CVE-2025-63353

CVE-2025-63353 A vulnerability in fiberhome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password WPA/WPA2 pre-shared key to be predicted from the SSID...

SYNwall

SYNwall Zero config IoT firewall. SYNwall is a project built for the time being as a Linux Kernel Module, to implement a transparent and no-config/no-maintenance firewall. You may want to have a look to the for an example of usage. Basics Usually IoT devices are out of a central control, with low...

CVE-2025-63353

FiberHome Wi-Fi Password Predictor CVE-2025-63353 A Python utility designed for security auditing and proof-of-concept demonstration of the deterministic password generation flaw found in FiberHome HG6145F1 RP4423 routers. 📋 Overview This script exploits CVE-2025-63353, a critical vulnerability...

pmkidcracker

Crackeador de PMKID WPA2 Este programa es una herramienta escrita en Python para recuperar la clave precompartida de una red WiFi WPA2 sin necesidad de desautenticación ni requerir que haya clientes en la red. Aprovecha la debilidad de ciertos puntos de acceso que anuncian el valor PMKID en el...

cip-security-poc

cip-security-poc — demostrando el principio de la corrección detrás de CVE-2021-22681 no solo su falla Seis scripts ejecutables — tráfico real de protocolo EtherNet/IP Prueba 1, mecánica real de TLS/PKI Pruebas 3–6 — cero software o licencias de Rockwell en toda la cadena. Construido para probar...

CVE-2020-25867

CVE-2020-25867 : Omisión de la clave de uso compartido de SoPlanning Información Versión vulnerable : 1.46.01 Versión corregida : 1.47 y superiores CVE : CVE-2020-25867 Cronología 26/06/2020 : Este informe de vulnerabilidad fue enviado al proveedor 21/07/2020 : La vulnerabilidad fue corregida...

ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...

ike-scan

ike-scan IKEホスト（IPsec VPNサーバ）の発見とフィンガープリント取得 目次 ビルドとインストール 概要 使い方 実装の詳細 ホスト入力とメモリ要件 レート制限 クッキー生成とリモートホスト識別 IKEパケットの詳細 バックオフフィンガープリント プログラムの出力 例 対応プラットフォーム 参考資料とRFC 連絡先 ビルドとインストール ike-scanは標準のGNU autoconfおよびautomakeツールを使用しているため、インストールは通常の手順となります。 git clone https://github.com/royhills/ike-scan.git...

CVE-2025-63353

CVE-2025-63353: Predictable Wi-Fi Password Vulnerability in FiberHome GPON ONT Devices References Based on research by Hanianis original CVE disclosure at CVE-2025-63353 Thanks to the security researchers who identified this vulnerability. Legal Disclaimer This information is provided for...

dc34-vault

Aplicación vault de DC34 !WARNING Cargar tu propio firmware en tu badge borrará la clave de cifrado de luz y hará que tu badge entre en modo desarrollador. AVISO: este repositorio ahora está huérfano y se archivará pronto, ya que se ha fusionado en xous-core. Solo existía en el repositorio de...

tinydtls

CONTENIDO Esta biblioteca contiene funciones y estructuras que pueden ayudar a construir un servidor UDP de un solo hilo con soporte DTLS en C99. Los siguientes componentes están disponibles: dtls Soporte básico para DTLS con modo de clave precompartida. tests El subdirectorio tests contiene...

ReverseSocks5

ReverseSocks5 Proxy SOCKS5 inverso en Golang. Uso root@kitploit: Usage of ReverseSocks5.exe: -cert string Certificate file if using TLS on the server -connect string Connect address for socks agent address:port -key string Private key file if using TLS on the server -listen string Listen address...

zeek-openvpn

zeek::openvpn ESTO ESTÁ OBSOLETO EN FAVOR DE https://github.com/corelight/zeek-spicy-openvpn Un plugin para detectar y analizar OpenVPN en los siguientes modos: UDP con TLS UDP con TLS y TLS Auth TCP con TLS TCP con TLS y TLS Auth Hasta ahora esto no detectará el modo de clave compartida para UDP...

CVE-2026-74649

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's attacker-controlled length without checking it against the fixed 128-byte chgtxt...

UBUNTU-CVE-2026-74649

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's attacker-controlled length without checking it against the fixed 128-byte chgtxt...

CVE-2026-74649

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's attacker-controlled length without checking it against the fixed 128-byte chgtxt...

EUVD-2026-64586

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's attacker-controlled length without checking it against the fixed 128-byte chgtxt...

CVE-2026-74649

A missing length validation in the Linux kernel rtl8723bs staging driver's WEP shared-key authentication handler (OnAuthClient()) allows a malicious Access Point to send a malformed WLAN_EID_CHALLENGE element with a length up to 255 bytes, which is then copied via memcpy() into a fixed 128-byte c...

CVE-2026-74649 staging: rtl8723bs: fix missing shared-key auth challenge length check

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's attacker-controlled length without checking it against the fixed 128-byte chgtxt...

CVE-2026-74649 staging: rtl8723bs: fix missing shared-key auth challenge length check

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's attacker-controlled length without checking it against the fixed 128-byte chgtxt...