firehol

FireHOL http://firehol.org/ FireHOL, an iptables stateful packet filtering firewall for humans! FireQOS, a TC based bandwidth shaper for humans! Git These instructions are for people who are working with the git repository. There are more general instructions starting with Upgrade Notes. Cloning...

scutum

SCUTUM 防火墙 简介 简而言之，SCUTUM 自动配置您的个人计算机，抵御恶意 TCP/UDP 流量和 ARP 欺骗攻击。 该软件使用 UFW 为您设置传统防火墙，确定并锁定网关 MAC 地址，从而防止被 ARP 欺骗。 本软件设计紧凑高效。目前一次仅支持一个接口。流量仅允许通过一个接口。我们正在研究同时支持多个接口的可能性。 2.10.2（2019年5月5日） 1. 修复了 nftables 的 ARP 问题。ARP 数据包现在已正确在 arp 表中被阻止，而非 inet 表。 2. 将格式化字符串替换为 f-string。 2.10.0（2018年11月2日） 1. 修复了首次...

FencePost

FencePost 多主机 UFW 防火墙仪表板。通过 SSH 连接 Linux 主机，解析防火墙规则和监听端口，以通俗易懂的语言进行解释，并标记安全缺口。 功能特性 多主机概览 —— 一目了然查看所有主机的 UFW 状态、默认策略和活跃服务 通俗易懂的解释 —— 每条防火墙规则都被翻译成可读的描述，包含 VLAN 和服务名称 安全缺口检测 —— 发现没有匹配 UFW 允许规则的监听端口，按外部暴露和本地暴露分类 连接诊断 —— 追踪源 IP + 目标端口经过规则链的过程，查看流量会被允许、阻止还是拒绝 变更检测 —— 将当前状态与上次快照进行比较，并将事件（规则添加/删除、UFW...

ssh-hardening

SSH 强化 在 Debian/Ubuntu 上一键锁定 SSH：新端口、禁止 root 登录、基于密钥的身份验证、可选的 UFW 和 Fail2Ban。 你将看到的内容 运行脚本时，它会检测你的操作系统，并在询问是否继续之前显示设置： 快速入门（分步操作） 1️⃣ 安装 git（如果需要） 在 Debian/Ubuntu 上： sudo apt-get install -y git 2️⃣ 克隆仓库并进入文件夹 rm -rf ssh-hardening git clone https://github.com/spookey007/ssh-hardening.git cd...

CVE-2026-16503

Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that is published on all interfaces 0.0.0.0:5432 with a default database password set to "postgres". Because Docker installs its own iptables rules, this exposure bypasses a standard host UFW configuration...

CVE-2026-16503: Initialization of a Resource with an Insecure Default

Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that is published on all interfaces 0.0.0.0:5432 with a default database password set to "postgres". Because Docker installs its own iptables rules, this exposure bypasses a standard host UFW configuration...

MAL-2026-11126 Malicious code in app-sim-layer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8470a75b327a72623ec4379302a2fc6ecdbaa302acf4fa1e39f1c688103562be package.json declares a postinstall hook that runs node test.js on npm install; test.js invokes fromstr2 and fromstr1 in index.js. fromstr2 fetches...

MAL-2026-10742 Malicious code in node-as-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 616f74a5722026c25913e644651f1edc57ccb3ca2a6145c1543ff802b3b883b9 On npm install, package.json's postinstall hook runs node test.js, which loads index.js and immediately invokes two harvest routines. The first...

MAL-2026-6474 Malicious code in ref-slot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e1ef3e785cf6cb007c0b33be2ed43ebe49d64f476bb4fb3a66b914b06def5e1 On npm install, the package's postinstall hook runs node test.js which invokes index.js to perform multi-stage installer compromise. 1 Credential...

Malicious code in node-slot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d71bcdec983467ab6a47b538e524abc1cdafc98b411761bffb375be17d72009 On npm install, package.json's postinstall hook executes node test.js which invokes code in index.js that performs two distinct attacks on the...

Malicious code in parket-slot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc700128da5b494d5325086ec183ce7c746d44d88dc7f609bfb9f2eab9fa072 On npm install, the package's postinstall script node test.js auto-executes a multi-stage attack against the installer's machine. It recursively scan...

Exploit for CVE-2024-33883

CVE-2024-33883 [email protected], Insufficient Prototype Pollutio...

Exploit for Improper Authentication in Linux Linux_Kernel

CVE-2022-0492 Docker Breakout Checker and PoC Summary Exp...

The vulnerability of the ufw network firewall utility in the Astra Linux operating system, which allows a hacker to trigger a service failure under a configured policy-based integrity control for the file system.

The vulnerability of the ufw network firewall utility in the Astra Linux operating system is related to a configuration error that causes the utility to terminate abnormally when attempting to enable the ufw network firewall. Exploiting this vulnerability could allow an attacker to trigger a...

Securing your red team kit with Uncomplicated Firewall

After reading Identifying Cobalt Strike team servers in the wild I started thinking, why are people not firewalling off their kit? If you read the above post and I suggest you do, you will see under section “Scanning and Results” that the research concluded that 7718 unique Cobalt Strike CS team...

January 17, 2018—KB4057142 (OS Build 14393.2034)

None None...

Simple OpenVPN Raspberry Pi Installer: piVPN

Simple OpenVPN Raspberry Pi Installer This is a set of shell scripts that serve to easily turn your Raspberry Pi TM into a VPN server using the free, open-source OpenVPN software. The master branch of this script installs and configures OpenVPN on Raspbian Jessie and has been tested on Ubuntu 14....