bandwhich

bandwhich This is a CLI utility for displaying current network utilization by process, connection and remote IP/hostname Table of contents bandwhich Table of contents Project status How does it work? Installation Downstream packaging status Download a prebuilt binary Building from source...

rustnet

RustNet ターミナル向けのプロセス単位ネットワーク監視: ライブ TCP・UDP・QUIC 接続をディープパケットインスペクションで可視化し、デフォルトでサンドボックス化。 英語 | 简体中文 |...

aiengine

AIEngine Artificial Inteligent Engine AIEngine는 차세대 대화형/프로그래밍 가능한 Python/Ruby/Java/Lua 패킷 검사 엔진으로, 사람의 개입 없이 학습할 수 있는 기능, NIDS네트워크 침입 탐지 시스템 기능, DNS 도메인 분류, 네트워크 수집기, 네트워크 포렌식 등을 갖추고 있습니다. 현재 프로젝트는 https://bitbucket.org/camp0/aiengine 에 있습니다. AIEngine은 네트워크/보안 전문가가 트래픽을 식별하고 NIDS, 방화벽, 트래픽 분류기 등에...

ntopng

ntopng Introduction ntopng® is a web-based network traffic monitoring application released under GPLv3. It is the new incarnation of the original ntop written in 1998, and now revamped in terms of performance, usability, and features. While you can read more about ntopng on the ntop web site...

nDPI

nDPI nDPI란 무엇인가? nDPI®는 심층 패킷 검사deep-packet inspection를 위한 오픈 소스 LGPLv3 라이브러리입니다. nDPI에 대한 일반적인 FAQ는 여기에서 확인할 수 있습니다. nDPI 컴파일 방법 이 프로젝트를 컴파일하려면 다음을 실행하세요. ./autogen.sh && ./configure make croaring.c 컴파일 중 오류가 발생하면 다음을 시도하세요. ./autogen.sh && ./configure --enable-old-croaring make 도구나 테스트 없이 라이브러리...

cyberprobe

Cyberprobe 전체 문서는 https://cybermaggedon.github.io/cyberprobe-docs/ 에 있습니다. 요약 Cyberprobe는 네트워크 실시간 모니터링을 위한 네트워크 패킷 검사 툴킷심층 패킷 검사입니다. 이는 네트워크 모니터링, 침입 탐지, 포렌식 분석, 방어 플랫폼으로 활용됩니다. Cyberprobe 패킷 검사는 물리적 네트워크뿐만 아니라 클라우드 VPC에서도 작동합니다. 클라우드 규모 배포를 가능하게 하는 기능이 있습니다. 이것은 바로 사용할 수 있는 단일한 모놀리식 침입 탐지 툴킷이...

ndff

ndff fluentd 向け nDPI ndff は、nDPI ライブラリを使用した fluentd 向けフローコレクタです。 ndff は、nDPI 内のサンプルである ndpiReader を基に実装されています。 概要 nDPI は、ディープパケットインスペクションのためのオープンソースの LGPLv3 ライブラリです。 ndpiReader は nDPI に含まれるサンプルで、次の機能を持ちます。 パケット（pcap ファイルまたはデバイス）からプロトコルを検出する 選択したトラフィックをフィルタリングするために BPF フィルタを適用する パケットの内容を JSON...

TrustTunnel v1.1.0

Clients · App store · Play store Table of Contents Introduction Server Features Client Features Quick start Endpoint setup Install the endpoint Updating the endpoint Endpoint configuration wizard Let's Encrypt certificate lifecycle Running endpoint Export client configuration Client setup Install...

CVE-2025-13476

Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable TLS ClientHello fingerprint lacking extension diversity, allowing Deep Packet Inspection DPI systems to trivially identify and block proxy traffic, undermining censorship circumvention...

EUVD-2025-208314

Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable TLS ClientHello fingerprint lacking extension diversity, allowing Deep Packet Inspection DPI systems to trivially identify and block proxy traffic, undermining censorship circumvention...

CVE-2026-20007

A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This vulnerability is due to a...

CVE-2025-13476

Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable TLS ClientHello fingerprint lacking extension diversity, allowing Deep Packet Inspection DPI systems to trivially identify and block proxy traffic, undermining censorship circumvention...

CVE-2025-13476

Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable TLS ClientHello fingerprint lacking extension diversity, allowing Deep Packet Inspection DPI systems to trivially identify and block proxy traffic, undermining censorship circumvention...

CVE-2025-13476 Rakuten Viber uses broken or risky cryptographic Algorithm

Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable TLS ClientHello fingerprint lacking extension diversity, allowing Deep Packet Inspection DPI systems to trivially identify and block proxy traffic, undermining censorship circumvention...

CVE-2025-13476

CVE-2025-13476 affects Rakuten Viber Cloak mode on Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0. The root cause is a consistent, static TLS ClientHello fingerprint with a lack of extension diversity, making DPI systems able to identify and block proxy traffic and undermine censorship circum...

CVE-2025-13476 Rakuten Viber uses broken or risky cryptographic Algorithm

Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable TLS ClientHello fingerprint lacking extension diversity, allowing Deep Packet Inspection DPI systems to trivially identify and block proxy traffic, undermining censorship circumvention...

PT-2026-23467

Name of the Vulnerable Software and Affected Versions Rakuten Viber versions 25.6.0.0 through 25.8.1.0 Description Rakuten Viber’s Cloak mode on Android version 25.7.2.0g and Windows versions 25.6.0.0 through 25.8.1.0 employs a consistent TLS ClientHello fingerprint that lacks extension diversity...

A flawed TLS handshake implementation affects Viber Proxy in multiple platforms

Overview The Rakuten Viber messaging app for Android V25.7.2.0g and Windows V25.6.0.0-V25.8.1.0, has a flaw in its TLS handshake implementation when using the Cloak proxy configuration. This flaw allows for easy identification of proxy usage, potentially compromising user anonymity. Description...

EUVD-2026-9454

A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This vulnerability is due to a...

CVE-2026-20007

A vulnerability in the Snort 2 and Snort 3 deep packet inspection of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass configured Snort rules and allow traffic onto the network that should have been dropped. This vulnerability is due to a...