gonc

Introduction to gonc README in 中文 、 English gonc is a Golang-based netcat tool designed to facilitate peer-to-peer communication. Its main features include: 🔁 Automated NAT Traversal : Zero configuration. Both sides only need to agree on a passphrase. By using the -p2p parameter, peers can...

bore

bore Un túnel TCP moderno y simple en Rust que expone puertos locales a un servidor remoto, evitando los cortafuegos de conexión NAT estándar. Eso es todo lo que hace: ni más, ni menos. Instalación requiere Rust, ver alternativas abajo cargo install bore-cli En tu máquina local bore local 8000 --...

frp

frp README | 中文文档 Patrocinadores frp es un proyecto de código abierto cuyo desarrollo continuo es posible gracias al apoyo de nuestros increíbles patrocinadores. Si deseas unirte a ellos, considera patrocinar el desarrollo de frp. Patrocinadores Oro El IDE completo diseñado para desarrolladores...

CVE-2026-108720 phpIPAM through 1.8.3 Missing Authorization in Customers, Locations and NAT Pages

phpIPAM through 1.8.3 contains a missing authorization vulnerability that allows authenticated low-privilege users to view restricted subnets and addresses because customer, location and NAT pages skip Subnets::checkpermission. Attackers can open customer objects.php, single-location.php or...

dolos_cloak

Dolos Cloak Dolos Cloak es un script en Python diseñado para ayudar a los probadores de penetración de red y red teams a evadir soluciones 802.1x mediante un ataque de intermediario avanzado. La herramienta puede aprovechar la conexión por cable de un dispositivo víctima que ya está autorizado en...

sidedoor

sidedoor sidedoor mantiene una conexión SSH o un túnel con un demonio de script de shell. El caso de uso principal es mantener un reenvío de puerto remoto al servidor SSH local o a otro puerto. De esta manera, se puede acceder al dispositivo local sin utilizar conexiones entrantes que podrían est...

zeek-spicy-stun

STUN Session Traversal Utilities for NAT STUN Questo è un analizzatore di protocollo Zeek che rileva STUN basato su Spicy. Devi installare Spicy per usare questo pacchetto. Questo pacchetto creerà due log: stun.log - Questo log contiene ogni messaggio STUN. stunnat.log - Questo log contiene le...

CVE-2026-98322

A flaw was found in the Linux kernel's Netfilter network filtering subsystem. When configuring IPv4 Network Address Translation NAT rules with the netmap feature, the system fails to initialize a temporary memory buffer on the stack. As a result, uninitialized kernel stack data is copied and...

CVE-2026-98321

A flaw was found in the Linux kernel's netfilter subsystem. When registering Network Address Translation NAT hooks, failure handling during entry insertion does not properly unregister and release allocated hooks. A local attacker could exploit this flaw to cause a memory leak, potentially leadin...

rtpnatscan

rtpnatscan A minimalistic command line tool to check if your RTP proxy / NAT helper is vulnerable to RTP NAT stealing attacks...

ICMPTunnel

icmptunnel is a tool to tunnel IP traffic within ICMP echo request and response ping packets. It’s intended for bypassing firewalls in a semi-covert way, for example when pivoting inside a network where ping is allowed. It might also be useful for egress from a corporate network to the Internet,...

Kali-Metasploitable

Audit Report and Security Laboratory Project: Vulnerability Analysis and Secure Network Exploitation Date: April 2026 Author: Ivo Albacete 1. Executive Summary This project involved the deployment of a controlled environment for practicing cybersecurity techniques. A virtualized laboratory was...

firecat

firecat For more info, see: http://www.bishopfox.com/resources/tools/other-free-tools/firecat/ Firecat is a penetration testing tool that allows you to punch reverse TCP tunnels out of a compromised network. After a tunnel is established, you can connect from an external host to any port on any...

PT-2026-106651

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft nat: fully initialise new addr in netmap setup nft nat setup netmap builds the mapped address in an on-stack union nf inet addr. For an IPv4 mapping it writes only the 4-byte .ip member and the loop runs a single...

Cisco ASA Improper Input Validation (CVE-2021-34790)

Multiple vulnerabilities in the Application Level Gateway ALG for the Network Address Translation NAT feature of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass the ALG and open unauthorized...

Cisco ASA Improper Input Validation (CVE-2021-34791)

Multiple vulnerabilities in the Application Level Gateway ALG for the Network Address Translation NAT feature of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass the ALG and open unauthorized...

PT-2026-106650

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf nat: unregister and release hooks on error If nf hook entries insert raw fails, the NAT hooks get never released, resulting in a memleak. Postpone setting nat proto net-nat hook ops when the hooks are registered to...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: f2fs: A fix was made to avoid using f2fsbugon in f2fsnewnodepage. As reported by Dipanjan Das , syzkaller discovered a bug in f2fs as follows: RIP: 0010:f2fsnewnodepage+0x19ac/0x1fc0 fs/f2fs/node.c:1295 Call Trace: writeallxattrs...

CVE-2026-100070

A flaw was found in the Linux kernel. This vulnerability can result in information disclosure when processing Session Initiation Protocol SIP traffic through the netfilter Network Address Translation NAT helper. When address rewriting shortens a packet, the helper fails to adjust its internal...

PT-2026-99926

Name of the Vulnerable Software and Affected Versions D-Link DI-8400 version 16.07 Description A flaw in the Web Administration Service allows for a remote stack-based buffer overflow. This occurs when the opt argument is manipulated within the menu nat more asp function of the menu nat more.asp...