fireprox

FireProx 개요 이점 면책 조항 관리자 크레딧 기본 사용법 설치 스크린샷 기여 개요 웹 호출 시 소스 IP 주소를 숨기거나 지속적으로 변경하는 것은 어렵거나 비용이 많이 들 수 있습니다. 몇 가지 도구가 오랫동안 존재해 왔지만 IP 주소 수가 제한되어 있거나, 비용이 비싸거나, 많은 VPS를 배포해야 했습니다. FireProx는 AWS API Gateway를 활용하여 매 요청마다 소스 IP 주소를 회전시키는 통과 프록시pass-through proxy를 생성합니다! FireProx를 사용하여 대상 서버를 가리키는 프록시...

creak

creak Performs some of the most famous MITM attack on target addresses located in a local network. Among these, deny navigation and download capabilities of a target host in the local network performing an ARP poison attack and sending reset TCP packets to every request made to the router. Born a...

IPRotate_Burp_Extension

IPRotateBurpExtension Burp Suite용 확장 프로그램으로, AWS API Gateway를 사용하여 매 요청마다 IP를 변경합니다. 추가 정보: AWS를 이용한 IP 기반 차단 우회 - Rhino Security Labs 참고/경고 AWS API Gateway를 사용하여 소스 IP를 숨기는 이 방법은 현재 AWS 침투 테스트 정책에 따라 금지된 것으로 간주됩니다: https://aws.amazon.com/security/penetration-testing/ 설명 이 확장 프로그램을 사용하면 여러 리전에 걸쳐...

cnc-relay

cnc-relay レッドチーム演習では、外部に露出するフットプリントと実際のコマンドアンドコントロールバックエンドを分離するために、リレーインフラストラクチャを構築することが一般的です。一般的な軽量オプションとしては、使い捨てのクラウドインフラ上にHAProxyまたはNGINXをセットアップし、オペレーターがコマンドアンドコントロールフレームワークにアクセスできる内部および/またはセキュアなホストにトラフィックをプロキシする方法があります。この構成はほとんどの場合機能しますが、ビーコンの元の送信元IPなどのメタデータが失われます。...

IPSpinner

🔁 IPSpinner IPSpinner は、選択したさまざまなプロバイダーにすべての受信リクエストをリダイレクトできるローカルプロキシです。目的は、各リクエストの送信元 IP アドレスをローテーションするパススループロキシを作成することです。例えば、IPSpinner を介してブルートフォース攻撃を実行すると、サーバーは何百もの異なる IP アドレスからリクエストを受信するため、検知を回避するのに役立ちます。 IPSpinner は現在、AWS API Gateway、Azure Cloud Shell、GitHub GitHub Actions に対応しています。 目次 1...

Astra Linux – Vulnerability in NTP

In NTP versions prior to 4.2.8p14 and 4.3.x before 4.3.100, ntpd allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP address. This occurs because transmissions are rescheduled even when a packet lacks a valid origin timestamp...

CVE-2024-35585

Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication...

CVE-2024-35585

Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication...

CVE-2024-35585

Oxford Nanopore MinKNOW , a sequencing software used in nanopore-based genomic analysis, is vulnerable to weak authentication in versions before 24.06 . The application relies on a client's source IP address as its authentication mechanism, meaning an attacker who can spoof or originate traffic f...

CVE-2024-35585

Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication...

CVE-2024-35585: Missing Authentication for Critical Function

Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication...

EUVD-2024-55746

Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication...

CVE-2026-54085 Wazuh: Missing input validation in multiple active response scripts allows argument injection

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.2.0 through 4.14.6, multiple active response scripts pass attacker-influenced alert fields to privileged system commands without validating their format, allowing...

CVE-2026-54085

Wazuh (open-source XDR/SIEM platform), versions 4.2.0 through 4.14.6 , contains missing input validation in multiple active response scripts that pass attacker-influenced alert fields to privileged system commands running as root. Five scripts (route-null.c, netsh.c, pf.c, npf.c, ipfw.c ) omit th...

CVE-2026-53791

A flaw in rsync allows an unauthenticated remote attacker to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source IP address, granting unauthorized access to restricted resources. Mitigation Restrict rsync daemon TCP/873 to the trusted proxy only CME-202...

CVE-2026-76356: Authentication Bypass by Spoofing

In Splunk SOAR versions below 8.6.0, an unauthenticated user could spoof the source IP address in a crafted request to an Automation Broker notification endpoint and execute arbitrary code on the Splunk SOAR host. The vulnerability is possible because the Splunk SOAR Automation Broker trusts a...

PT-2026-78783

Name of the Vulnerable Software and Affected Versions Splunk SOAR versions prior to 8.6.0 Description An unauthenticated user can execute arbitrary code on the host by spoofing the source IP address in a crafted request to an Automation Broker notification endpoint. This occurs because the...

DEBIAN-CVE-2026-42792

Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts epmd allows an unauthenticated remote attacker to permanently terminate the Erlang Port Mapper Daemon epmd via connection slot exhaustion. The doaccept function in erts/epmd/src/epmdsrv.c calls epmdcleanupexit when accep...

EUVD-2026-49316

Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts epmd allows an unauthenticated remote attacker to permanently terminate the Erlang Port Mapper Daemon epmd via connection slot exhaustion. The doaccept function in erts/epmd/src/epmdsrv.c calls epmdcleanupexit when accep...

Linux Distros Unpatched Vulnerability : CVE-2026-47737

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Puma is a Ruby/Rack web server built for parallelism. From 5.5.0 until 7.2.1 and 8.0.2, Puma is vulnerable to source IP spoofing when setremoteaddress...