stunner

STUNNER Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers. TURN is a protocol mostly used in videoconferencing and audio chats WebRTC. If you find a misconfigured server you can use this tool to open a local socks proxy that relays all traffic via the TURN protocol into t...

sonar.js

sonar.js A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration, WebSocket host scanning, and external resource fingerprinting. How does it work? Upon loading the sonar.js payload in a modern web browser the following will happen: sonar....

AV-Chaos-Monkey

AV Chaos Monkey Distributed chaos engineering platform for load testing video conferencing systems. Simulates 1500+ WebRTC participants with H.264/Opus streams and injects network chaos spikes to validate system resilience under degraded conditions Architecture 1. Media Processing Pipeline : FFmp...

webscan

webscan webscan is a browser-based network IP scanner and local IP detector. It detects IPs bound to the user/victim by listening on an RTP data channel via WebRTC and looping back to the port across any live IPs, as well as discovering all live IP addresses on valid subnets by monitoring for...

slipstream

NAT Slipstreaming NAT Slipstreaming allows an attacker to remotely access any TCP/UDP service bound to any system behind a victim's NAT, bypassing the victim's NAT/firewall remote arbitrary firewall pinhole control, just by the victim visiting a website. v1 developed by : @SamyKamkar //...

neko

n.eko Welcome to Neko, a self-hosted virtual browser that runs in Docker and uses WebRTC technology. Neko is a powerful tool that allows you to run a fully-functional browser in a virtual environment , giving you the ability to access the internet securely and privately from anywhere. With Neko,...

handoff

Pion Handoff Create WebRTC session in the browser—run it somewhere else Why WebRTC is the real-time communication technology used for real-time media streaming. Used for things like Google Meet, Discord and Zoom on the web. With Handoff you create your WebRTC session in the browser, but then move...

stunner

STUNNER Stunner 是一个用于测试和利用 STUN、TURN 以及基于 TCP 的 TURN 服务器的工具。 TURN 是一种主要用于视频会议和音频聊天（WebRTC）的协议。 如果你发现一个配置错误的服务器，你可以使用此工具打开一个本地 SOCKS 代理，该代理通过 TURN 协议将所有流量中继到服务器背后的内部网络中。 我在测试 Cisco Expressway 期间开发了这个工具，并发现了一些漏洞：https://firefart.at/post/multiplevulnerabilitiesciscoexpressway/...

leakish

Leakish Browser privacy-leak detector — eight detection modules, risk scoring, and per-account history, all in your browser. Built withVerdent — an agentic coding assistant. Every detection module, the analytics dashboard, the API-key auth flow, the bilingual UI and the Kubernetes-ready Docker...

CVE-2020-6514

CVE-2020-6514 The exploit When writing the exploit, I originally altered the SCTP packets sent to the target device by altering the source of WebRTC and recompiling it. This wasn’t practical for attacking closed source applications, so I eventually switched to using Frida to hook the binary of th...

CVE-2024-4367-PoC

CVE-2024-4367-PoC This Proof of Concept PoC demonstrates the exploitation of the CVE-2024-4367 vulnerability, which involves Cross-Site Scripting XSS attacks. Features This PoC collects and displays the following types of information: 1. General Information: Domain Title Current URL Referrer URL...

wave-share

wave-share A proof-of-concept for WebRTC signaling using sound. Works with all devices that have microphone + speakers. Runs in the browser. Nearby devices negotiate the WebRTC connection by exchanging the necessary Session Description Protocol SDP data via a sequence of audio tones. Upon...

wave-share

wave-share 这是一个利用声音进行WebRTC信令的概念验证。适用于所有配备麦克风和扬声器的设备。在浏览器中运行。 附近的设备通过一系列音频音调交换必要的会话描述协议（SDP）数据，从而协商WebRTC连接。协商成功后，浏览器之间建立本地WebRTC连接，允许通过LAN交换数据。 观看演示视频（2分钟）： 亲自尝试：ggerganov.github.io/wave-share 最新消息： 我已将声音数据传输算法提取到独立的库 ggwave 中。 它可以轻松嵌入其他项目。 工作原理 WebRTC...

neko

n.eko Bienvenido a Neko, un navegador virtual autogestionado que se ejecuta en Docker y utiliza tecnología WebRTC. Neko es una herramienta potente que te permite ejecutar un navegador completamente funcional en un entorno virtual , brindándote la capacidad de acceder a Internet de forma segura y...

sonar.js

sonar.js 一个用于识别并利用内部网络主机漏洞的框架。通过 WebRTC IP 枚举、WebSocket 主机扫描以及外部资源指纹识别实现。 它是如何工作的？ 在现代 Web 浏览器中加载 sonar.js 负载后，将发生以下过程： sonar.js 会使用 WebRTC 枚举出加载该负载的用户所具有的内部 IP 地址。 随后 sonar.js 会尝试通过 WebSocket 发现内部网络中的存活主机。 如果发现存活主机，sonar.js 会通过 和 尝试链接到该主机，并挂钩 onload 事件，从而对主机进行指纹识别。如果预期的资源成功加载，将触发预设的 JavaScript...

webscan

webscan webscan 是一款基于浏览器的网络IP扫描器和本地IP检测器。它通过WebRTC监听RTP数据通道并回环到任何活跃IP的端口来检测绑定到用户/受害者的IP，同时通过监测来自 fetch 调用或指向有效子网/IP的隐藏 img 标签的即时超时（返回的TCP RST数据包）来发现有效子网上的所有活跃IP地址。可在所有主流浏览器和操作系统上的移动端和桌面端运行。Beta版本可扩展，允许添加多种技术。...

webrtc-ips

STUN IP Address requests for WebRTC Demo: https://diafygi.github.io/webrtc-ips/ What this does Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript,...

webrtc-ips

Solicitudes de direcciones IP STUN para WebRTC Demo: https://diafygi.github.io/webrtc-ips/ Qué hace esto Firefox y Chrome han implementado WebRTC, que permite realizar solicitudes a servidores STUN que devuelven las direcciones IP locales y públicas del usuario. Los resultados de estas solicitude...

CVE-2026-89248

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 is missing an authentication/authorization check in plugin/WebRTC/status.json.php. When the WebRTC plugin is present, any unauthenticated remote user can request /plugin/WebRTC/status.json.php and receive JSON containing the absolute...

EUVD-2026-76060

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 is missing an authentication/authorization check in plugin/WebRTC/status.json.php. When the WebRTC plugin is present, any unauthenticated remote user can request /plugin/WebRTC/status.json.php and receive JSON containing the absolute...