firezone

安全远程访问，速度比 OpenVPN 快 3 倍，采用零信任、点对点连接 文档 | 快速入门 | 下载客户端 | 讨论 | 支持 概览 Firezone 是一个开源平台，用于安全地管理任何规模组织的远程访问。与大多数 VPN 不同，Firezone 采用细粒度、最小权限的访问管理方法，通过基于组的策略来控制对单个应用程序、整个子网以及介于两者之间的所有资源的访问。 入门指南 选项一：云版本（推荐） 在 2 分钟内通过我们的托管解决方案开始使用。 免费注册 → 无需信用卡 注册后，按照欢迎邮件中的说明操作： 1. 在设备上安装客户端 2. 连接到您的第一个资源 3. 配置访问策略 功能特性...

HTTP-Shell

HTTP-Shell HTTP-Shell 是一款跨平台的反向 Shell 工具。该工具可帮助你在基于 HTTP 的反向连接中获取类似 Shell 的交互界面。与其他反向 Shell 不同的是，该工具的主要目标是配合 Microsoft Dev Tunnels 使用，以获得尽可能接近合法流量的连接。 此 Shell 并非完全交互式，但会在屏幕上显示任何错误（包括 Windows 和 Linux），能够上传和下载文件，具有命令历史记录、终端清理（甚至支持 CTRL+L）、自动重连、目录切换功能，并且在基于 Linux 的操作系统上支持 sudo（或 sudo su）。 需求 服务端需要...

wireguard-tools

wireguard-tools — herramientas para configurar WireGuard Esto proporciona las principales herramientas de espacio de usuario para usar y configurar WireGuard túneles, incluyendo las wg8 y wg-quick8 utilidades. Este proyecto es compatible con Linux, OpenBSD, FreeBSD, macOS, Windows y Android. Pued...

vopono

vopono 是一款通过临时网络命名空间在 VPN 隧道中运行应用程序的工具。 这使你可以只让少数几个应用程序同时通过不同的 VPN 运行，同时保持主连接 正常。 vopono 内置了针对 Wireguard 和 OpenVPN 的 killswitch（断网开关）。 目前直接支持 Mullvad、AzireVPN、MozillaVPN、ProtonVPN、iVPN、 NordVPN、AirVPN 和 PrivateInternetAccess，同时也可通过 --custom 参数支持自定义 配置文件。 还支持 Cloudflare Warp。 对于自定义连接，OpenConnect 和...

ligolo

Ligolo : Reverse Tunneling made easy for pentesters, by pentesters Table of Contents Introduction Use case Quick Demo Performance Usage Setup / Compiling How to use? TL;DR Options Features To Do Licensing Credits Introduction Ligolo is a simple and lightweight tool for establishing SOCKS5 or TCP...

mip22

mip22 mip22 v3.3 mip22 is a advanced phishing tool 83 default websites, clone any site with manual method, add any site with customize method, mask link with subdomains, url shortener, audio notice for view the credentials live, music in background etc... The program is made for educational...

amradio

Sistema de Interrupción de Radio AM Un sistema de radiodifusión de radio AM de 12 canales que utiliza Red Pitaya FPGA para la transmisión de alertas de emergencia en túneles no tripulados. ¿Por qué radio AM en un túnel? Durante la construcción y el mantenimiento, los vehículos con radios AM...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: In the tunnels section, there’s no need to assume that the macheader is set when using skbtunnelcheckpmtu. The recently added debug in commit f9aefd6b2aa3 “net: warn if mac header was not set” identified a bug in...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: net: tunnels: Annotations were added for lockless accesses to dev-neededheadroom. IP tunnels can apparently update dev-neededheadroom during their xmit path. This patch addresses issues related to three types of tunnels xmit, ...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Tunnels: Fixed an out-of-bounds access issue when building IPv6 PMTU errors. If the ICMPv6 error is generated using a non-linear skb, the following issues occur: BUG: KASAN: Out-of-bounds access in docsum+0x220/0x240 Reading o...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Tunnels: Fixed the crash when generating IPV4 PMTU errors due to KASAN. If we attempt to emit an ICMP error in response to a non-linear SKB, we encounter the following issue: Bug: KASAN: Out-of-bounds access in...

CVE-2026-72061

A flaw was found in the Linux kernel. An incorrect permission check in the ipip6changelink function, which manages IPv6 over IPv4 SIT tunnels, allows a local attacker to bypass intended security restrictions. A user with administrative capabilities CAPNETADMIN in one network namespace a virtualiz...

CVE-2026-68296

In the Linux kernel, the following vulnerability has been resolved: net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM Before commit 00d066a4d4ed "netdevfeatures: convert NETIFFLLTX to dev-lltx", NETIFFLLTX was set unconditionally in both gretunnelinit and ip6gretnlinitfeatures alongside...

CVE-2026-48075 OpenReception's unauthenticated add-to-tunnel endpoint accepts arbitrary appointment injections

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.5, the add-to-tunnel endpoint creates a new appointment row in any client tunnel without any caller authentication. A request that supplies any valid tunnelId and any...

N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete

N-able said attackers exploited an authentication bypass in N-central to gain remote administrative access and reach the customer systems managed through those servers. Its first fix was incomplete. CVE-2026-18577 affects N-central builds prior to 2026.3.1.7. N-able shipped build 2026.3.1.7 on...

CVE-2026-58157

Apache Traffic Server can reuse server sessions and tunnels improperly, exposing data across client connections. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4,...

CVE-2026-63992

A flaw was found in the Linux kernel's tunnels module. This vulnerability occurs when the iptunnelpmtudcheckicmp function is called without the skb transport header being properly set. An attacker could exploit this condition to trigger an out-of-bound memory access, which may lead to system...

CVE-2026-63994

A flaw was found in the Linux kernel's tunnels module. This vulnerability, categorized as a Use-After-Free UAF, arises from improper handling of network header pointers during certain packet processing operations. Specifically, functions responsible for building Internet Control Message Protocol...

SUSE CVE-2026-63992

In the Linux kernel, the following vulnerability has been resolved: tunnels: do not assume transport header in iptunnelpmtudcheckicmp In some cases, iptunnelpmtudcheckicmp can be called while skb transport header is not set. This triggers an out-of-bound access, because typeofskb-transportheader0...

Linux Distros Unpatched Vulnerability : CVE-2026-63994

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tunnels: load network headers after skbcow in iptunnelpmtudbuildicmpv6 Sashiko found that iptunnelpmtudbuildicmp and iptunnelpmtudbuildicmpv6 were caching iphdr...