NetLlix

NetLlix A project created with an aim to emulate and test exfiltration of data over different network protocols. The emulation is performed w/o the usage of native API's. This will help blue teams write correlation rules to detect any type of C2 communication or data exfiltration. Currently, this...

ksubdomain

KSubdomain: 초고속 무상태 서브도메인 브루트포스 도구 English | 한국어 KSubdomain은 무상태 기술 기반의 서브도메인 브루트포스 도구로, 전례 없는 스캔 속도와 낮은 메모리 사용량을 제공합니다. 원시 소켓을 사용하여 네트워크 어댑터를 직접 조작하고 시스템 커널 프로토콜 스택을 우회하며, 신뢰할 수 있는 상태 테이블 재전송 메커니즘을 통해 결과의 완전성을 보장합니다. Windows, Linux, macOS를 지원하며 대규모 DNS 자산 탐지에 최적의 도구입니다. 🚀 핵심 장점 번개 같은 속도: 무상태 스캔이...

udp2raw

Udp2raw-tunnel Raw Socket을 사용하여 UDP 트래픽을 암호화된 FakeTCP/UDP/ICMP 트래픽으로 변환하는 터널입니다. UDP 방화벽또는 불안정한 UDP 환경을 우회하는 데 도움을 줍니다. 단독으로 사용할 경우 udp2raw는 UDP 트래픽만 터널링합니다. 그러나 udp2raw와 UDP 기반 VPN을 함께 사용하면 모든 트래픽TCP/UDP/ICMP 포함을 터널링할 수 있습니다. 현재 OpenVPN/L2TP/ShadowVPN 및 tinyfecVPN이 지원됩니다. 또는 udp2raw 위키 简体中文 지원 플...

PiX-C2

PiX-C2 ICMP C2 서버 애플리케이션 NoCow 작성 이메일: [email protected] ICMP C2 프로젝트즉 PiX-C2는 ICMP만을 사용하여 명령 및 제어를 가능하게 하는 클라이언트/서버 애플리케이션입니다. 서버는 ICMP 패킷을 스니핑하고 ICMP 패킷의 데이터 페이로드에서 정보를 추출합니다. 적절한 데이터가 수신되면 클라이언트에 명령이 전송됩니다. 명령은 "run "로 시작해야 합니다. 다른 서버 옵션으로는 sleep, sysinfo 등이 있으며 더 추가될 예정입니다. 가정: 클라이언트/서버...

ddos-traffic-monitor

DDoS Traffic Monitor 네트워크 트래픽 양을 IP 주소별로 감지하고 표시하여 잠재적인 DDoS 공격 을 식별하는 실시간 트래픽 모니터링 도구 입니다. 이 도구는 Python 2.7 로 제작되었으며, 백엔드로 Flask를, 시각화를 위해 웹 기반 프론트엔드를 사용합니다. 기능 실시간 모니터링 : 네트워크 패킷을 캡처하고 IP 주소별 패킷 수를 표시합니다. 웹 기반 대시보드 : 웹 브라우저를 통해 접근할 수 있는 사용자 친화적인 인터페이스입니다. 대화형 테이블 : 몇 초마다 자동으로 업데이트되어 실시간 트래픽을...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

The IPv6 implementation in the Linux kernel before version 6.3 has a maxsize threshold in the net/ipv6/route.c file that can be easily exceeded. This can lead to a denial of service condition, where the network becomes unreachable, resulting in errors when IPv6 packets are sent through a raw sock...

kernel: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP

A flaw was found in the Linux kernel's handling of RAW sockets using IPPROTORAW. A remote attacker could send a specially crafted ICMP Internet Control Message Protocol packet. This malicious packet could set the protocol field to 255, causing it to be processed by a RAW socket configured for...

kernel: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP

A flaw was found in the Linux kernel's handling of RAW sockets using IPPROTORAW. A remote attacker could send a specially crafted ICMP Internet Control Message Protocol packet. This malicious packet could set the protocol field to 255, causing it to be processed by a RAW socket configured for...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101971)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101971 advisory. In the Linux kernel, the following vulnerability has been resolved: inet: RAW sockets using IPPROTORAW MUST drop incoming ICMP Yizhou Zhao reported that simply havi...

CVE-2026-68387

The CVE-2026-68387 defect affects the Linux kernel CAN raw socket path. A change to store flags in a single bitfield (struct raw_sock) introduced a read-modify-write window during raw_setsockopt() flag updates, enabling concurrent access races. The fix adds a locking wrapper around flag manipulat...

OESA-2026-3302 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: inet: RAW sockets using IPPROTORAW MUST drop incoming ICMP Yizhou Zhao reported that simply having one RAW socket on protocol IPPROTORAW 255 was dangerous...

OESA-2026-3206 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A...

SUSE-SU-2026:3156-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock bsc1264484. - CVE-2026-46052: ceph: only dadd negative dentries when they are unhashed bsc1267494....

SUSE CVE-2026-64114

In the Linux kernel, the following vulnerability has been resolved: ipv4: raw: reject IPHDRINCL packets with ihl ihl 4; err = -EINVAL; if iphlen length goto errorfree; if iphlen = sizeofiph / fix up saddr, totlen, id, csum, transportheader / It does not, however, reject ihl = sizeofiph" branch is...

CVE-2026-64114

A flaw was found in the Linux kernel's handling of IPv4 raw sockets. An unprivileged attacker with CAPNETRAW capabilities can craft and inject a malformed IPv4 packet with an invalid Internet Header Length IHL. This can lead to an out-of-bounds memory access when the packet is processed by certai...

CVE-2026-64114

In the Linux kernel, the following vulnerability has been resolved: ipv4: raw: reject IPHDRINCL packets with ihl ihl 4; err = -EINVAL; if iphlen length goto errorfree; if iphlen = sizeofiph / fix up saddr, totlen, id, csum, transportheader / It does not, however, reject ihl = sizeofiph" branch is...

EUVD-2026-45799

In the Linux kernel, the following vulnerability has been resolved: ipv4: raw: reject IPHDRINCL packets with ihl ihl 4; err = -EINVAL; if iphlen length goto errorfree; if iphlen = sizeofiph / fix up saddr, totlen, id, csum, transportheader / It does not, however, reject ihl = sizeofiph" branch is...

CVE-2026-64114 ipv4: raw: reject IP_HDRINCL packets with ihl < 5

In the Linux kernel, the following vulnerability has been resolved: ipv4: raw: reject IPHDRINCL packets with ihl ihl 4; err = -EINVAL; if iphlen length goto errorfree; if iphlen = sizeofiph / fix up saddr, totlen, id, csum, transportheader / It does not, however, reject ihl = sizeofiph" branch is...

PT-2026-61431

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IPv4 raw socket implementation where the raw send hdrinc function fails to reject packets with an Internet Header Length ihl value of less than 5. According to RFC...

SUSE SLES15 : Security update for the Linux Kernel (SUSE-SU-2026:3089-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3089-1 advisory. The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: -...