3083 matches found
cve-2023-44487-POC
cve-2023-44487 - ataque de reinicio rápido http/2 por 7pirqte qué es esto poc para el ataque de reinicio rápido http/2. básicamente abres un stream con un frame HEADERS y luego envías inmediatamente RSTSTREAM para cancelarlo. el servidor hace todo el trabajo de configurar y desmontar streams...
Check Risk WAF
Check Risk WAF 俄罗斯综合云 WAF 解决方案，用于保护 Web 应用程序和基础设施 Russian integrated cloud WAF solution for web application and infrastructure protection 网站 · 文档 · 俄文 · English 俄文版本 Check Risk WAF 是一款俄罗斯综合云 WAF（Web 应用防火墙）解决方案，工作在 L3、L4、L7 层，旨在保护您的应用程序免受 攻击 、漏洞 、僵尸网络 、DOS/DDOS 攻击 ，一体解决。通过在 3 个不同的数据中心 为 每个...
HttpStrike
HttpStrike Un script DDoS rápido escrito en Python; enviará una gran cantidad de solicitudes GET si aumentas las solicitudes como prefieras...
DDoSPacket
📦 此项目已归档，不再维护。了解更多：我为何继续前进 → 2023年11月27日最新更新 感谢在问题标签中报告问题，大多数问题我可以解决，看起来我的攻击代码/脚本太旧了，而且我在Android中使用基于C的Xamarin，它已经生命周期结束... 不过，我将制作全新的重制版本并升级到 .NET MAUI！祝大家能看到一些变化！ 事实：我从12岁起制作这个应用，当时即将升入初中，我只有一台三星Galaxy J2，CPU和所有资源都很差，这就是为什么我无法进行更多调试 ;-; DDoSPacket 用你自己的手机进行DDoS攻击，无需Termux！（Android 5.1+） 警告...
DDoS-PHP-Script
DDoS PHP 脚本 一个用于通过 PHP 执行 UDP 洪水 DDoS 攻击的脚本 使用方式 通过 Web 服务器（访问页面）： http://127.0.0.1/ddos.php?pass=apple&host=TARGET&port=PORT&time=SECONDS&packet=NUMBER&bytes=NUMBER 通过终端： php ./ddos.php host=TARGET port=PORT time=SECONDS packet=NUMBER bytes=NUMBER 参数 root@kitploit: help 打印此帮助摘要页面 host 必填 指定 IP...
Intrusion-Alert-Educational-Network-IDS
🛡️ Intrusion-Alert-Educational-Network-IDS Un sistema de detección de intrusiones IDS ligero construido con Python para monitorear el tráfico de red y detectar posibles ataques DoS/DDoS basados en la tasa de solicitudes por IP. 📌 Características 📡 Captura de paquetes en tiempo real usando Scapy 📊...
DDoS-Purple-Teaming-Offensive-Multi-Vector-7-Tier-Defensive-Holistic-Blueprint-
= doi.org/10.5281/zenodo.18287026 = orcid.org/0009-0007-7728-256X Proyecto: Análisis Exhaustivo de DDoS Purple Elite Teaming 2026 Autor: SASTRAADIWIGUNA PurpleEliteTeaming ⚠️ AVISO LEGAL OBLIGATORIO Este repositorio y su documentación son estrictamente para investigación educativa, defensiva y de...
CVE-2026-87827 KGUARD DVR unauthenticated remote command execution vulnerability
Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without requiring authentication. A remote unauthenticated attacker with network access to the affected service can execute arbitrary system commands on the device, potential...
PT-2026-88938
Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without requiring authentication. A remote unauthenticated attacker with network access to the affected service can execute arbitrary system commands on the device, potential...
Malicious code in dxrs-dos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1634fc433b5cd1e5e4baa139e8795b6b6ef51bb80fdbdc5183fb7fed419aee33 Package is an openly-advertised DDoS/booter toolkit L4/L7 flood methods, SSH brute force, C2 panel builder with keywords such as "ddos attack script"...
Malicious code in dxr-dos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bad9a4bf59f5c59d899f7be2c655adaba56f8ce65f284519d9778ea1bcaff1f bin/dxr.js unconditionally requires the external npm package 'deathoffather-project' pinned to the mutable 'latest' tag and immediately invokes an...
Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing
Cybersecurity researchers have discovered a new version of the Kimwolf/AISURU Android and Internet of Things IoT botnet that comes with significant improvements to improve its operational resilience and conduct distributed denial-of-service DDoS attacks. The new version, tracked as Kimwolf v7, wa...
PYSEC-2026-1280 Cowrie has a SSRF vulnerability in wget/curl emulation enabling DDoS amplification
Summary A Server-Side Request Forgery SSRF vulnerability in Cowrie's emulated shell mode allows unauthenticated attackers to abuse the honeypot as an amplification vector for HTTP-based denial-of-service attacks against arbitrary third-party hosts. Details When Cowrie operates in emulated shell...
Security Bulletin: Due to use of IBM Storage Scale, IBM Cloud Pak System is affected by multiple vulnerabilities
Summary Vulnerabilities found in IBM Storage Scale affect IBM Cloud Pak System. These vulnerabilities were addressed in IBM Cloud Pak System v2.3.5.1. Vulnerability Details CVEID:CVE-2025-55163 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to versions...
Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.15 security update
A security update is now available for Red Hat JBoss Enterprise Application Platform 7.1 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Netty susceptible to HTTP/2 Reset Attack with different on-the-wire signature
Summary Netty HTTP/2 max header size handling produces attack similar to HTTP/2 Rapid Reset. Details There is a setting in the http2 specification called SETTINGSMAXHEADERLISTSIZE. According to the RFC: “This advisory setting informs a peer of the maximum field section size that the sender is...
terraform-aws-wafacl-golden
terraform-aws-wafacl-golden !Terraformhttps://img.shields...
PT-2026-46055
Name of the Vulnerable Software and Affected Versions DD-WRT versions prior to 45724 Description An unsafe strcpy function in the UPnP handling functionality within router/upnp/src/ssdp.c allows an unauthenticated remote attacker to overflow an internal fixed buffer. This issue is triggered via a...
Intelligent Detection and Mitigation of Carpet-Bombing DDoS Attacks in SDN Using Retrieval-Augmented Generation and Large Language Models
Software-Defined Networking SDN provides flexible and programmable network management; however, its centralized control architecture remains highly vulnerable to Distributed Denial-of-Service DDoS attacks, particularly Carpet-Bombing DDoS attacks that distribute malicious traffic across multiple...