New TunnelVision Attack Allows Hijacking of VPN Traffic via DHCP Manipulation

Researchers have detailed a Virtual Private Network VPN bypass technique dubbed TunnelVision that allows threat actors to snoop on victim's network traffic by just being on the same local network. The "decloaking" method has been assigned the CVE identifier CVE-2024-3661 CVSS score: 7.6. It impac...

Automated Wireless Attack Tool: WiFite

Wifite is a Python script for auditing wireless networks which aims to be the “set it and forget it” wireless auditing tool. What’s new in Wifite 2? Less bugs Cleaner process management. Does not leave processes running in the background the old wifite was bad about this. No longer “one monolithi...

Tor: Uncloaking hidden services and hidden service users

I believe I am currently seeing an effective attack that decloaks hidden services and their users. Background ========= Following some denial-of-service attacks, I modified my tor code to display every rendezvous site. E.g., in or/rendservice.c, I added: Function rendservicereceiveintroduction...