1140 matches found
AnySniff
💀AnySniff AnySniff 是一款用于在 Windows 上监控类似 AnyDesk 等进程的 TCP 连接的工具。它利用 CVE-2024-52940 漏洞来跟踪开放连接并记录 IP、端口及其他相关详细信息。 ⚙功能 监控目标进程（例如 AnyDesk）的 TCP 连接。 将 IP 地址、端口和进程详细信息记录到日志文件中。 支持实时嗅探网络流量。 提供简单的菜单驱动界面。 💽系统要求 Python 3.x Windows 操作系统 pyfiglet 库（用于 ASCII 艺术字） colorama 库（用于颜色支持） 🛠️安装 1. 克隆此仓库： git clone...
ngrep
ngrep 1.49.0 2.7.2026 ngrep 就像将 GNU grep 应用于网络层。它是一个基于 PCAP 的工具，允许你指定扩展正则或十六进制表达式来匹配数据包的数据负载。它理解多种协议，包括 IPv4/6、TCP、UDP、ICMPv4/6、IGMP 和 Raw，支持多种接口类型，并且与 tcpdump、snoop 等常见数据包嗅探工具一样，理解 BPF 过滤逻辑。 新特性 Docker/Podman 容器名称解析（-r 选项） 支持在指定 -u 时显示 UTF8 数据 升级至 PCRE2（默认用于 MacOS/homebrew 和 Windows 构建）...
JavaDeserialization
java反序列化漏洞检测 针对类似CVE-2017-10271漏洞的一个java反序列化漏洞扫描器，此项目中只有一个poc，其他暂时未做整理。 安装 1. 安装nmap https://nmap.org/download.html 根据操作系统的不同，下载不同的版本安装。 2. 安装第三方包 pip install -r requirements.txt 3. 扫描 修改poc，将ping命令中的ip地址改为自己的ip地址 修改第25行sniff代码 snifffilter='icmp and yourIP',prn=packetcallback javascan.py -i IP地...
peetch
peetch peetch is a collection of tools aimed at experimenting with different aspects of eBPF to bypass TLS protocol protections. Currently, peetch includes three subcommands. The first called dump aims to sniff network traffic by associating information about the source process with each packet...
creds.py
新版本，解析功能大大增强：https://github.com/DanMcInerney/net-creds creds.py 收集FTP/POP/IMAP/HTTP/IRC协议的凭据以及每个协议中的有趣数据。如果未使用 -i 选项指定接口，脚本将使用通过 ip route 找到的互联网连接接口。它会合并分片数据包，以免遗漏任何重要信息。在捕获到 Ctrl-C 后，将打印网络中每个被嗅探的IP地址的凭据列表以及它们发送到的服务器。 python creds.py -i INTERFACE -v -p PCAPFILE 要求：python 2.7, scapy Python模块, linu...
cdpsnarf
CDPSnarf v0.1.6 Sniffer del protocolo Cisco Discovery por Tasos "Zapotek" Laskos [email protected] [email protected] Licenciado bajo la Licencia Pública General de GNU v2 General CDPSnarf es un sniffer de red escrito exclusivamente para extraer información de los paquetes CDP. Proporcio...
bettercap
This repository is DEPRECATED, bettercap developementmoved here and every version 2.0.0 is considered LEGACY and NOT SUPPORTED...
EUVD-2026-91051
Unencrypted traffic in the 802.11 network of Teledyne FLIR Aware2 versions through 6.9.0.2 allows adjacent unauthenticated attackers to intercept, hijack, or modify session traffic against Teledyne FLIR PackBot robots running this software via sniffing or hijacking network traffic...
DNSSpoof
DNSSpoof Una herramienta de suplantación de DNS escrita en Python3. ¿Cómo usarlo? usage: dnsspoof.py -h -d DOMAIN -i INTERFACE -t TARGET -r IP optional arguments: -h, --help show this help message and exit -d DOMAIN Domain to spoof default: all -i INTERFACE Interface to listen on default: default...
kcmd — Updated!
kcmd - Kankun Sniffer and Hijacker Send encrypted ON/OFF commands to kankun smart sockets Sniff the commands on the network to extract password Copyright 2015 © Payatu Author: Aseem Jakhar aseematpayatudotcom Websites: www.payatu.com www.nullcon.net www.hardwear.io www.null.co.in This program is...
PT-2026-84504
Name of the Vulnerable Software and Affected Versions Scrapy versions prior to 2.17.0 Description The S3DownloadHandler in scrapy/core/downloader/handlers/s3.py converts S3-scheme bucket and key requests into plaintext HTTP requests unless the is secure variable in request.meta is explicitly...
EUVD-2026-63545
A vulnerability exists in the Dynamic DNS DDNS functionality of TP-Link Omada Gateways. During communication with a third-party DDNS service, authentication credentials are transmitted over an unencrypted channel. An attacker who can observe or manipulate traffic between an affected device and th...
EUVD-2026-63144
RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
EUVD-2026-55995
The Windows installer deployed Npcap leaving its access restriction option at the insecure default value, so the driver was accessible to every local user of the host instead of being restricted to administrators only. A local user without administrative privileges could use the Npcap driver to...
CVE-2026-33921
CVE-2026-33921 maps to a Windows RPC Runtime (rpcrt4.dll) vulnerability where NdrComplexTypeBufferSize underflows, enabling a pre-auth heap-based overflow (Ghost-Call) via RPC/SMB without credentials. Impact: potential remote code execution with SYSTEM privileges on affected Windows hosts; exploi...
PYSEC-2026-732 Plone credentials stored in session cookie
Plone CMS 3.1.x uses invariant data a client username and a server secret when calculating an HMAC-SHA1 value for an authentication cookie, which makes it easier for remote attackers to gain permanent access to an account by sniffing the network...
PYSEC-2026-734 Plone CMS Improper Session Management
Plone CMS before 3 places a base64 encoded form of the username and password in the ac cookie for all user accounts, which makes it easier for remote attackers to obtain access by sniffing the network...
Sensitive Cookie Without "HttpOnly" Flag
Overview Affected versions of this package are vulnerable to Sensitive Cookie Without "HttpOnly" Flag via missing HttpOnly and Secure attributes on the pinpointJwt session cookie. An attacker can access session tokens by exploiting stored or reflected cross-site scripting to exfiltrate the cookie...
The Gentlemen are knocking: сustom backdoors and evolving tactics
Introduction This year saw the emergence of The Gentlemen, a prominent example of a group operating under the ransomware-as-a-service RaaS model. Although our initial assessment suggested the group first appeared in mid-2025, it actually started ramping up its activities at the beginning of 2026...
