pyshark

pyshark tshark の Python ラッパー。Wireshark のディセクタを使用して Python でパケット解析を可能にします。 拡張ドキュメント: http://kiminewt.github.io/pyshark コントリビューター募集中 - 様々な理由により、現在パッケージのメンテナンスと機能強化に時間を割くのが難しい状況です。プルリクエストはすべて確認します。興味があり、適任と思われる方は、プロジェクトに参加していただけると嬉しいです。[email protected] までご連絡ください。 Python...

pyshark-legacy

pyshark 此仓库是 pyshark 旧版本（适用于 Python2.7+）的代码库。自 0.3.8 版本之后，仅接收 bug 修复。 如需仅支持 Python 3.5+ 的新版本，请使用主仓库 tshark 的 Python 封装，允许使用 wireshark 解析器进行 Python 数据包解析。 扩展文档：http://kiminewt.github.io/pyshark Python 中有不少数据包解析模块，本模块的不同之处在于它并不实际解析任何数据包，而是利用 tshark（wireshark 命令行工具）导出 XML 的能力来使用其解析功能。...

Krb5RoastParser

Krb5RoastParser 📑 目次 ❓ Krb5RoastParserとは？ ⭐ 特徴 ⚙️ インストール ▶️ 実行方法 📈 実行後 📜 ライセンス ❓ Krb5RoastParser とは？ Krb5RoastParser は、.pcapファイルからKerberos認証パケット（AS-REQ、AS-REP、TGS-REP）を解析し、セキュリティテスト用のパスワードクラック互換ハッシュを生成するツールです。tsharkを活用することで、Krb5RoastParserはKerberosパケットから必要な詳細情報を抽出し、Hashcatなどのツールで使用可能なハッシュ形式を提供します。...

laf

LoRaWAN 監査フレームワーク - アルファ版 IoTデプロイメントは成長を続けており、その大きな成長の一部は、世界中の何百もの都市（スマートシティ）や産業、家庭に展開された数百万のLPWAN（低消費電力広域ネットワーク）センサーで構成されています。最も使用されているLPWAN技術の1つがLoRaであり、LoRaWANはそのネットワーク標準（MAC層）です。LoRaWANは暗号化を組み込んだ安全なプロトコルですが、実装上の問題や脆弱性が現在のほとんどのデプロイメントのセキュリティに影響を与えています。...

PoC-CVE-2018-15473

PoC-CVE-2018-15473 OpenSSH 7.7 までは、無効な認証ユーザーに対するベイルアウトを、リクエストを含むパケットが完全に解析されるまで遅延させないため、ユーザー列挙の脆弱性が存在します。これは auth2-gss.c、auth2-hostbased.c、auth2-pubkey.c に関連しています。 CVE: CVE-2018-15473 解説記事元: https://www.openwall.com/lists/oss-security/2018/08/15/5 パッチを適用していない現行バージョンでは、リモートの攻撃者が対象の OpenSSH...

isip

isip Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks. Video https://asciinema.org/a/11128 Setup root@kitploit: git clone https://github.com/halitalptekin/isip.git cd isip pip install -r requirements.txt Usage Packet...

Astra Linux – Vulnerability in u-boot

A issue was discovered in Das U-Boot during the period from 2019.07. There is an unbounded memcpy operation when parsing a UDP packet, due to an underflow of the netprocessreceivedpacket integer value during the ncinputpacket call...

Astra Linux – Vulnerability in gpsd

There is an integer underflow vulnerability in the nextstate function in gpsd/packet.c in gpsd versions prior to the commit ffa1d6f40bca0b035fc7f5e563160ebb67199da7. When parsing a NAVCOM packet, the payload length is calculated using lexer-length = sizetc - 4, without checking whether the input...

DEBIAN-CVE-2026-90558

sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...

CVE-2026-90558

sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...

CVE-2026-90558 sngrep through 1.8.4 Stack Buffer Overflow via SIP Headers

sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...

PT-2026-90718

sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...

Linux Distros Unpatched Vulnerability : CVE-2026-89606

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ecryptfs: reject too-small tag 70 packets ecryptfsparsetag70packet subtracts fixed metadata fields from the parsed packet body size to derive the encrypted...

DEBIAN-CVE-2026-89608

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: pass packet set buffer size to parser ecryptfsparsepacketset receives a pointer into the file header, but it calculates the remaining packet buffer size from PAGESIZE - 8. For version 1 headers the packet set starts lat...

AZL-100184 CVE-2026-89608 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: pass packet set buffer size to parser ecryptfsparsepacketset receives a pointer into the file header, but it calculates the remaining packet buffer size from PAGESIZE - 8. For version 1 headers the packet set starts lat...

CVE-2026-89608

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: pass packet set buffer size to parser ecryptfsparsepacketset receives a pointer into the file header, but it calculates the remaining packet buffer size from PAGESIZE - 8. For version 1 headers the packet set starts lat...

EUVD-2026-76518

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject too-small tag 70 packets ecryptfsparsetag70packet subtracts fixed metadata fields from the parsed packet body size to derive the encrypted filename size. A malformed packet with a body smaller than those fixed...

CVE-2026-89606

CVE-2026-89606 is an integer underflow vulnerability in the Linux kernel's ecryptfs component. The function ecryptfs_parse_tag_70_packet() subtracts fixed metadata fields from the parsed packet body size to derive the encrypted filename size; a malformed tag 70 packet with a body smaller than tho...

CVE-2025-71418

PocketMine-MP versions before 5.25.2 fail to limit the explode function in packet parsing, allowing malicious clients to waste server resources. Attackers can send crafted packets with excessive delimiters to consume CPU and memory through sign editing, JWT parsing, and command parsing endpoints...

CVE-2025-71418

PocketMine-MP versions before 5.25.2 are vulnerable to a denial of service caused by an unbounded explode() function during packet parsing. A remote, unauthenticated attacker can send crafted packets containing excessive delimiters to exhaust CPU and memory resources. The affected parsing endpoin...