CVE-2025-63735-Ruckus-Unleashed-Reflected-XSS

CVE-2025-63735 – Reflected XSS in Ruckus Unleashed 200.13.6.1.319 Summary A reflected cross-site scripting XSS vulnerability exists in Ruckus Unleashed 200.13.6.1.319 via the name parameter to the captive-portal endpoint selfguestpass/guestAccessSubmit.jsp. Vendor Ruckus Wireless Product...

f32

The f32 is an ultra-compact ESP32 development board designed to mount directly behind a USB-C receptacle. The PCB measures just 9.85 mm x 8.45 mm. It's powered by the ESP32-C3FH4 microcontroller and was created primarily for research and as a bit of a stress test for the ESP32, since it...

eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

c41n

c41n c41n is an automated Rogue Access Point setup tool. c41n provides automated setup of several types of Rogue Access Points, and Evil Twin attacks. c41n sets up an access point with user defined characteristics interface, name and channel for the access point, sets up DHCP server for the acces...

wifipumpkin3

Wifipumpkin3 Powerful framework for rogue access point attack. Overview wifipumpkin3 is powerful framework for rogue access point attack, written in Python, that allow and offer to security researchers, red teamers and reverse engineers to mount a wireless network to conduct a man-in-the-middle...

CVE-2025-0133

CVE-2025-0133 CVE-2025-0133 Exploit CVE-2025-0133 is a reflected cross-site scripting XSS vulnerability in the GlobalProtect™ gateway and portal features of Palo Alto Networks PAN-OS® software. An authenticated user with access to the Captive Portal can be tricked into clicking a specially crafte...

packetfence

PacketFence PacketFence 是什么？ PacketFence 是一个完全受支持、值得信赖的免费开源网络访问控制（NAC）系统。其功能集令人印象深刻，包括用于注册和修复的强制门户、集中式有线和无线管理、802.1X 支持、问题设备的二层隔离、与 IDS 解决方案和漏洞扫描器的集成；PacketFence 可用于有效保护网络——从小型网络到非常大的异构网络。 你想知道谁在你的网络上吗？你想基于连接者给予不同的网络访问权限吗？PacketFence 正是你所需要的！ 安装 请遵循管理指南中提供的说明。 更多信息 自上次发布以来的显著变化请参见 NEWS 文件。...

wifi-agent

wifi-agent wifi-agent Rogue access point. The program is made for educational purposes only for to see how the rogue access point method works. Any unnecessary use of the program is prohibited and the manufacturer has no responsibility for any illegal use by anyone. Use the tool at your own risk...

PwnSTAR

PwnSTAR 平台 专为 Kali Linux 设计。我也在 Linux Mint 16 上成功运行。只需稍作调整，即可在任何 Linux 发行版上运行。 安装 安装脚本 从 GitHub 克隆：https://github.com/SilverFoxx/PwnSTAR.git 切换到克隆目录 path/to/clone/PwnSTAR 运行 ./installer.sh。这会自动完成以下步骤。 手动安装 将每个网页文件夹分别放入 /var/www。 正确设置权限，例如使脚本和 php 可执行，formdata.txt 可写，将组设为 www-data 等。 不要将 index...

fluxion

Fluxion 是 MITM WPA 攻击的未来 Fluxion 是 vk496 的 linset 的重制版，希望拥有更少的 bug 和更多的功能。它与最新的 Kali（滚动版）兼容。最新构建（稳定版）和（测试版）可在此处找到 此处 https://sourceforge.net/projects/wififluxion/files/?source=navbar。如果你是新手，或者对项目不太了解，请查看 wiki https://github.com/deltaxflux/fluxion/wiki/Tutorial。攻击大多是手动的，但实验版本会自动处理稳定版本的大多数功能。...

SpaceX-Starlink-Router-Gen-2-XSS

SpaceX / Starlink Router Gen 2 XSS CVE-2023-49965 You can see the Korean version of the post here : https://hackintoanetwork.com/blog/2023-starlink-router-gen2-xss-kor TL;DR A Cross-Site Scripting XSS vulnerability in the initial captive portal page of the second-generation router could allow an...

CVE-2026-22557-check

CVE-2026-22557 Vulnerability Assessment Tool Safely detect whether a UniFi Network Application controller is vulnerable to CVE-2026-22557 without causing any disruption. See the full write-up at the Bishop Fox blog. Description CVE-2026-22557 is an unauthenticated path-traversal vulnerability in...

zyxel-social-login-bypass-cve-2026-8508

CVE-2026-8508: Bypass del portal cautivo de Zyxel mediante identidad de Facebook enviada por un navegador de confianza Este repositorio empaqueta el informe público, el script de verificación rápida y artefactos de soporte seleccionados para CVE-2026-8508. Qué es esto CVE-2026-8508 es una falla d...

panos-captive-portal-rce

CVE-2026-0300 — Escáner de RCE por Desbordamiento de Búfer en el Portal C cautivo de User-ID de PAN-OS...

Hack-Captive-Portal

Hack-Captive-Portal This script helps to pass through the captive portals in public Wi-Fi networks. It hijacks IP and MAC from somebody who is already connected and authorized on captive portal. Installation and usage You need sipcalc and nmap for this script. Then download .sh script and run it...

POC-CVE-2026-0300-exploit

CVE-2026-0300 — Explotación de desbordamiento de búfer en el Portal de Autenticación User-ID de PAN-OS Crítico CVSS 9.3 — Ejecución remota de código no autenticada en el Portal Cautivo de PAN-OS de Palo Alto Networks Tabla de Contenidos Descripción General Detalles de la Vulnerabilidad Versiones...

zyxel-wax650s-research-notebook-public

Cuaderno de Investigación Zyxel WAX650S Cuaderno de investigación de acceso público para el firmware Zyxel WAX650S V7.10ABRM.4C0. Este repositorio está escrito como una wiki en formato narrativo para investigadores y futuros trabajos de seguimiento asistidos por LLM. Documenta cómo se levantó el...

cve-2026-0300-audit

Herramientas de Auditoría para CVE-2026-0300 Herramientas de auditoría de solo lectura para CVE-2026-0300 — el desbordamiento de búfer no autenticado en el Portal de Autenticación de User-ID de PAN-OS anteriormente conocido como "Portal Cautivo" en firewalls de las series PA y VM. Este repositori...

EUVD-2026-80057

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in l7webauthusershow.cgi related to captive-portal credential handling. Attackers can query this component to obtain captive-portal user credentials, compromising confidentiality of authenticated network...

CVE-2026-76854

Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in l7webauthusershow.cgi related to captive-portal credential handling. Attackers can query this component to obtain captive-portal user credentials, compromising confidentiality of authenticated network...