TrustTunnel

Clientes · App store · Play store Índice Introducción Características del servidor Características del cliente Inicio rápido Configuración del endpoint Instalar el endpoint Actualizar el endpoint Asistente de configuración del endpoint Ciclo de vida del certificado Let's Encrypt Ejecutar el...

QUIC-attacks

Ataques QUIC CVE-2022-30591 Este repositorio tiene el propósito de compartir los scripts que utilizamos con fines educativos. Estos ataques fueron parte de nuestro estudio consulte aquí y fueron probados contra 6 servidores diferentes compatibles con QUIC IIS, NGINX, LiteSpeed, Cloudflare, H2O y...

CVE-2025-54939

PoC for QUIC-LEAK CVE-2025-54939 in LSQUIC Overview This PoC highlights CVE-2025-54939, a pre-handshake memory exhaustion Denial of Service vulnerability in the LSQUIC QUIC implementation. The issue, named QUIC-LEAK, was first documented by Imperva:...

HTTP3-attacks

HTTP3-attacks CVE-2022-30592 Basado en el trabajo: E. Chatzoglou, V. Kouliaridis, G. Kambourakis, G. Karopoulos, y S. Gritzalis,"A hands-on gaze on HTTP/3 security through the lens of HTTP/2 and a public dataset", Computers & Security, p. 103051, 2022. El presente repositorio tiene como finalidad...

openssl

Bienvenido al Proyecto OpenSSL OpenSSL es un kit de herramientas de código abierto robusto, de grado comercial y completo para los protocolos de Seguridad de la Capa de Transporte TLS, anteriormente SSL, TLS de Datagramas DTLS y QUIC. Las implementaciones de protocolos se basan en una biblioteca...

ssh3

!NOTE SSH3 is probably going to change its name. It is still the SSH Connection Protocol RFC4254 running on top of HTTP/3 Extended connect, but the required changes are heavy and too distant from the philosophy of popular SSH implementations to be considered for integration. The specification dra...

zeek-spicy-stun

STUN Session Traversal Utilities for NAT STUN This is a Zeek protocol analyzer that detects STUN based on Spicy. You must install Spicy to use this package. This package will create two logs: stun.log - This log has every STUN message. stunnat.log - This log has NAT detections from mapped...

knot-doq

Knot Resolver 6.3.0 — DNS-over-QUIC heap overflow → RCE PoC Proof-of-concept for a remotely triggerable heap buffer overflow in Knot Resolver's DNS-over-QUIC DoQ receive path that yields remote code execution as the knot-resolver service user. Component: kresd DoQ listener daemon/quicconn.c...

CVE-2026-6060-QUIC-Handshake-Amplification-via-Address-Validation-Bypass

CVE-2026-6060 – QUIC Handshake Amplification via Address Validation Bypass Program Code Python simulation root@kitploit: quicserversim.py - Vulnerable QUIC server simulated handshake import socket def sendquicinitialconn, addr, serversalt: Respond with a large "server hello" without validating...

CVE-2026-4253-Scanner

CVE-2026-42530 — Escáner Safe-Check Escáner masivo no destructivo para el use-after-free de NGINX HTTP/3 QUIC Inventario de qué hosts están expuestos — sin desencadenar el fallo. ⚠️ Aviso legal Esta herramienta es solo para pruebas de seguridad autorizadas — tu propia infraestructura o sistemas...

CVE-2026-42530

🛡️ CVE-2026-42530 - Vulnerabilidad de Use-After-Free en NGINX HTTP/3 QUIC Use-After-Free de Alta Gravedad en NGINX HTTP/3 QUIC ⚠️ Vulnerabilidad del Flujo del Codificador QPACK 🔍 Resumen CVE-2026-42530 es una vulnerabilidad de use-after-free en el módulo de NGINX...

Chromium: CVE-2026-78893 Information leak in QUIC

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-78966 Externally controlled reference in QUIC

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

tls

ztls Uma implementação TLS 1.3 para QUIC escrita em Zig, aderindo estritamente às RFC 8446 TLS 1.3 e RFC 9001 QUIC-TLS. Estado Aspecto| Info ---|--- Estabilidade da API| Produção Versão do Zig| 0.16.0 Plataformas| Linux, macOS, Windows Nota sobre desempenho O alvo de 2 ms por handshake é validado...

quicmap

quicmap Ziemlich schneller QUIC-Dienst-Scanner quicmap ist ein relativ schneller QUIC-Dienst-Scanner, der die Notwendigkeit beseitigt, mehrere Tools zu verwenden, um QUIC-Dienste, die verwendete Protokollversion sowie unterstützte ALPNs zu identifizieren. Hauptfunktionen Beliebige Hosts,...

CVE-2026-33555

Bypass della Validazione del Body FIN Standalone in HAProxy H3/QUIC tramite HTTP Request Smuggling Post completo qui : https://r3verii.github.io/cve/2026/04/14/haproxy-h3-standalone-fin-smuggling.html Riepilogo Una vulnerabilità nell'implementazione HTTP/3 di HAProxy consente a un attaccante di...

rosemary

Rosemary क्विक QUIC पर क्रॉस-प्लेटफ़ॉर्म कर्नेल-स्तरीय पिवटिंग प्लेटफ़ॉर्म। कोई TUN/TAP नहीं। कोई proxychains नहीं। कोई प्रॉक्सी सेटिंग्स नहीं। Rosemary दूरस्थ होस्टों पर ट्रैफ़िक को कर्नेल स्तर पर पारदर्शी रूप से इंटरसेप्ट करता है: कोई प्रॉक्सी सेटिंग्स नहीं, कोई TUN/TAP डिवाइस नहीं, कोई...

CVE-2026-78966

Externally controlled reference in QUIC in Google Chrome prior to 152...

CVE-2026-78893

Information leak in QUIC in Google Chrome prior to 152.0.7977.65 allow...

CVE-2026-78966

A flaw was found in Google Chrome. An externally controlled reference within the QUIC protocol could allow a remote attacker to bypass the web origin policy. This vulnerability can be exploited by enticing a user to visit a specially crafted HTML page. The bypass of the web origin policy could le...