1109 matches found
striptls
striptls - auditing proxy poc implementation of STARTTLS stripping attacks A generic tcp proxy implementation and audit tool to perform protocol independent ssl/tls interception and STARTTLS stripping attacks on SMTP, POP3, IMAP, FTP, NNTP, XMPP, ACAP and IRC...
MASAPT
MASAPT 🤖 ↔ 🧠 ↔ 🤖 ❗ 免责声明 本工具仅用于学术和研究目的，作为大学课程的一部分。 在未获事先同意的情况下使用 MASAPT 攻击目标是非法的。 开发者对因使用本工具造成的任何损害概不负责，并 谴责任何恶意使用 MASAPT 的行为。本工具目前不适用于任何专业 环境，它只是底层理论模型的 概念验证 。 欢迎来到... 多智能体自动化渗透测试系统 🐱💻 探索 → 利用 → 报告 → 📝 一个基于 SPADE 智能体通过 XMPP 通信协调并执行渗透测试的自主系统。 以命令行工具的形式呈现！ 传入 URL，稍等片刻，阅读报告！ MASAPT 是什么？ 它是一个用 Python...
ssl-heartbleed.nse
ssl-heartbleed.nse Script NSE de Nmap para descubrir/explotar Heartbleed/CVE-2014-0160. Este script es ahora básicamente el que escribió Patrik Karlsson con algunos cambios menores portados desde mi propio script. Características Incluye soporte para FTP,SMTP,XMPP...
starttls-mitm
starttls-mitm es un proxy MITM que retransmite y vuelca de forma transparente tanto el tráfico en texto plano como el tráfico TLS. Utiliza un archivo de clave y un archivo de certificado proporcionados por el usuario para suplantar servidores remotos. El usuario debe indicar explícitamente al...
Hale
Acerca de Hale es un monitor/espía de command & control para botnets con un diseño modular que facilita el desarrollo de nuevos módulos para monitorizar nuevos protocolos usados por servidores C&C. Hale incluye monitores IRC y HTTP desarrollados con Twisted para manejar la escalabilidad de un gra...
MemorizingTrustManager
MemorizingTrustManager - Soporte de nube privada para tu aplicación MemorizingTrustManager MTM es un proyecto para permitir un uso de SSL en Android más inteligente y seguro. Si encuentra un certificado SSL desconocido, pregunta al usuario si desea aceptar el certificado una vez, permanentemente ...
EvilAhenk
CVE-2026-6508 EvilAhenk, en la arquitectura del Sistema de Administración Central LiderAhenk, es una vulnerabilidad de seguridad crítica que permite la ejecución de código con privilegios 'root' entre todas las unidades terminales agentes RCE no autorizado y Movimiento Lateral. Cómo Funciona el...
Astra Linux – Vulnerability in Twisted
In words.protocols.jabber.xmlstream in Twisted through version 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to intercept connections...
Openfire Administration Console - Authentication Bypass
Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to use the unauthenticated Openfire Setup...
CVE-2026-57963
A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: An attacker who can send HTML chat messages via Matrix or XMPP can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI...
SUSE CVE-2026-57963
An attacker who can send HTML chat messages via Matrix or XMPP can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1...
CVE-2026-57963
An attacker who can send HTML chat messages via Matrix or XMPP can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1...
EUVD-2026-40862
An attacker who can send HTML chat messages via Matrix or XMPP can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1...
CVE-2026-57963: Improper Neutralization of Input During Web Page Generation
An attacker who can send HTML chat messages via Matrix or XMPP can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1...
Wireshark 2.2.x < 2.2.12 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.2.12. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.2.12 advisory. - In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the JSON, XML, NTP, XMPP, and GDB dissectors could...
ejabberd -- Potential DDoS in XML Parser
ejabberd team reports: This release adds new options that limit max memory used by XML parser used to process XMPP payloads, to prevent potential Denial of Service attack. The default values for pre-auth provide sufficient protection for ejabberd against non-authenticated users on c2s and s2s, so...
CVE-2023-25356
CoreDial sipXcom up to and including 21.04 is vulnerable to Improper Neutralization of Argument Delimiters in a Command. XMPP users are able to inject arbitrary arguments into a system command, which can be used to read files from, and write files to, the sipXcom server. This can also be leverage...
CVE-2024-39094
Friendica 2024.03 is vulnerable to Cross Site Scripting XSS in settings/profile via the homepage, xmpp, and matrix parameters...