dnspeep

dnspeep dnspeep 可以让你监控你的计算机正在发出的DNS查询。 以下是一些示例输出： $ sudo dnspeep query name server IP response A incoming.telemetry.mozilla.org 192.168.1.1 CNAME: telemetry-incoming.r53-2.services.mozilla.com, CNAME: pipeline-incoming-prod-elb-149169523.us-west-2.elb.amazonaws.com, A: 52.39.144.189, A:...

ligolo

Ligolo : Reverse Tunneling made easy for pentesters, by pentesters Table of Contents Introduction Use case Quick Demo Performance Usage Setup / Compiling How to use? TL;DR Options Features To Do Licensing Credits Introduction Ligolo is a simple and lightweight tool for establishing SOCKS5 or TCP...

Security Bulletin:React Router SSR Error Handling Vulnerability in Versions 6.4.0 to 7.17.0

Summary React Router is a router for React. In versions 6.4.0 through 7.17.0, if application code was written in a way that allows attacker-supplied input to overwrite certain aspects of errors caught by the SSR process, then it was possible for an attacker to trigger unexpected constructor...

udp-hunter

什么是UDP Hunter？ UDP 扫描一直是一项缓慢且痛苦的工作，如果再加上 IPv6 的 UDP 扫描，可用的工具选择就非常有限了。UDP Hunter 是一个基于 Python 的开源网络评估工具，专注于 UDP 服务扫描。通过 UDP Hunter，我们专注于为 IPv6 和 IPv4 主机提供广泛已知的 UDP 协议审计。截至目前，UDP Hunter 支持 19 种不同的服务探针。该工具允许您对大型网络进行批量扫描，也可以针对特定端口等进行目标主机扫描。一旦发现开放的服务，UDP Hunter 还会更进一步，为您提供如何可能利用已发现服务的指导。UDP Hunter...

Characterization-and-Detection-of-Cross-Router-Covert-Channels

Caracterización y Detección de Canales Encubiertos entre Enrutadores Este repositorio contiene el código fuente utilizado en el artículo "Characterization and Detection of Cross-Router Covert Channels". Para acceder al artículo, visite el sitio web del laboratorio del Dr. Oren: orenlab. Los datos...

CVE-2022-36663-PoC

CVE-2022-36663-PoC Escáner de red interna mediante blind SSRF en Gluu IAM Gluu IAM es vulnerable a blind SSRF, el cual puede ser explotado para escanear la red interna en busca de puertos abiertos dependiendo de los tiempos de respuesta. https://nvd.nist.gov/vuln/detail/CVE-2022-36663 Para...

CVE-2024-24919---Exploit-Script

CVE-2024-24919---Exploit-Script Descripción CVE-2024-24919 es una vulnerabilidad en los dispositivos Check Point Security Gateway que permite el acceso no autorizado a archivos sensibles mediante la explotación de path traversal. Esta vulnerabilidad permite a un atacante leer el contenido de...

Security Bulletin:Improper Enforcement of Message Integrity in Erlang/OTP SSL: Vulnerability in tls_gen_connection Module Allows Unauthenticated Data Injection

Summary Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Erlang/OTP ssl tlsgenconnection module allows a network-positioned attacker to inject unauthenticated plaintext that the TLS client application later treats as authenticated server...

AutoBrowser

AutoBrowser 4.0 AutoBrowser es una herramienta escrita en Python para testers de penetración. El propósito de esta herramienta es crear un informe archivo JSON y capturas de pantalla de los puertos basados en HTTP/S de la red. Puedes elegir entre analizar un informe de Nmap archivo XML -oX o...

netstat2neo4j

使用 Neo4j 可视化 Netstat 描述 图形有助于在大型数据集中发现异常和模式。 此脚本从多个主机获取 netstat 信息，并将其格式化为可导入 Neo4j 的格式。 可以查询 Neo4j 来查找与特定主机的连接、来自特定主机的连接、了解使用情况或协议等等。 示例文件 example 目录中已包含一些文件，以便您测试该工具。 您还可以找到示例查询，这些查询将帮助您初步了解搜索的可能性。 状态 目前，该工具已针对 Windows 系统使用命令 'netstat -an' 输出的 netstat 进行了测试。 设置 安装 docker 和 docker-compose...

DEBIAN-CVE-2026-92542

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

CVE-2026-92542

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...

CVE-2026-106557

Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-node package did not sufficiently validate TechDocs Markdown extension configuration. An authenticated user who can register or modify documentation sources may cause a TechDo...

CVE-2021-37152

CVE-2021-37152 Explota el acceso a clientes de red enviando paquetes en wirless TP-LINK y preparándose para un ataque MITM exploit Este exploit está diseñado para acceder y escanear clientes de red y podrá acceder fácilmente y prepararse para un ataque MITM, el exploit atacará en las capas tres y...

Cloakify

CloakifyFactory CloakifyFactory & the Cloakify Toolset - Data Exfiltration & Infiltration In Plain Sight; Evade DLP/MLS Devices; Social Engineering of Analysts; Defeat Data Whitelisting Controls; Evade AV Detection. Text-based steganography using lists. Convert any file type e.g. executables,...

isowall

isowall This is a mini-firewall that completely isolates a target device from the local network. This is for allowing infected machines Internet access, but without endangering the local network. Building This project depends upon libpcap, and of course a C compiler. On Debian, the following shou...

isowall

isowall Este es un mini-cortafuegos que aísla por completo un dispositivo objetivo de la red local. Esto sirve para permitir a máquinas infectadas acceso a Internet, pero sin poner en peligro la red local. Compilación Este proyecto depende de libpcap y, por supuesto, de un compilador de C. En...

netmap.js

netmap.js Fast browser-based network discovery module This project is no longer maintained. Description netmap.js provides browser-based host discovery and port scanning capabilities to allow you to map website visitors' networks. It's quite fast, making use of es6-promise-pool to efficiently run...

netmap.js

netmap.js 基于浏览器的快速网络发现模块 该项目已不再维护。 描述 netmap.js 提供基于浏览器的主机发现和端口扫描功能，允许你绘制网站访客的网络地图。 它速度相当快，利用 es6-promise-pool 在浏览器允许的最大并发连接数下高效运行。 动机 我为自己正在构思的一个想法需要一个基于浏览器的端口扫描器。原以为只需导入一个现有模块或从 BeEF 之类的其他项目中复制粘贴即可。 结果发现，并没有一个现成的、可用的、像样的 npm 模块，而 BeEF 中的 portscanner 模块（在撰写本文时）既不准确又缓慢，并且在 Chromium 上无法工作。...

EUVD-2026-94483

The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. Any packet sent from the host network namespace of a Linux Swarm node is encrypted with the overlay-network IPsec...