AirStrike

Airstrike WPA-2 Wi-Fi認証情報のクラックをクライアント・サーバーアーキテクチャで自動化するツール 必要条件 AirstrikeはHashcat Brain Architecture、aircrack-ngスイート、entrユーティリティ、およびいくつかのヘルパースクリプトを使用します。...

nishang

Nishang Nishang is a framework and collection of scripts and payloads which enables usage of PowerShell for offensive security, penetration testing and red teaming. Nishang is useful during all phases of penetration testing. By Nikhil Mittal Founder of Altered Security - Hands-on red team and...

bepr

bepr bepr 是一个小巧的认证客户端/服务器反向 Shell 程序，基于出站 WebSocket 连接。 单个二进制文件涵盖所有三种模式：服务器模式、客户端模式和用户模式。它打包了 rpm、deb 和 pkg 的安装指引，体积约 1MB。 我创建 bepr 是因为我经常旅行，希望远程控制家里的电脑，同时又不让它们暴露在公共互联网上。只需一个域名（用于 TLS）和一台服务器即可运行。 使用方法 访问 https://github.com/Aperocky/bepr/releases 找到适用于你平台的软件包版本。下载后使用以下命令安装： sudo installer -pkg...

cve-2022-0778

cve-2022-0778 恶意服务器 go run server/main.go --addr 127.0.0.1:12345 cd test && testserver.sh docker stat 恶意客户端 cd test && testclient.sh go run client/main.go --network tcp --addr 127.0.0.1:12345 docker stat 构建 docker build -t cve-2022-0778 . Docker Hub 启动存在漏洞的服务器 docker pull...

brook v20270101

Brook A cross-platform programmable network tool. Sponsor : Shiliew - Focuses on providing stable network services Server bash You may want to use brook link to customize some parameters Docs https://www.txthinking.com/brook.html Brook Script Gallery https://brook.app...

server v1.0.1

Hashtopolis LoC Hashtopolis is a multi-platform client-server tool for distributing hashcat tasks to multiple computers. The main goals for Hashtopolis's development are portability, robustness, multi-user support, and multiple groups management. To report a bug, please create an issue and try to...

CVE-2026-18313

CVE-2026-18313 is a memory leak in the rpcapd (remote capture daemon) component of libpcap versions before 1.10.7 . Each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message from a client causes an allocation of up to 65536 bytes that is never freed, leaking memory even under normal use. ...

[SECURITY] Fedora 44 Update: nghttp2-1.68.0-5.fc44

This package contains the HTTP/2 client, server and proxy programs...

[SECURITY] Fedora 44 Update: open62541-1.5.6-1.fc44

open62541 is a C-based library linking with C++ projects is possible with all necessary tools to implement dedicated OPC UA clients and servers, or to integrate OPC UA-based communication into existing applications...

CVE-2026-59881

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the WebSocket client accepts and decompresses frames with the RSV1 bit set even when the permessage-deflate extension was not negotiated, allowing a malicious server to cause unexpected CPU and memory...

RLSA-2026:47755 Moderate: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Rocky Linux...

openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group

A key group selection preference flaw has been discovered in OpenSSL. An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default by using the "DEFAULT" keyword. A less preferred key exchange may be used...

CVE-2026-63095

CVE-2026-63095 affects Dendrite up to version 0.13.8. An improper authorization flaw in the Matrix Client-Server API allows any authenticated local user to delete another user’s third-party identifier (3PID) bindings by submitting an arbitrary address/medium to the account deletion endpoint witho...

CVE-2026-63095: Authorization Bypass Through User-Controlled Key

Dendrite through 0.13.8 contains an improper authorization vulnerability in the Matrix Client-Server API that allows any authenticated local user to delete third-party identifier bindings belonging to other users by submitting an arbitrary address and medium to the account deletion endpoint witho...

CVE-2026-56455 HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service (DoS).

HCL DFXAnalytics is affected by a Buffer Overflow vulnerability that can lead to a Denial of Service DoS. The application fails to properly validate input sizes, allowing an attacker to pass an excessive amount of information into a memory container, which can cause the system to crash or become...

CVE-2026-40952

CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client or server can use it to elevate privileges to Administrator when Secure Access is installed in a non-default location...

JLSEC-2026-735 Un-negotiated Raw Public Key (RFC 7250) accepted in place of an X.509 certificate, bypassing chain...

Un-negotiated Raw Public Key RFC 7250 accepted in place of an X.509 certificate, bypassing chain validation. A raw public key has no chain, so ParseCertRelative accepts it without performing any trust verification; it must therefore only be accepted when RPK was actually negotiated for that peer...

[SECURITY] Fedora 43 Update: openssh-10.0p1-10.fc43

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

[SECURITY] Fedora 44 Update: openssh-10.2p1-12.fc44

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

Code Injection in Perforce Helix Core (CVE-2026-6902)

Executive Summary In this article, we disclose our latest findings we made on Perforce protocol P4 Helix Core between command line client and server, and reveal how a threat actor could leverage it to conduct attacks. This security issue affects P4 Helix Core before P4 Helix Core 2025.2 Patch 2,...