MASAPT

MASAPT 🤖 ↔ 🤖 ↔ 🤖 ❗ Disclaimer This tool is developed for academic and research purposes as a part of the university course. The use of MASAPT for attacking targets without prior consent is illegal. Developers hold no responsibility for any damage made with this tool and condemn any nefarious usag...

striptls

striptls - auditing proxy poc implementation of STARTTLS stripping attacks A generic tcp proxy implementation and audit tool to perform protocol independent ssl/tls interception and STARTTLS stripping attacks on SMTP, POP3, IMAP, FTP, NNTP, XMPP, ACAP and IRC. Python2! 🏆 Trophies CVE-2016-0772 -...

CVE-2026-57188

A flaw was found in Asterisk. This vulnerability allows an authenticated remote attacker to cause a Denial of Service DoS by sending specially crafted network packets to the resxmpp module. When processing Extensible Messaging and Presence Protocol XMPP namespace prefixes from a local or federate...

Hale

About Hale is a botnet command & control monitor/spy with a modular design to easily develop new modules that monitor new protocols used by C&C servers. Hale comes with IRC and HTTP monitors developed with Twisted to handle scalability of a large amount of connections. Theses modules have...

EvilAhenk

CVE-2026-6508 EvilAhenk is a critical security vulnerability in the LiderAhenk Central Management System architecture that allows all clients to execute code with 'root' privileges on each other Unauthorized RCE & Lateral Movement. How the System Works In LiderAhenk, the management panel/central...

starttls-mitm

starttls-mitm is a mitm proxy that will transparently proxy and dump both plaintext and TLS traffic. It uses a user-provided keyfile and certificate file to impersonate remote servers. The user must explicitly instruct the device being man-in-the-middled to trust this certificate authority -- so...

MemorizingTrustManager

MemorizingTrustManager - Private Cloud Support for Your App MemorizingTrustManager MTM is a project to enable smarter and more secure use of SSL on Android. If it encounters an unknown SSL certificate, it asks the user whether to accept the certificate once, permanently or to abort the connection...

Linux Distros Unpatched Vulnerability : CVE-2026-57188

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11...

DEBIAN-CVE-2026-57188

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may cause a stack buffer overflow in resxmpp XMPP namespace prefix handling using carefully craft...

CVE-2026-57188

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may cause a stack buffer overflow in resxmpp XMPP namespace prefix handling using carefully craft...

CVE-2026-57188

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may cause a stack buffer overflow in resxmpp XMPP namespace prefix handling using carefully craft...

CVE-2026-57188 Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may cause a stack buffer overflow in resxmpp XMPP namespace prefix handling using carefully craft...

CVE-2026-57188

Asterisk, an open source telephony toolkit, contains a stack buffer overflow vulnerability in the res_xmpp module's handling of XMPP namespace prefixes . An authenticated attacker with an XMPP account on the same or a federated server can trigger this by sending carefully crafted packets. This co...

EUVD-2026-111344

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may cause a stack buffer overflow in resxmpp XMPP namespace prefix handling using carefully craft...

CVE-2026-57188 Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may cause a stack buffer overflow in resxmpp XMPP namespace prefix handling using carefully craft...

CVE-2026-57188 Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may cause a stack buffer overflow in resxmpp XMPP namespace prefix handling using carefully craft...

CVE-2026-57188

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may cause a stack buffer overflow in "resxmpp" "XMPP namespace prefix" handling using carefully...

ssl-heartbleed.nse

ssl-heartbleed.nse Nmap NSE script that discovers/exploits Heartbleed/CVE-2014-0160. This script is now basically the one Patrik Karlsson wrote with some minor changes ported from my own script. Features Includes support for FTP,SMTP,XMPP...

CVE-2026-115748

A flaw was found in Apache Vysper. Its implementation of Extensible Messaging and Presence Protocol XMPP In-Band Registration lacks an authentication check. An authenticated remote attacker can exploit this vulnerability to compromise other user accounts on the server. Mitigation --- CME...

PT-2026-127192

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may cause a stack buffer overflow in res xmpp XMPP namespace prefix handling using carefully...