Network_Assessment

Evaluación de Red Con Wireshark o TCPdump, puedes determinar si hay actividad dañina en el tráfico de red que has registrado en la red que supervisas. Este script de Python analiza el tráfico de red en un archivo .pcap dado e intenta detectar las siguientes actividades y ataques sospechosos de re...

H1R0GH057

Fork of https://github.com/H1R0GH057/Anonymous Note: The following commands are provided strictly for educational purposes only. It is essential to use this information responsibly, ethically, and in compliance with the law. Unauthorized use of any form of cyber-attack tools or scripts is against...

slowloris

slowloris.py - Simple slowloris in Python What is Slowloris? Slowloris is basically an HTTP Denial of Service attack that affects threaded servers. It works like this: 1. We start making lots of HTTP requests. 2. We send headers periodically every 15 seconds to keep the connections open. 3. We...

slowloris

slowloris.py - Slowloris simple en Python ¿Qué es Slowloris? Slowloris es básicamente un ataque de Denegación de Servicio HTTP que afecta a servidores con hilos. Funciona así: 1. Comenzamos a hacer muchas solicitudes HTTP. 2. Enviamos encabezados periódicamente cada 15 segundos para mantener las...

topera

Página del proyecto Topera Puedes ver una referencia más extensa de Topera en nuestra página web en github: Página del proyecto Topera ¿Qué es Topera? Topera es una nueva herramienta de seguridad para IPv6, con la particularidad de que sus ataques no pueden ser detectados por Snort. Snort es el...

CVE-2026-88290 GV-LPC2011/LPC2211 - Unauthenticated VLSVR Slowloris and Memory Resource Exhaustion

GeoVision GV-LPC2211 V1.14 260903 allows unauthenticated clients to declare unbounded VLSVR frame lengths and indefinitely delay blocking receives, allowing remote exhaustion of memory, connection, and worker resources...

CVE-2026-88290

GeoVision GV-LPC2211 V1.14 (260903) is affected by an unauthenticated resource-exhaustion vulnerability in its VLSVR service. Remote clients can declare unbounded VLSVR frame lengths and indefinitely delay blocking receives, leading to exhaustion of memory, connection, and worker resources . The ...

siem-threat-detection-lab

🛡️ Laboratorio de SIEM + detección de amenazas Un laboratorio integral de blue team : un SIEM Wazuh 4.7.5 que detecta 7 ataques simulados — desde el escaneo de puertos y la fuerza bruta SSH hasta un exploit real de CVE Slowloris DoS — con cada evento registrado, alertado y mapeado a MITRE ATT &CK...

nmap-scan-results

Escaneo Nmap: Más de 200 vulnerabilidades encontradas Crítico: CVE-2023-38408 9.8, CVE-2024-38476 9.8, Slowloris DoS Informe completo...

IBM Engineering Requirements Management DOORS 9.6.1.1 <= 9.6.1.13 / 9.7.2.1 < 9.7.2.11 Multiple Vulnerabilities (7279145)

The version of IBM Engineering Requirements Management DOORS formerly IBM Rational DOORS installed on the remote host is 9.6.1.1 prior or equal to 9.6.1.13 or 9.7.2.1 prior or equal to 9.7.2.11. It is, therefore, affected by multiple vulnerabilities as referenced in the 7279145 advisory. - IBM...

Important: Red Hat Security Advisory: mod_http2 security update

An update for modhttp2 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

CVE-2024-25039

IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 do not limit the length of a connection which could allow for a Slowloris HTTP denial of service attack to take place. This can cause the web server to become unresponsive...

EUVD-2024-55705

IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 do not limit the length of a connection which could allow for a Slowloris HTTP denial of service attack to take place. This can cause the web server to become unresponsive...

CVE-2024-25039 IBM Engineering Requirements Management DOORS and DOORS Web Access is affected by multiple vulnerabilities

IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 do not limit the length of a connection which could allow for a Slowloris HTTP denial of service attack to take place. This can cause the web server to become unresponsive...

CVE-2024-25039

IBM Engineering Requirements Management DOORS and DOORS Web Access versions 9.7.2.1–9.7.2.11 and 9.6.1.1–9.6.1.13 do not limit the length of a connection, enabling a Slowloris HTTP denial-of-service attack that can render the web server unresponsive. The CVE details this as a network-access vulne...

PT-2026-66553

Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Management DOORS and DOORS Web Access versions 9.7.2.1 through 9.7.2.11 IBM Engineering Requirements Management DOORS and DOORS Web Access versions 9.6.1.1 through 9.6.1.13 Description Failure to limit connection...

GHSA-JVXP-QMX7-GJPX Smithy-RS: Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service

Summary Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy interface definitions, powering the AWS SDK for Rust and custom service implementations. An issue exists where, under certain circumstances, allocation of resources without limits...

Smithy-RS: Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service

Summary Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy interface definitions, powering the AWS SDK for Rust and custom service implementations. An issue exists where, under certain circumstances, allocation of resources without limits...

CVE-2026-16756 Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service

Missing connection and header-read timeouts and the absence of a concurrent-connection cap in the default serve path of Amazon aws-smithy-http-server might allow remote attackers to cause a denial of service by opening many connections and sending partial requests that are never completed,...

CVE-2026-16756 Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service

Missing connection and header-read timeouts and the absence of a concurrent-connection cap in the default serve path of Amazon aws-smithy-http-server might allow remote attackers to cause a denial of service by opening many connections and sending partial requests that are never completed,...