sparkplugFuzzer

Sparkplug B MQTT Security Fuzzer A comprehensive security assessment tool for testing Sparkplug B MQTT protocol implementations. The fuzzer systematically tests all protocol fields across all 9 message types, discovers live devices on the network, and produces detailed logs for analysis...

dtls-fuzzer

dtls-fuzzer is a Java tool which performs protocol state fuzzing of DTLS servers. More concretely, it supports the following functionality: 1. given an alphabet, it can automatically generate a model of a local DTLS server implementation; 2. given a test sequence of inputs and an alphabet, it can...

raider

Quick links Website. OWASP page. Documentation. Installation. FAQ. Getting started. Architecture. Discussions. Issues. Twitter. Fediverse. What is Raider OWASP Raider was developed with the goal to improve web authentication testing. By now it has evolved and can be used for all kinds of stateful...

Libssh-server-CVE-2018-10933

libssh Authentication Bypass VulnerabilityCVE-2018-10933 中文版本Chinese version libssh is a multiplatform C library implementing the SSHv2 protocol on client and server side. A logic vulnerability was found in libssh's server-side state machine. The attacker can send the MSGUSERAUTHSUCCESS message...

netzob

Netzob：协议逆向工程、建模与模糊测试 .. image:: https://img.shields.io/badge/Python-3-brightgreen.svg :target: https://github.com/netzob/netzob :alt: Python3 完整文档请见：https://netzob.github.io/netzob/ 关于 Netzob Netzob 是一款用于通信协议逆向工程、建模、流量生成与模糊测试的开源工具。 Netzob 适用于逆向网络协议、结构化文件以及系统和进程流（IPC 及与驱动和设备的通信）。它支持多种协议类型：文本协议（如...

pulsar

PULSAR Protocol Learning, Simulation and Stateful Fuzzer Pulsar is a network fuzzer with automatic protocol learning and simulation capabilites. The tool allows to model a protocol through machine learning techniques, such as clustering, and Markov models. These models can be used to simulate...

SCTT-2026-33-0004-FortiCloud-SSO-Identity-Singularity

SCTT-2026-33-0004: Singularidad de Identidad SSO de FortiCloud Esta es la implementación completa del vector SCTT-0004. 📡 Análisis Técnico Mientras que la mitigación del 27 de enero de 2026 de Fortinet para CVE-2026-24858 se centra en bloquear cuentas específicas como [email protected], no...

CVE-2026-20127-Exploit-Extension

Executive Summary The CVE-2026-20127 Defensive Companion is a premier, enterprise-grade Browser Extension engineered for proactive threat intelligence and defensive analysis. This tool encapsulates authoritative technical research concerning the authentication bypass vulnerability in the Cisco...

impostor

Impostor Servidor SMB1 para interceptar hashes NTLMv2, escrito en C. El objetivo del proyecto es implementar un servidor SMB1 como una máquina de estados que acepte y responda correctamente a las solicitudes del cliente para engañarlo, llevándolo a completar una autenticación NTLM y así revelar s...

CVE-2018-10933-POC

CVE-2018-10933-POC libSSH bypass A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4 It is simple POC Here in code replace the and accordingly...

CVE-2018-10933

POC of CVE-2018-10933 A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access. Usage : root@kitploit: python3 libssh.py -s SERVERADD -u...

CVE-2018-10933

CVE-2018-10933 在libssh的服务器端状态机中（版本0.7.6和0.8.4之前）发现了一个漏洞。 恶意客户端可以在未首先进行身份验证的情况下创建通道，从而导致未授权访问。 一些细节 该问题源于libssh在认证过程中不维护状态，以及这种状态缺失如何被用来绕过认证。简而言之，将连接视为一个多步骤过程：步骤1、步骤2、步骤3……由于libssh不强制执行步骤的顺序，你基本上可以直接跳到步骤3，而不经过步骤1和步骤2。 有趣的是，之前在SSH库Paramiko中也发现了同样的问题：CVE-2018-7750。 文档 Exploit-DB :...

Linux Distros Unpatched Vulnerability : CVE-2026-81005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipmi: si: Fix NULL pointer dereference after failed registration trysmiinit allocates newsmi-sism and later calls ipmiregistersmimod, which maps to ipmiaddsmi...

AZL-100268 CVE-2026-81005 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dereference after failed registration trysmiinit allocates newsmi-sism and later calls ipmiregistersmimod, which maps to ipmiaddsmi. During ipmiaddsmi, the upper IPMI message handler obtains the initial...

UBUNTU-CVE-2026-81005

In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dereference after failed registration trysmiinit allocates newsmi-sism and later calls ipmiregistersmimod, which maps to ipmiaddsmi. During ipmiaddsmi, the upper IPMI message handler obtains the initial...

CVE-2026-71644

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe trajectory planning and potential UAV collisions via a missing default case in the FSM that stops publishing swarm trajectories when the drone enters IDLE...

AZL-100049 CVE-2026-78135 affecting package strongswan 5.9.14-10

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can be an authentication bypass...

CVE-2026-78135

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can be an authentication bypass...

DEBIAN-CVE-2026-78135

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can be an authentication bypass...

CVE-2026-78135

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can be an authentication bypass...