Descripción rtsold8 no valida los nombres de dominio DNSSL en busca de metacaracteres de shell antes de pasarlos a resolvconf8. La sustitución de comandos mediante $ permite la ejecución remota de código desde una red adyacente...

pypacker

Información general Este es Pypacker: la biblioteca de manipulación de paquetes de bajo nivel más rápida y simple para Python. Vea los ejemplos a continuación para ver qué puede hacer con ella. Si desea apoyar este proyecto puede a través de PayPal. Qué puedes hacer con Pypacker Crear paquetes...

lldp

lldp Perfil C2 de Mythic para comunicación peer-to-peer a través de IEEE 802.1AB LLDP. Los datos C2 se transportan dentro de TLVs específicos de organización Tipo 127 con un OUI configurable, de modo que las tramas se mezclen con las extensiones LLDP específicas del proveedor en la red. LLDP es...

pocs_slides

Comparto mis advisories, PoCs, diapositivas y scripts sobre seguridad en IoT / protocolos. Puedes encontrarme en: Medium: https://medium.com/@cq674350529 Blog: https://cq674350529.github.io/ Mail: [email protected] Twitter: @cq674350529 Diapositivas OffByOne2025: Patch Diffing, ¡eres mi...

CVE-2026-73443: Authentication Bypass by Capture-replay

On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attacker within the same layer 2 network segment on which VRRP is running can capture a legitimate authenticated VRRP advertisement and replay it indefinitely. Replayed advertisements can be...

CVE-2026-73444

On affected platforms running Arista EOS with VRRPv2 IP Authentication Header IP-AH authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is running could bypass VRRP authentication and claim the virtual router master role, enabling the...

Security Advisory 0157

Security Advisory 0157 . CSAF PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release 1.1 | September 22, 2026 | CSAF JSON file added Description All of the CVEs covered in this advisory apply to affected platforms running Arista EOS with the...

CVE-2026-66720: Out-of-bounds Read

The GOOSE subscriber component improperly validates the UTC timestamp field in unauthenticated IEC 61850 GOOSE EtherType 0x88B8 Layer-2 multicast messages. A specially crafted GOOSE frame containing an undersized timestamp field can trigger a heap out-of-bounds read during message processing,...

CVE-2026-66369: Out-of-bounds Read

The GOOSE parser contains an off-by-one boundary-handling flaw that can be triggered by a single unauthenticated Layer-2 multicast frame on the process bus. When specific GOOSE message fields are processed, the parser advances its internal buffer position incorrectly, resulting in a heap...

CVE-2026-66364: Out-of-bounds Read

The GOOSE payload parser contains a boundary handling flaw that can be triggered by a single unauthenticated Layer 2 multicast frame on the process bus. When processing specific payload fields, an attacker controlled inner element length may exceed its enclosing length, causing the parser to over...

EUVD-2026-48396

A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network-adjacent attacker to crash a subscribing application by sending a crafted GOOSE frame containing a malformed TLV value...

EUVD-2026-8669

A vulnerability with the Ethernet VPN EVPN Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches and Cisco Nexus 9500-R Series Switching Platforms could allow an unauthenticated, adjacent attacker to trigger a Layer 2 traffic loop. This vulnerability is due to a logic error when...

Cisco Nexus 3600 and 9500-R Series Switching Platforms Layer 2 Loop Denial of Service Vulnerability

A vulnerability with the Ethernet VPN EVPN Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches and Cisco Nexus 9500-R Series Switching Platforms could allow an unauthenticated, adjacent attacker to trigger a Layer 2 traffic loop. This vulnerability is due to a logic error when...

CVE-2026-20051: Use of Uninitialized Variable

A vulnerability with the Ethernet VPN EVPN Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches and Cisco Nexus 9500-R Series Switching Platforms could allow an unauthenticated, adjacent attacker to trigger a Layer 2 traffic loop. This vulnerability is due to a logic error when...

Cisco Nexus 3600 Platform Switches和Cisco Nexus 9500 Series Switches 安全漏洞

The Cisco Nexus 3600 Platform Switches and the Cisco Nexus 9500 Series Switches are products of the American company Cisco. The Cisco Nexus 3600 Platform Switches are part of the 3600 series of platform switches. The Cisco Nexus 9500 Series Switches are part of that series as well. Both the Cisco...