viproy-voipkit

Discontinued Viproy was a PoC VoIP security assessment tool which had several modules and exploits to maintain. However, it was developed as a modules set to Metasploit Framework. As Metasploit Framework had significant updates, Viproy's current modules won't be able to work unless you use legacy...

SHA256-CDP

SHA256-CDP: Proyección de Suma de Dígitos Cíclica Implementación de tablas arcoíris acelerada por GPU del marco de análisis estructural CDP para SHA-256. Construido sobre los hallazgos del artículo CDP DOI: 10.5281/zenodo.20627240, este repositorio proporciona una implementación completa y...

nodriver

NODRIVER nodriver ofrece una biblioteca de automatización de navegador y webscraping asíncrona de siguiente nivel para python, con una interfaz fácil que simplemente tiene sentido ™ Este es el sucesor oficial del Undetected-Chromedriver paquete de python. No más webdriver, no más selenium para...

vlan-hopping---frogger

Frogger - VLAN Hopping Script simple de enumeración y salto de VLAN. Publicado como código abierto por NCC Group Plc - http://www.nccgroup.com/ Desarrollado por Daniel Compton, daniel dot compton at nccgroup dot com https://github.com/nccgroup/vlan-hopping Publicado bajo AGPL, consulta LICENSE pa...

neo

Neo Convierte cualquier aplicación web en una API. Sin API oficial. Sin automatización del navegador. Neo es una extensión de Chrome que captura pasivamente cada llamada API que realiza tu navegador, aprende los patrones y permite que la IA o tú las reproduzcan directamente. El Problema Los agent...

yersinia

Spanning Tree 1: DOS attack sending conf BPDUs Let's send some conf BPDUs claiming be root!!! By sending continously conf BPDU with root pathcost 0, randomly generated bridge id and therefore the same root id, and some default values for other fields, we try to annoy the switches close to us,...

cdpsnarf

CDPSnarf v0.1.6 Sniffer del protocolo Cisco Discovery por Tasos "Zapotek" Laskos [email protected] [email protected] Licenciado bajo la Licencia Pública General de GNU v2 General CDPSnarf es un sniffer de red escrito exclusivamente para extraer información de los paquetes CDP. Proporcio...

viproy-voipkit

Descontinuado Viproy era una herramienta PoC de evaluación de seguridad VoIP que tenía varios módulos y exploits que mantener. Sin embargo, fue desarrollada como un conjunto de módulos para Metasploit Framework. Dado que Metasploit Framework ha tenido actualizaciones significativas, los módulos...

RTOS-F-16-Exploit---CVE-2019-7711

Exploit del RTOS INTEGRITY de Green Hills para F-16 - CVE-2019-7711 Cadena completa de explotación de format string Ataque realista de mantenimiento en tierra contra la aviónica del F-16 📋 Descripción Este repositorio contiene una Prueba de Concepto PoC para CVE-2019-7711 — una vulnerabilidad de...

hpim-training-lab

hpim-training-lab HPIM Training-Case Replication Lab Citable release Zenodo: DOI 10.5281/zenodo.22868247 — license CC-BY 4.0. This repository contains a fully containerized replication of the training scenario described in OpenAI's official technical report on the Hugging Face incident, used to...

Rocky Linux 9 [CIQ] Security Update: lldpd / lldpd-debuginfo / lldpd-debugsource / lldpd-devel Multiple Vulnerabilities (crlsa-2024_9158)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20249158 advisory. lldp/openvswitch: denial of service via externally triggered memory leak CVE-2020-27827 lldpd: out-of-bounds read when decoding SONMP packets CVE-2021-4361...

AlmaLinux 9.2 [TuxCare] Security Update: lldpd / lldpd-devel (ALMALINUX9.2:CLSA-2025:1758729003)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1758729003 advisory. - An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDPTLVADDRESSES TLVs, a malicious actor can...

CVE-2026-100567

OpenClaw is an agent gateway distributed as the npm package 'openclaw'. In versions = 2026.4.5 and 2026.8.1, the Gateway validated a single DNS resolution result for a configured remote Chrome DevTools Protocol CDP hostname, but the raw WebSocket and Playwright transports performed a later,...

CVE-2026-100567 OpenClaw before 2026.8.1 DNS Rebinding via CDP Hostname

OpenClaw is an agent gateway distributed as the npm package 'openclaw'. In versions = 2026.4.5 and 2026.8.1, the Gateway validated a single DNS resolution result for a configured remote Chrome DevTools Protocol CDP hostname, but the raw WebSocket and Playwright transports performed a later,...

CVE-2026-100567 OpenClaw before 2026.8.1 DNS Rebinding via CDP Hostname

OpenClaw is an agent gateway distributed as the npm package 'openclaw'. In versions = 2026.4.5 and 2026.8.1, the Gateway validated a single DNS resolution result for a configured remote Chrome DevTools Protocol CDP hostname, but the raw WebSocket and Playwright transports performed a later,...

CVE-2026-100567 OpenClaw before 2026.8.1 DNS Rebinding via CDP Hostname

OpenClaw is an agent gateway distributed as the npm package 'openclaw'. In versions = 2026.4.5 and 2026.8.1, the Gateway validated a single DNS resolution result for a configured remote Chrome DevTools Protocol CDP hostname, but the raw WebSocket and Playwright transports performed a later,...

Malicious code in godxxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a22893c200272af03998e9f6c5df91c6e4971b3d2622a80df8eab58b98e0a9a1 cdpinject.js is declared as the package main and unconditionally calls main at module top level when the process is not invoked with --stop/--detach,...

MAL-2026-16462 Malicious code in godzz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5d71d42ffa8a11d58cf5bf2cf8eab5f95e14d047f0907b6e0581a3c33ea299 On module load, godzz sets process.env.NODETLSREJECTUNAUTHORIZED='0', disabling TLS certificate validation for the entire Node process. Its main entr...

Malicious code in godzz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5d71d42ffa8a11d58cf5bf2cf8eab5f95e14d047f0907b6e0581a3c33ea299 On module load, godzz sets process.env.NODETLSREJECTUNAUTHORIZED='0', disabling TLS certificate validation for the entire Node process. Its main entr...

CVE-2026-93962

A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element is the function shmmalloc of the file src/modules/cdp/receiver.c of the component CDP Diameter Receiver. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch th...