mitm

mitm A simple yet effective python3 script to perform DNS spoofing via ARP poisoning Installation root@kitploit: adam@paradise:$ git clone https://github.com/blackeko/mitm/ adam@paradise:$ cd mitm adam@paradise:$ pip3 install -r requirements.txt adam@paradise:$ sudo python3 mitm.py Demo Outcome...

creak

creak Performs some of the most famous MITM attack on target addresses located in a local network. Among these, deny navigation and download capabilities of a target host in the local network performing an ARP poison attack and sending reset TCP packets to every request made to the router. Born a...

Inveigh

Inveigh Inveigh는 침투 테스터를 위한 크로스 플랫폼 .NET IPv4/IPv6 중간자 공격 도구입니다. 이 저장소에는 기본 C 버전과 레거시 PowerShell 버전이 포함되어 있습니다. 개요 Inveigh는 패킷 스니핑과 프로토콜별 리스너/소켓을 통해 스푸핑 공격과 해시/자격 증명 캡처를 수행합니다. 이 도구의 원래 PowerShell 버전의 기반이었던 패킷 스니핑 방식은 다음과 같은 장점이 있습니다: Windows SMB 서비스를 통한 SMB NTLM 챌린지/응답 캡처 호스트 시스템에 표시되는 포트 바인드가 적...

dnschef

root@kitploit: | | version 0.4 | | / | | | | | | | / | ' / |/| ' \ / \ | | | | | | \ | | | | / | ,|| | |/ || ||| | root@kitploit: D O C U M E N T A T I O N DNSChef는 침투 테스터와 악성코드 분석가를 위한 매우 구성 가능한 DNS 프록시입니다. DNS 프록시"Fake DNS"라고도 함는 애플리케이션 네트워크 트래픽 분석 등에 사용되는 도구입니다. 예를 들어, DNS 프록시는 "badguy.com"에 대...

dns-spoof

このリポジトリには README がありません。...

arp-dns-spoof

インストールDebianベースのLinuxディストリビューション Scapy をインストール root@kitploit: % sudo apt-get install tcpdump graphviz imagemagick python-gnuplot python-crypto python-pyx % pip install scapy python-NetfilterQueue をインストール root@kitploit: % sudo apt-get install build-essential python-dev libnetfilter-queue-dev % git...

cve-2022-28944

CVE-2022-28944 EMCO Software の複数製品における、認証されていない更新によるリモートコード実行の脆弱性。 使用方法: python3 cve-2022-28944poc.py 詳細はレポート gerr.re を参照してください。 再現手順 1. EMCO Software の影響を受ける製品をインストールします。 2. storage.emcosoftware.com のスプーフィングを攻撃者側の IP に設定します。 概念実証のためには、ターゲット上の c:\windows\system32\drivers\etc\hosts を編集します。 注:...

mitmAP

root@kitploit: | / \ | \ | | / /\ | |/ / | ' | | | ' | || / | | | | | | | || | | | | | | | || | || || ||||| || || |/| 2.2 ⚠️ Warning! This project is no longer maintained and may not work as excepted. A python program to create a fake AP and sniff data. new in 2.0: SSLstrip2 for HSTS bypass...

WiFi-Pumpkin-deprecated

This repository is ⛔️ DEPRECATED, wifipumpkin3 is Released, checkout! WiFi-Pumpkin - Framework for Rogue Wi-Fi Access Point Attack Description The WiFi-Pumpkin is a rogue AP framework to easily create these fake networks, all while forwarding legitimate traffic to and from the unsuspecting target...

CVE-2023-51073

CVE-2023-51073 - Buffalo LS210D バージョン 1.78-0.03 におけるファームウェア更新サーバー検証の脆弱性 Christopher J. Pace および Ryan Miller Buffalo LS210D は、中小企業や個人向けに設計・販売されているネットワークアタッチドストレージ（NAS）サーバーです。LS210D には、ファームウェア更新をリモートでダウンロードしてインストールする機能が搭載されています。LS210D は、この機能において「中間者攻撃（Adversary in the...

DNSSpoof

DNSSpoof Python3で書かれたDNSスプーフィングツール。 使い方 root@kitploit: usage: dnsspoof.py -h -d DOMAIN -i INTERFACE -t TARGET -r IP optional arguments: -h, --help show this help message and exit -d DOMAIN Domain to spoof default: all -i INTERFACE Interface to listen on default: default -t TARGET Target's IP. If...

cve-2022-24644

CVE-2022-24644 ZZ Inc. KeyMouse 3.08 Windows 未認証更新リモートコード実行の脆弱性 使用方法: python3 cve-2022-24644poc.py 詳細は gerr.re のレポートを参照してください。 再現手順 1. KeyMouse Windows 3.08 をインストールします。 2. www.keymouse.com を攻撃者のIPアドレスに偽装します。 概念実証では、ターゲット上の c:\windows\system32\drivers\etc\hosts を編集するのが最も簡単です。 攻撃者は例えば以下のものを使用できます：...

cve-2022-27438

CVE-2022-27438 Caphyon Ltd Advanced Installer 19.3 の「CustomDetection」アップデートチェックにおけるリモートコード実行の脆弱性。 使用方法: python3 cve-2022-27438poc.py 詳細はレポートを参照: gerr.re. 再現手順 その他の影響を受ける製品については、アップデートサーバーとアップデート設定ファイル名を変更する必要があります。これらは多くの場合、アプリケーションのインストールディレクトリにあるアップデータの .ini ファイルにあります。 1. Advanced Installer 19....

CVE-2026-77119

A flaw was found in BIND 9. A remote attacker could exploit a vulnerability where a validly signed NSEC3 record from an unrelated DNS zone might be accepted as proof of insecurity. This could downgrade a secure delegation, allowing forged unsigned DNS answers to be accepted by the resolver,...

bind9: bind: BIND 9: DNSSEC bypass via NSEC3 insecure-referral proof

A flaw was found in BIND 9. A remote attacker could exploit a vulnerability where a validly signed NSEC3 record from an unrelated DNS zone might be accepted as proof of insecurity. This could downgrade a secure delegation, allowing forged unsigned DNS answers to be accepted by the resolver,...

Windows DNS Spoofing Vulnerability

Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network...

PT-2026-87651

Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network...

The vulnerability of the Fortinet FortiClient Windows security tool, related to copying buffers without checking the size of the input data, allows attackers to modify or forge DNS responses for the target host and execute arbitrary code.

The vulnerability of the Fortinet FortiClient Windows security tool lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to remotely alter or forge DNS responses for the target host and execute arbitrary code using specially...

AZL-98232 CVE-2026-80212 affecting package ruby for versions less than 3.3.5-9

An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.getclass, Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create generate a new class for each unknown DNS resource record type, class pair, or each unknown SvcParamKey, encountered...

CVE-2026-66787 Lighthouse: go pprof profiling endpoint enabled unconditionally on lighthouse-agent :8082

A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability stems from insufficient validation of advertised IP addresses within EndpointSlice objects. A compromised spoke cluster can exploit this by creating EndpointSlices with...