packetfence

PacketFence What is PacketFence? PacketFence is a fully supported, trusted, Free and Open Source network access control NAC system. Boasting an impressive feature set including a captive-portal for registration and remediation, centralized wired and wireless management, 802.1X support, layer-2...

SpaceX-Starlink-Router-Gen-2-XSS

SpaceX / Starlink 라우터 2세대 XSS CVE-2023-49965 한국어 버전의 게시물은 여기에서 볼 수 있습니다 : https://hackintoanetwork.com/blog/2023-starlink-router-gen2-xss-kor TL;DR 2세대 라우터의 초기 captive portal 페이지에 존재하는 Cross-Site Scripting XSS 취약점으로 인해 공격자가 router와 Dishy를 제어할 수 있습니다. 기본 정보 제품 : Starlink Router Gen 2 테스트 버전 :...

wifi-agent

wifi-agent wifi-agent Rogue access point. The program is made for educational purposes only for to see how the rogue access point method works. Any unnecessary use of the program is prohibited and the manufacturer has no responsibility for any illegal use by anyone. Use the tool at your own risk...

f32

The f32 is an ultra-compact ESP32 development board designed to mount directly behind a USB-C receptacle. The PCB measures just 9.85 mm x 8.45 mm. It's powered by the ESP32-C3FH4 microcontroller and was created primarily for research and as a bit of a stress test for the ESP32, since it...

Hack-Captive-Portal

Hack-Captive-Portal 이 스크립트는 공공 Wi-Fi 네트워크의 캡티브 포털을 통과하는 데 도움을 줍니다. 이미 캡티브 포털에 연결되어 인증된 사용자의 IP와 MAC을 하이재킹합니다. 설치 및 사용법 이 스크립트를 사용하려면 sipcalc과 nmap이 필요합니다. 그런 다음 .sh 스크립트를 다운로드하여 실행하세요. sudo apt -y install sipcalc nmap git clone https://github.com/priyankvadaliya/Hack-Captive-Portal.git sudo chmod...

panos-captive-portal-rce

CVE-2026-0300 — PAN-OS User-ID Captive Portal バッファオーバーフロー RCE スキャナ...

wifipumpkin3

Wifipumpkin3 Powerful framework for rogue access point attack. Overview wifipumpkin3 is powerful framework for rogue access point attack, written in Python, that allow and offer to security researchers, red teamers and reverse engineers to mount a wireless network to conduct a man-in-the-middle...

PwnSTAR

PwnSTAR Platforms Designed for Kali Linux. I also have it working in Linux Mint 16. Should run on any flavour of Linux with a little tweaking. Installing Installer script Clone from github https://github.com/SilverFoxx/PwnSTAR.git Change directory to path/to/clone/PwnSTAR Run ./installer.sh. This...

c41n

c41n c41n is an automated Rogue Access Point setup tool. c41n provides automated setup of several types of Rogue Access Points, and Evil Twin attacks. c41n sets up an access point with user defined characteristics interface, name and channel for the access point, sets up DHCP server for the acces...

fluxion

Fluxion은 MITM WPA 공격의 미래입니다 Fluxion은 vk496의 linset을 가능하면 더 적은 버그와 더 많은 기능으로 재구성한 것입니다. 최신 Kalirolling 릴리스와 호환됩니다. 최신 빌드안정판와 베타는 여기 https://sourceforge.net/projects/wififluxion/files/?source=navbar에서 찾을 수 있습니다. 처음이거나 프로젝트에 대해 잘 모르겠다면 wiki https://github.com/deltaxflux/fluxion/wiki/Tutorial를 살펴보세요...

eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

zyxel-wax650s-research-notebook-public

Zyxel WAX650S 研究笔记 Zyxel WAX650S 固件 V7.10ABRM.4C0 的公开安全研究笔记。 本仓库以故事化维基的形式编写，面向研究人员及后续 LLM 辅助的跟进工作。它记录了实验室的搭建过程、已确认的发现、失败的利用链，以及证据边界的所在位置。 目标 设备：Zyxel WAX650S 固件：V7.10ABRM.4C0 固件 SHA-256：e0a93db912c0b7203e0eb899f07ddef99b62a82a27352477c0f85d761576b1e0 架构：AArch64 用户态 主要 Web 技术栈：Zyxel...

POC-CVE-2026-0300-exploit

CVE-2026-0300 — PAN-OS User-ID Authentication Portal バッファオーバーフローエクスプロイト 重大 CVSS 9.3 — Palo Alto Networks PAN-OS Captive Portal における未認証のリモートコード実行 目次 概要 脆弱性の詳細 影響を受けるバージョン アーキテクチャ図 プロジェクト構成 インストール スキャナの使用方法 — ステップバイステップ エクスプロイトの使用方法 — ステップバイステップ ペイロード設計 緩和策 免責事項 概要 CVE-2026-0300 は、Palo Alto Network...

cve-2026-0300-audit

CVE-2026-0300 監査ツール CVE-2026-0300 用の読み取り専用監査ツール — PAシリーズおよびVMシリーズファイアウォールのPAN-OS User-ID認証ポータル（旧称「キャプティブポータル」）における未認証バッファオーバーフローに関するものです。 このリポジトリは、Tailwind Resource Group セキュリティアドバイザリ TRG-SA-2026-003 に付随するもので、以下を提供します: auditportal.py — ティア1: 単一ファイアウォールの監査 auditfleet.py — ティア2:...

CVE-2025-63735-Ruckus-Unleashed-Reflected-XSS

CVE-2025-63735 – Reflected XSS in Ruckus Unleashed 200.13.6.1.319 Summary A reflected cross-site scripting XSS vulnerability exists in Ruckus Unleashed 200.13.6.1.319 via the name parameter to the captive-portal endpoint selfguestpass/guestAccessSubmit.jsp. Vendor Ruckus Wireless Product...

CVE-2025-0133

CVE-2025-0133 CVE-2025-0133 Exploit CVE-2025-0133 is a reflected cross-site scripting XSS vulnerability in the GlobalProtect™ gateway and portal features of Palo Alto Networks PAN-OS® software. An authenticated user with access to the Captive Portal can be tricked into clicking a specially crafte...

zyxel-social-login-bypass-cve-2026-8508

CVE-2026-8508: Zyxel Captive-Portal Bypass via Trusted Browser-Submitted Facebook Identity This repository packages the public writeup, quick verification script, and selected supporting artifacts for CVE-2026-8508. What this is CVE-2026-8508 is a pre-authentication trust-boundary flaw in Zyxel...

CVE-2026-22557-check

CVE-2026-22557 Schwachstellenbewertungswerkzeug Erkennen Sie sicher, ob ein UniFi Network Application Controller anfällig für CVE-2026-22557 ist, ohne Störungen zu verursachen. Siehe den vollständigen Bericht im Bishop Fox Blog. Beschreibung CVE-2026-22557 ist eine nicht authentifizierte...

Linux Distros Unpatched Vulnerability : CVE-2026-38821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the...

Linux Distros Unpatched Vulnerability : CVE-2026-38822

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In openNDS before 11.0.0, the clientparams.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command...