IkeAbuser

IkeAbuser 一个简单的工具封装，用于自动化IPSec VPN网关的枚举、指纹识别和PSK提取。 没什么特别的，只是一个我编写的脚本，用于在CTF和CPENT学习期间节省时间。它将ike-scan、nmap和hashcat串联起来，这样我就不必反复输入相同的命令了。 免责声明 仅限授权测试和教育用途。仅在你拥有或明确允许测试的机器上运行（你的实验室、CTF靶机等）。使用后果自负。 功能说明 该脚本执行测试IKE网关的常规步骤： 1. 使用nmap检查UDP端口500或4500是否开放。如果没有，则停止。 2...

CVE-2026-23937 Host PSK extraction in Zabbix API

The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity...

CVE-2026-23937

The Zabbix API host.get action allows authenticated users to extract a host's PSK key. With low privileges and network access, an attacker can compromise the pre-shared key used for TLS connections, enabling potential data integrity attacks (CVSS 6.0 MEDIUM, VI:H). The Zabbix Jira ticket ZBX-2807...

EUVD-2026-60740

The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity...

Reaver brute force attack Tool, Cracking WPA in 10 Hours

Reaver brute force attack Tool, Cracking WPA in 10 Hours The WiFi Protected Setup protocol is vulnerable to a brute force attack that allows an attacker to recover an access point's WPS pin, and subsequently the WPA/WPA2 passphrase, in just a matter of hours. Reaver is a WPA attack tool developed...