Portspoof

Portspoof Portspoof emula puertos abiertos y firmas de servicios en los 65535 puertos TCP, convirtiendo la fase de reconocimiento de un escaneo rápido en un proceso largo e intensivo en recursos. Los escáneres ven miles de servicios falsos pero convincentes, lo que hace poco práctico identificar ...

SharkTooth

SharkTooth In Development SharkTooth is a port scanner with TCP and UDP support. Suitable for basic network auditing and training. What does “In Development” mean: New features are being added while existing ones are refactored or removed. New features: SYN-Scan, sniffer Manual Packet Assembly:...

CVE-2026-19735

The Zephyr TCP stack contains a vulnerability where the RFC 6528 initial-sequence-number (ISN) implementation may use predictable values. If the sys_csrand_get() call fails during early boot (e.g., due to -ENODEV or -EIO from the entropy driver), the system fails to catch the error and leaves the...

CVE-2026-19735 Predictable TCP initial sequence numbers when the RFC 6528 secret key generation fails silently in the Zephyr TCP stack

The RFC 6528 initial-sequence-number implementation in subsys/net/ip/tcp.c derived every TCP ISN from SHA-256uniquekey || four-tuple plus a uptime-derived offset, where uniquekey is a 128-bit secret filled once by syscsrandget. The return value of that call was discarded and the once guard was...

sish

sish Túnel SSH de código abierto para HTTPS, WSS, TCP, alias y SNI. Si te gusta la simplicidad del estilo de compartir de serveo/ngrok pero quieres usar SSH básico y gestionar tu propia infraestructura, sish está hecho para eso. No se requiere un cliente personalizado para los usuarios finales...

phantun

Phantun Un ofuscador ligero y rápido de UDP a TCP. Tabla de contenidos Phantun Última versión Resumen Uso 1. Habilitar el reenvío de IP del kernel 2. Agregar las reglas de firewall necesarias Cliente Usando nftables Usando iptables Servidor Usando nftables Usando iptables 3. Ejecutar los...

masscan

MASSCAN: Escáner de puertos IP masivo Este es un escáner de puertos a escala de Internet. Puede escanear todo Internet en menos de 5 minutos, transmitiendo 10 millones de paquetes por segundo, desde una sola máquina. Su uso parámetros, salida es similar a nmap, el escáner de puertos más famoso. E...

Disable-IPv6-CVE-2024-38063-Fix

Disable IPv6 to Mitigate CVE-2024-38063 Without Installing KB Update Overview This script is designed to mitigate the effects of the critical vulnerability CVE-2024-38063, a remote code execution RCE vulnerability in the Windows TCP/IP stack related to IPv6. By disabling IPv6 on the system, this...

sx

sx es el escáner de red de línea de comandos diseñado para seguir la filosofía UNIX. El objetivo de este proyecto es crear el escáner de red más rápido con un código limpio y simple. 📖 Índice de contenidos Features Install Build from source Quick Start References Contributing Credits License ✨...

bore

bore Un túnel TCP moderno y simple en Rust que expone puertos locales a un servidor remoto, evitando los cortafuegos de conexión NAT estándar. Eso es todo lo que hace: ni más, ni menos. Instalación requiere Rust, ver alternativas abajo cargo install bore-cli En tu máquina local bore local 8000 --...

Malicious code in staking-apr-fetcher (RubyGems)

Source: amazon-inspector 405ab5b9651b8e8817ae91290042ec22673c5c99c1b58f45747e47cbb85aeacf The gem declares a native extension whose build script extconf.rb decodes a base64-embedded Ruby payload and executes it via eval during gem install. The payload double-forks a detached background process th...

Malicious code in wallet-hd-derive (RubyGems)

Source: amazon-inspector fdfb31a6866dee961d55ad503da9de33a2cf743b52c80862e4380519ad5bef12 The gem is published as a crypto wallet utility but ships no native source; its gemspec declares extconf.rb as an extension so that gem install auto-executes it. extconf.rb decodes a base64-encoded Ruby...

Malicious code in xrp-ledger-utils (RubyGems)

Source: amazon-inspector 1d8cf595b60954811e6adfd0c4a241c696d326b42baf1ed2e7b163e720db44c4 The gem's native extension builder ext/extconf.rb decodes a base64-embedded Ruby payload and evals it inside a double-forked, detached child after a randomized 20-40 minute sleep. The payload opens a TCP...

Malicious code in ton-jetton-tools (RubyGems)

Source: amazon-inspector 30e70156c49000f2a02130da13465705bea1e9663b3ba57246a4e264bb12db25 The gem's native-extension build script extconf.rb contains a base64-encoded Ruby payload that is decoded and executed via eval during gem install. The decoded payload forks a detached, delayed child process...

Malicious code in hd-wallet-generator (RubyGems)

Source: amazon-inspector 5d6925082b6aa5db29d0569324b4485976add2368c78635d4be5c52270ee3771 The gem's declared native extension build script ext/hdwalletgenerator/extconf.rb executes a Base64-encoded payload via eval during gem install. The decoded payload opens a TCP socket to the hardcoded remote...

Malicious code in dex-router-abis (RubyGems)

Source: amazon-inspector a8f8b62993678b4f720468a05ef91f6fdcc864dd6be78d1ffc6bd14125f18d8f The gem's extconf.rb executed automatically during gem install decodes a base64-encoded Ruby payload and executes it via a double-forked, detached process that sleeps 20-40 minutes before opening a TCP rever...

Malicious code in erc20-approve-audit (RubyGems)

Source: amazon-inspector e43c1d294111db5834d006f064d33001b463860783ed8662a5f41a8e7354e4b8 The gem's native extension script, which runs automatically during gem install, base64-decodes a Ruby payload and launches it via a double-forked, detached, session-leader background process setsid, /dev/nul...

Malicious code in btc-fee-estimator (RubyGems)

Source: amazon-inspector ad1e7bee3158f729d88fdaf6a35ebfd32dcdab26ee9de3d8362d1973774b4b7c The gem's extconf.rb decodes a base64-encoded Ruby payload and evals it inside a detached forked process during gem install. The decoded payload opens a TCP connection to the hardcoded host 45.138.12.177 on...

Malicious code in block-explorer-api (RubyGems)

Source: amazon-inspector 9cfaa3470065369addbb91e3a6c2072e8add334c4d27bff95f91315aa58ae313 The gem's native-extension build script extconf.rb decodes a base64-encoded Ruby payload and passes it to eval inside a double-forked, detached child process with stdio redirected to /dev/null. The decoded...

Malicious code in seed-phrase-validator (RubyGems)

Source: amazon-inspector fb8d12a066c24d672bf16efe57267c46c727592ee21beb0e2accb3bb6e4bfb3a The gem declares a native extension but ships no C/C++/Rust source. extconf.rb exists solely to execute at gem install time. It decodes a base64-encoded Ruby payload and runs it via eval inside a detached fo...