chapcrack

chapcrack MS-CHAPv2ネットワークハンドシェイクを解析および復号するためのツール。 1. 最初に行う必要があるのは、解析したいMS-CHAPv2ハンドシェイクのネットワークトラフィックを取得することです。 PPTP VPN接続の場合、tcpdumpやwiresharkなどのツールを使用してネットワークキャプチャを取得するだけです。 WPA2 Enterprise無線ハンドシェイクの場合、FreeRADIUS-WPEのようなツールを使用して'challenge'および'response'パラメータを取得するだけです。 2...

CVE-2022-23270-PPTP

CVE-2022-23270 CVE-2022-23270을 탐지하는 패키지입니다. Microsoft PPTP 구현의 취약점입니다. 예제 포함된 PCAP 파일을 testing\traces 디렉토리에서 이 로직을 실행할 수 있습니다: $ zeek -Cr CVE-2022-23270-exploited.pcap packages $ cat notice.log separator \x09 setseparator , emptyfield empty unsetfield - path notice open 2022-05-10-23-03-47 fields...

CVE-2018-14847

CVE-2018-14847 CVE-2018-14847 を利用して RouterOS 上にグローバルプロキシを作成する 使用方法 準備 pip3 install paramiko ipcalc optparse hashlib 使い方 IPファイルの場合 python3 loop.py -f list.txt 単一IPの場合 python3 loop.py ip 著作権 このリポジトリ内のCVE-2018-14187を使用してユーザー名/パスワードを取得するPoC部分は、miladdiaz/MikrotikExploit...

ShuckNT

🔐 ShuckNT : クラックする前にハッシュをシュック | Shuck.sh のスクリプト ShuckNT は、Shuck.sh オンラインサービスのスクリプトで、オンプレミスで使用するためのものです（オンラインで試す!）。Data Encryption Standard DES に基づく認証トークンをダウングレード、変換、解析、およびシュックするために設計されています。 対応アルゴリズム / フォーマット : MSCHAPv2 NETNTLM LM|NTHASH PPTP-VPN $99$ 任意のチャレンジ値にもすべて対応! ShuckNT は、ハッシュ・シュッキング...

Homework-of-Python

Homework-of-Python 私のブログのPythonコード。 pptppasswordhack.py ブルートフォース攻撃を使用してPPTP VPNのパスワードを取得します。 ファイル（wordlistという名前）からパスワードを読み取り、pptpsetupを使用してサーバーに接続します。 時間間隔は10秒です。 portscan.py ポートのスキャンに使用します。 タイムアウトは3秒です。 c++バージョン： https://github.com/3gstudent/Homework-of-C-Language/blob/master/portscan.cpp...

EUVD-2026-80043

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in modvpnremote/plan.json, pptpdusershow.cgi, pptpclientconfigshow.cgi, and l2tpdusershow.cgi. Attackers can leverage these components to obtain PPTP and L2TP VPN credentials...

CVE-2026-76871

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in modvpnremote/plan.json, pptpdusershow.cgi, pptpclientconfigshow.cgi, and l2tpdusershow.cgi. Attackers can leverage these components to obtain PPTP and L2TP VPN credentials...

CVE-2026-76871

Netcore NR255-V router, version 1.5.130703 , is affected by a sensitive information disclosure vulnerability spanning four components: mod_vpn_remote/plan.json , pptpd_user_show.cgi , pptp_client_config_show.cgi , and l2tpd_user_show.cgi . An attacker with low privileges over the network can leve...

CVE-2026-76871 Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via VPN Read Handlers

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in modvpnremote/plan.json, pptpdusershow.cgi, pptpclientconfigshow.cgi, and l2tpdusershow.cgi. Attackers can leverage these components to obtain PPTP and L2TP VPN credentials...

PT-2026-93205

Name of the Vulnerable Software and Affected Versions Netcore NR255-V version 1.5.130703 Description Sensitive information disclosure occurs through VPN read handlers. Attackers can exploit the endpoints 'mod vpn remote/plan.json', 'pptpd user show.cgi', 'pptp client config show.cgi', and 'l2tpd...

CVE-2026-19341

CVE-2026-19341 affects UTT HiPER 1200GW (up to version 2.5.3-170306). The vulnerability targets the strcpy usage in /goform/pptpSrvGlobalConfig, where manipulation of the EncryptionMode argument causes a stack-based buffer overflow. This can be triggered remotely and is publicly disclosed; exploi...

CVE-2026-13515 Tenda JD12L SetPptpServerCfg formSetPPTPServer stack-based overflow

A security vulnerability has been detected in Tenda JD12L 16.03.53.23. Impacted is the function formSetPPTPServer of the file /goform/SetPptpServerCfg. Such manipulation of the argument startIp leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclos...

CVE-2026-12807

A vulnerability was found in Edimax BR-6478AC V2 1.23. This affects the function setWAN of the file /goform/setWAN of the component POST Request Handler. The manipulation of the argument pppUserName/pptpUserName/L2TPUserName results in command injection. It is possible to launch the attack...

CVE-2026-9428

A vulnerability has been found in Tenda F1202 1.2.0.20408. Affected is the function fromPPTPUserSetting of the file /goform/PPTPUserSetting. Such manipulation of the argument delno leads to stack-based buffer overflow. The attack may be performed from remote. The exploit has been disclosed to the...

CVE-2026-9628

A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is an unknown function of the file /goform/formPptpClientConfig of the component Web Management Interface. This manipulation of the argument PPTP server address/username/password/tunnel name causes stack-based buffer...

The vulnerability of the fromPptpUserAdd() function in the Tenda F1202 router software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromPptpUserAdd function in the Tenda F1202 router microprogramming system is related to the operation that goes beyond the buffer boundaries in memory when processing the parameters username and opttype. Exploiting this vulnerability allows a remote attacker to execute...

CVE-2026-9628

A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is an unknown function of the file /goform/formPptpClientConfig of the component Web Management Interface. This manipulation of the argument PPTP server address/username/password/tunnel name causes stack-based buffer...

CVE-2026-9628

Summary : CVE-2026-9628 impacts UTT HiPER 1200GW (up to version 2.5.3-170306) via the Web Management Interface. The vulnerability is in /goform/formPptpClientConfig, where manipulating the PPTP server address/username/password/tunnel name triggers a stack-based buffer overflow. The flaw’s attack ...

CVE-2026-9382

A flaw has been found in Edimax BR-6675nD 1.12. Affected by this issue is the function formPPTPSetup of the file /goform/formPPTPSetup of the component POST Request Handler. Executing a manipulation of the argument pptpUserName can lead to buffer overflow. The attack may be launched remotely. The...

CVE-2026-9431

A vulnerability was identified in Tenda F1202 1.2.0.20408. This affects the function fromPptpUserAdd of the file /goform/PptpUserAdd. The manipulation of the argument opttype leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be...