OpenVPN Access Server 2.1.4 - CRLF Injection

CRLF injection vulnerability in the web interface in OpenVPN Access Server 2.1.4 allows remote attackers to inject arbitrary HTTP headers and consequently conduct session fixation attacks and possibly HTTP response splitting attacks via "%0A" characters in the PATHINFO to sessionstart/. id:...

autovpn

!CAUTION This repository is no longer being maintained. No further updates, bug fixes, or support will be provided. Please use the new version https://github.com/ttlequals0/autowire Overview Script that allows the easy creation of OpenVPN endpoints in any AWS region. To create a VPN endpoint is...

autovpn

!CAUTION 此仓库不再维护。不再提供任何更新、错误修复或支持。 请使用新版本 https://github.com/ttlequals0/autowire 概述 该脚本允许在任何AWS区域轻松创建OpenVPN端点。只需一个命令即可创建VPN端点，大约需要3分钟。它将创建适当的安全组。它会启动一个带有标签的EC2实例并配置OpenVPN软件。实例配置完成后，将下载一个OpenVPN配置文件并可立即使用。还有功能可以查看哪些实例正在哪个区域运行，并在完成后终止实例。其他功能包括指定实例类型、生成SSH密钥对、指定自定义AMI、更改登录用户等更多功能即将推出。 使用场景...

vopono

vopono is a tool to run applications through VPN tunnels via temporary network namespaces. This allows you to run only a handful of applications through different VPNs simultaneously, whilst keeping your main connection as normal. vopono includes built-in killswitches for both Wireguard and...

pritunl

pritunl: enterprise vpn server Pritunl is a distributed enterprise vpn server built using the OpenVPN protocol. Documentation and more information can be found at the home page pritunl.com Install From Source root@kitploit: Install MongoDB if running single host configuration sudo tee...

GL.iNet-Multiple-Vulnerabilities

GL.iNet Multiple Vulnerabilities This repository contains the exploits of the following vulnerabilities: CVE-2023-46454: In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the package information functionality...

openvpn

OpenVPN -- Un demonio de tunelización segura Copyright C 2002-2026 OpenVPN Inc. Este programa es software libre; puedes redistribuirlo y/o modificarlo bajo los términos de la GNU General Public License versión 2 publicada por la Free Software Foundation. Para obtener la última versión de OpenVPN,...

openvpn-install

openvpn-install OpenVPN installer for Debian, Ubuntu, Fedora, openSUSE, CentOS, Amazon Linux, Arch Linux, Oracle Linux, Rocky Linux and AlmaLinux. This script will let you setup and manage your own secure VPN server in just a few seconds. What is this? This script is meant to be run on your own...

CryKeX

Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges optional Limitations: AES and RSA keys only Fails most...

patator

Patator Patator was written out of frustration from using Hydra, Medusa, Ncrack, Metasploit modules and Nmap NSE scripts for password guessing attacks. I opted for a different approach in order to not create yet another brute-forcing tool and avoid repeating the same shortcomings. Patator is a...

4nonimizer

If you like the 4nonimizer, please help us with whatever you want! What is 4nonimizer? It is a bash script for anonymizing the public IP used to browsing Internet, managing the connection to TOR network and to different VPNs providers OpenVPN, whether free or paid. By default, it includes several...

crowbar

Crowbar - Brute forcing tool What is Crowbar? Crowbar formally known as Levye is a brute forcing tool that can be used during penetration tests. It was developed to brute force some protocols in a different manner according to other popular brute forcing tools. As an example, while most brute...

crowbar

Crowbar - 暴力破解工具 什么是 Crowbar？ Crowbar 原名 Levye 是一款可用于渗透测试的暴力破解工具。它以不同于其他流行暴力破解工具的方式对某些协议进行暴力破解。例如，大多数暴力破解工具使用用户名和密码进行 SSH 暴力破解，而 Crowbar 使用 SSH 密钥。这使得在渗透测试中获得的任何私钥都可用于攻击其他 SSH 服务器。 当前 Crowbar 支持： OpenVPN -b openvpn 支持 NLA 的远程桌面协议 RDP -b rdp SSH 私钥认证 -b sshkey VNC 密钥认证 -b vpn 安装 Kali Linux 用户可执行...

CVE-2021-3773

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ 🚀 Port Shadow...

CVE-2020-9442

Título del Exploit: OpenVPN Connect para Windows MSI - 3.1.0.361 - Escalada de Privilegios Fecha: 2020-02-28 Autor: Andrew Hess Enlace del software: https://openvpn.net/client-connect-vpn-for-windows/ Versión: 3.1.0.361 MSI CVE: CVE-2020-9442 Historial 2019.12.15 - Vulnerabilidad descubierta...

latch-plugin-openVPN-AS

latch-plugin-openVPN-AS...

exploit-CVE-2026-2670

exploit-CVE-2026-2670 CVE-2026-2670 – PoC de Injeção de Comandos no Advantech WISE-6610 Prova de conceito de exploit demonstrando uma vulnerabilidade de injeção de comandos no roteador celular industrial Advantech WISE-6610. A vulnerabilidade existe no endpoint /cgi-bin/luci/admin/openvpnapply e...

LongBow

Exploit di Esecuzione Comandi Remota Locale sul Router Archer TP-Link VR1600V CVE-2023-31756 Panoramica Questo script Python dimostra una vulnerabilità di esecuzione comandi remota locale nei router Archer TP-Link VR1600V V1/V2. L'exploit consente l'accesso al sistema operativo del router a livel...

zeek-openvpn

zeek::openvpn यह https://github.com/corelight/zeek-spicy-openvpn के पक्ष में पदावनत deprecated कर दिया गया है एक प्लगइन जो निम्नलिखित मोड में OpenVPN का पता लगाता है और पार्स करता है: UDP w/ TLS UDP w/ TLS & TLS Auth TCP w/ TLS TCP w/ TLS & TLS Auth अभी तक यह UDP या TCP के लिए shared key मोड का प...

zeek-spicy-openvpn

zeek-spicy-openvpn Questo è un analizzatore di protocollo che rileva il traffico OpenVPN. Per usare questo pacchetto è necessario installare Spicy. Blog e webinar che descrivono lo sviluppo di questo analizzatore di protocollo: https://zeek.org/2021/03/16/a-zeek-openvpn-protocol-analyzer/...