AirStrike

Airstrike 클라이언트-서버 아키텍처를 사용하여 WPA-2 Wi-Fi 자격 증명 크래킹을 자동화하는 도구 요구 사항 Airstrike는 Hashcat Brain Architecture, aircrack-ng 스위트, entr 유틸리티 및 일부 헬퍼 스크립트를 사용합니다. install.sh 스크립트를 사용하여 모든 종속성을 다운로드할 수 있습니다 시스템이 apt 또는 pacman에 액세스할 수 있는 경우, 하지만 Gentoo를 사용한다면 hcxtools를 수동으로 설치해야 합니다. 해당 리포지토리에서 사용할 수 없거나 제...

nishang

Nishang Nishang is a framework and collection of scripts and payloads which enables usage of PowerShell for offensive security, penetration testing and red teaming. Nishang is useful during all phases of penetration testing. By Nikhil Mittal Founder of Altered Security - Hands-on red team and...

bepr

bepr bepr는 아웃바운드 WebSocket 연결을 통해 작동하는 소형 인증 클라이언트/서버 역방향 셸 프로그램입니다. 하나의 바이너리로 서버 모드, 클라이언트 모드, 사용자 모드의 세 가지 모드를 모두 지원합니다. rpm, deb, pkg 설치 방향과 함께 패키징되어 있으며, 크기는 1MB입니다. 저는 여행 중에 집에 있는 컴퓨터를 공개 인터넷에 노출하지 않고 제어하고 싶어서 bepr을 만들었습니다. 이를 작동시키려면 도메인TLS용과 서버만 있으면 됩니다. 사용법...

cve-2022-0778

cve-2022-0778 악성 서버 go run server/main.go --addr 127.0.0.1:12345 cd test && testserver.sh docker stat 악성 클라이언트 cd test && testclient.sh go run client/main.go --network tcp --addr 127.0.0.1:12345 docker stat 빌드 docker build -t cve-2022-0778 . 도커 허브 start vulned server docker pull...

brook v20270101

Brook A cross-platform programmable network tool. Sponsor : Shiliew - Focuses on providing stable network services Server bash You may want to use brook link to customize some parameters Docs https://www.txthinking.com/brook.html Brook Script Gallery https://brook.app...

server v1.0.1

Hashtopolis LoC Hashtopolis is a multi-platform client-server tool for distributing hashcat tasks to multiple computers. The main goals for Hashtopolis's development are portability, robustness, multi-user support, and multiple groups management. To report a bug, please create an issue and try to...

CVE-2026-18313

CVE-2026-18313 is a memory leak in the rpcapd (remote capture daemon) component of libpcap versions before 1.10.7 . Each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message from a client causes an allocation of up to 65536 bytes that is never freed, leaking memory even under normal use. ...

[SECURITY] Fedora 44 Update: nghttp2-1.68.0-5.fc44

This package contains the HTTP/2 client, server and proxy programs...

[SECURITY] Fedora 44 Update: open62541-1.5.6-1.fc44

open62541 is a C-based library linking with C++ projects is possible with all necessary tools to implement dedicated OPC UA clients and servers, or to integrate OPC UA-based communication into existing applications...

CVE-2026-59881

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the WebSocket client accepts and decompresses frames with the RSV1 bit set even when the permessage-deflate extension was not negotiated, allowing a malicious server to cause unexpected CPU and memory...

RLSA-2026:47755 Moderate: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Rocky Linux...

openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group

A key group selection preference flaw has been discovered in OpenSSL. An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default by using the "DEFAULT" keyword. A less preferred key exchange may be used...

CVE-2026-63095

CVE-2026-63095 affects Dendrite up to version 0.13.8. An improper authorization flaw in the Matrix Client-Server API allows any authenticated local user to delete another user’s third-party identifier (3PID) bindings by submitting an arbitrary address/medium to the account deletion endpoint witho...

CVE-2026-63095: Authorization Bypass Through User-Controlled Key

Dendrite through 0.13.8 contains an improper authorization vulnerability in the Matrix Client-Server API that allows any authenticated local user to delete third-party identifier bindings belonging to other users by submitting an arbitrary address and medium to the account deletion endpoint witho...

CVE-2026-56455 HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS).

HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service DoS. The application fails to properly validate input sizes, allowing an attacker to pass an excessive amount of information into a memory container, which can cause the system to crash or become...

CVE-2026-40952

CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client or server can use it to elevate privileges to Administrator when Secure Access is installed in a non-default location...

JLSEC-2026-735 Un-negotiated Raw Public Key (RFC 7250) accepted in place of an X.509 certificate, bypassing chain...

Un-negotiated Raw Public Key RFC 7250 accepted in place of an X.509 certificate, bypassing chain validation. A raw public key has no chain, so ParseCertRelative accepts it without performing any trust verification; it must therefore only be accepted when RPK was actually negotiated for that peer...

[SECURITY] Fedora 43 Update: openssh-10.0p1-10.fc43

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

[SECURITY] Fedora 44 Update: openssh-10.2p1-12.fc44

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

Code Injection in Perforce Helix Core (CVE-2026-6902)

Executive Summary In this article, we disclose our latest findings we made on Perforce protocol P4 Helix Core between command line client and server, and reveal how a threat actor could leverage it to conduct attacks. This security issue affects P4 Helix Core before P4 Helix Core 2025.2 Patch 2,...