flare-fakenet-ng

root@kitploit: | /\ | |/ / | \ | | | | | \ | |/ | | | / \ | ' /| | | | | | | || | | | | / /\ \ | | | | . | | | || . | | | | | | / | . | || |\ | | | | | |\ | || | ||// \|\|| || || || || D O C U M E N T A T I O N FakeNet-NG 3.5 es una herramienta de análisis de red dinámico de próxima...

CVE-2020-8554

Mitiga CVE-2020-8554 con Policy Controller Este repositorio contiene archivos de configuración para usar Policy Controller, que se basa en el proyecto de código abierto OPA Gatekeeper, para bloquear el acceso a IP públicas de los Servicios de Kubernetes. El aviso de seguridad para este problema...

peetch

peetch peetch es un conjunto de herramientas destinadas a experimentar con diferentes aspectos de eBPF para eludir las protecciones del protocolo TLS. Actualmente, peetch incluye tres subcomandos. El primero llamado dump tiene como objetivo esnifar tráfico de red asociando información del proceso...

rosemary

Rosemary Cross-platform kernel-level pivoting platform over QUIC. No TUN/TAP. No proxychains. No proxy settings. Rosemary transparently intercepts traffic on remote hosts at the kernel level: no proxy settings, no TUN/TAP devices, no proxychains. Agents connect back to the server over QUIC. You...

reFlutter

Leer más en el blog: https://swarm.ptsecurity.com/fork-bomb-for-flutter/ Este framework ayuda con la ingeniería inversa de aplicaciones Flutter usando la versión parcheada de la librería Flutter que ya está compilada y lista para el reempaquetado de la aplicación. Esta librería tiene modificado e...

tcpflow

TCPFLOW 1.5.0 Downloads directory: http://digitalcorpora.org/downloads/tcpflow/ Installation Most common GNU/Linux distributions ship tcpflow in their repositories. So on Debian/Ubuntu/etc you can say root@kitploit: sudo apt-get install tcpflow and on Fedora/RedHat/CentOS/etc you can say...

macstealer

MacStealer: Wi-Fi 클라이언트 격리 우회 1. 소개 이 저장소에는 MacStealer가 포함되어 있습니다. 이 도구는 Wi-Fi 네트워크에서 클라이언트 격리 우회client isolation bypass 를 테스트할 수 있습니다 CVE-2022-47522. 이 공격은 클라이언트들이 서로 통신하지 못하도록 차단된 경우에도 MAC 계층에서 다른 클라이언트로 향하는 트래픽을 가로챌스틸 수 있습니다. 이 취약점은 악의적인 내부자가 존재하는 Wi-Fi 네트워크에 영향을 미치며, 이 공격은 AP 격리라고도 불리는 클라이언트...

web-mitm-lab

WebMITM Lab - Framework de Investigación de Seguridad Python 3.x | Licencia Educativa | Ver Licencia ⚠️ Solo para Fines Educativos e Investigación de Seguridad Autorizada 📌 Descripción WebMITM Lab es un framework educativo diseñado para demostrar conceptos de ataques Man-in-the-Middle MITM en...

BurpSuite-For-Pentester

🕷️ BurpSuite for Pentester A practical Burp Suite cheat sheet and learning guide designed for bug bounty hunters and penetration testers to efficiently discover web application vulnerabilities from low severity P4 to critical P1 using Burp Suite. This repository provides a structured reference for...

reFlutter

Este framework ayuda con la ingeniería inversa de aplicaciones Flutter utilizando la versión parcheada de la librería Flutter que ya está compilada y lista para el reempaquetado de la aplicación. Esta librería tiene modificado el proceso de deserialización de instantáneas para permitirle realizar...

DRUPAL-CONTRIB-2026-142

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module does not properly validate TLS certificates when making outbound HTTPS requests. An attacker in a position to intercept network...

Security Advisory 0156

Security Advisory 0156 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-73437 CVSSv3.1 Base Score: 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSSv4.0 Base Score: 6.5...

PacketPirate

PacketPirate A headless , scriptable, command-line based MITM proxy designed for network traffic interception, analysis, and modification on Windows systems. It operates similarly to industry-standard GUI proxies but is optimized for automation environments, headless operation, and integration wi...

PT-2026-85284

Name of the Vulnerable Software and Affected Versions MOOS-IvP uFldNodeBroker versions prior to 24.8.2 Description The uFldNodeBroker fails to validate the source of TRY SHORE HOST messages on the vehicle bus. This allows any publisher to enroll shore routes controlled by an attacker, enabling th...

CVE-2026-20354

Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions S/MIME decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are due to insufficient validation of messa...

CVE-2026-41012

Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vCenter to impersonate vCenter REST API and capture administrator credentials via HTTP Basic auth, leading to complete virtualization infrastructure takeover. An attacker who can...

CVE-2026-41012 BOSH vSphere CPI Improper Cert Validation

Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vCenter to impersonate vCenter REST API and capture administrator credentials via HTTP Basic auth, leading to complete virtualization infrastructure takeover. An attacker who can...

CVE-2026-41012

CVE-2026-41012 is a traffic interception vulnerability in BOSH Director vSphere CPI (all versions prior to v98.0.6 ) caused by insufficient certificate validation and pinning in the communication between BOSH Director and vCenter. An attacker positioned between the two can impersonate the vCenter...

EUVD-2026-68038

Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vCenter to impersonate vCenter REST API and capture administrator credentials via HTTP Basic auth, leading to complete virtualization infrastructure takeover. An attacker who can...

CVE-2026-41012- BOSH VSphere CPI Improper Cert Validation | Cloud Foundry

Severity HIGH CVSSv4: High 8.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CVSSv3: High 7.7 CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H Vendor Cloud Foundry Foundation Versions Affected Severity is HIGH unless otherwise noted. BOSH VSphere CPI All versions prior to v98.0.6...