creak

creak Performs some of the most famous MITM attack on target addresses located in a local network. Among these, deny navigation and download capabilities of a target host in the local network performing an ARP poison attack and sending reset TCP packets to every request made to the router. Born a...

IPRotate_Burp_Extension

IPRotateBurpExtension Extension for Burp Suite which uses AWS API Gateway to change your IP on every request. More info: Bypassing IP Based Blocking Using AWS - Rhino Security Labs Note/Warning This method of using AWS API Gateways to obfuscate source IP is now considered prohibited according to...

CVE-2026-86041 ezBookkeeping: Source-IP allowlist (MCP & API token) is bypassable via a spoofed `X-Forwarded-For` header

ezBookkeeping is an open source, self-hosted personal finance application. From 0.10.0 until 1.6.0, ezBookkeeping constructs its Gin router with gin.New without configuring SetTrustedProxies, causing c.ClientIP to trust a spoofed X-Forwarded-For value. An unauthenticated remote attacker can suppl...

CVE-2026-86041 ezBookkeeping: Source-IP allowlist (MCP & API token) is bypassable via a spoofed `X-Forwarded-For` header

ezBookkeeping is an open source, self-hosted personal finance application. From 0.10.0 until 1.6.0, ezBookkeeping constructs its Gin router with gin.New without configuring SetTrustedProxies, causing c.ClientIP to trust a spoofed X-Forwarded-For value. An unauthenticated remote attacker can suppl...

IPSpinner

🔁 IPSpinner IPSpinner is a local proxy which can be used to redirect all incoming requests through different chosen providers. The purpose is to create a pass-through proxy that rotates the source IP address of each request. As an example, running a bruteforce operation through IPSpinner will hel...

FUCK-CDN

FUCK-CDN Exhaust every possible means, strip the CDN down to its underwear, and find the real IP. An automated CDN origin server tracing skill built for Claude Code. Input a target domain, and it automatically executes 40+ OSINT methods in priority order, builds an evidence chain, and outputs a...

cnc-relay

cnc-relay During a red team exercise it's common to set up a relaying infrastructure to seperate your external facing footprint from the actual command and control backend. Some of the popular light-weight options are to set up either HAProxy or NGINX on disposable cloud infrastructure and proxy...

CLEANSTART-2024-DZ60433 Rootless containers run with Podman, receive all traffic with a source IP address of 127

Security vulnerability affects the podman package. Rootless containers run with Podman, receive all traffic with a source IP address of 127...

CLEANSTART-2026-WJ36170 Improper validation of source IP addresses in OpenVPN version 2

Security vulnerability affects the openvpn package. Improper validation of source IP addresses in OpenVPN version 2...

CVE-2026-14467

The Forocoches comments editor contains an information disclosure vulnerability that enables attackers to harvest unauthorized user information. An attacker can achieve this by inserting an image containing a malicious external URL into a comment. When a victim views the discussion thread, their ...

CVE-2026-14467 Display of information in the Forocoches comments editor

An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorised user information by inserting an image containing a malicious external URL into a comment. When a victim views the discussion thread, their browser automatically sends an...

EUVD-2026-113760

An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorised user information by inserting an image containing a malicious external URL into a comment. When a victim views the discussion thread, their browser automatically sends an...

CVE-2026-14467 Display of information in the Forocoches comments editor

An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorised user information by inserting an image containing a malicious external URL into a comment. When a victim views the discussion thread, their browser automatically sends an...

CVE-2026-14467: Forocoches Forocoches comments editor: An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain…

An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorised user information by inserting an image containing a malicious external URL into a comment. When a victim views the discussion thread, their browser automatically sends an...

PT-2026-133317

An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorised user information by inserting an image containing a malicious external URL into a comment. When a victim views the discussion thread, their browser automatically sends an...

Astra Linux – vulnerability in NTP

NTPD in NTP prior to versions 4.2.8p14 and 4.3.x prior to version 4.3.100 allows an off-path attacker to block unauthenticated synchronization by sending a server-mode packet with a spoofed source IP address; this happens because transmissions are rescheduled even when the packet lacks a valid...

CVE-2026-109786

The fail2ban software (versions 0.10.5 through 1.1.1 before commit ddd879d ) is vulnerable in its sshd filter (config/filter.d/sshd.conf). The filter incorrectly accepts an "on " suffix after the host address. Because OpenSSH logs usernames verbatim, a remote unauthenticated attacker can provide ...

CVE-2026-109786

In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter config/filter.d/sshd.conf accepts an "on " suffix after the host address. Because OpenSSH logs the offered username verbatim, a remote unauthenticated attacker can use a username such as "x VICTIM-SOURCE-IP-ADDRESS on" to make...

fireprox

FireProx Resumen Beneficios Descargos Mantenedor Crédito Uso básico Instalación Capturas de pantalla Contribuir Resumen Poder ocultar o rotar continuamente la dirección IP de origen al realizar llamadas web puede ser difícil o costoso. Durante algún tiempo han existido varias herramientas, pero...

Debian dla-4826 : puma - security update

The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4826 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4826-1 [email protected]...