643 matches found
Inveigh
Inveigh Inveigh est un outil .NET multiplateforme de type machine-in-the-middle pour IPv4/IPv6 destiné aux testeurs d'intrusion. Ce dépôt contient la version principale en C ainsi que la version PowerShell historique. Overview Inveigh mène des attaques par usurpation et capture des hachages/mots ...
cve-2022-24644
CVE-2022-24644 ZZ Inc. KeyMouse 3.08 Windows Уязвимость удаленного выполнения кода при неаутентифицированном обновлении Использование: python3 cve-2022-24644poc.py Подробности в отчете на gerr.re. Шаги для воспроизведения 1. Установите KeyMouse Windows 3.08; 2. Настройте подмену www.keymouse.com ...
dns-spoof
В этом репозитории нет README...
cve-2022-27438
CVE-2022-27438 Caphyon Ltd Advanced Installer 19.3 "CustomDetection" Update Check Remote Code Execution Vulnerability. Использование: python3 cve-2022-27438poc.py Подробности в отчете на gerr.re. Шаги для воспроизведения Для других затронутых продуктов необходимо изменить сервер обновлений и имя...
cve-2022-28944
CVE-2022-28944 Vulnérabilité d'exécution de code à distance par mise à jour non authentifiée dans plusieurs produits EMCO Software. Utilisation : python3 cve-2022-28944poc.py Détails dans le rapport sur gerr.re. Étapes pour reproduire 1. Installer un produit affecté d'EMCO Software ; 2. Faire...
mitm
mitm Un script python3 simple mais efficace pour effectuer du DNS spoofing via ARP poisoning Installation root@kitploit: adam@paradise:$ git clone https://github.com/blackeko/mitm/ adam@paradise:$ cd mitm adam@paradise:$ pip3 install -r requirements.txt adam@paradise:$ sudo python3 mitm.py...
creak
creak Performs some of the most famous MITM attack on target addresses located in a local network. Among these, deny navigation and download capabilities of a target host in the local network performing an ARP poison attack and sending reset TCP packets to every request made to the router. Born a...
dnschef
root@kitploit: | | version 0.4 | | / | | | | | | | / | ' / |/| ' \ / \ | | | | | | \ | | | | / | ,|| | |/ || ||| | root@kitploit: Д О К У М Е Н Т А Ц И Я DNSChef — это высоконастраиваемый DNS-прокси для специалистов по тестированию на проникновение и аналитиков вредоносного ПО. DNS-прокси также...
arp-dns-spoof
Установка в дистрибутивах Linux на основе Debian Установка Scapy root@kitploit: % sudo apt-get install tcpdump graphviz imagemagick python-gnuplot python-crypto python-pyx % pip install scapy Установка python-NetfilterQueue root@kitploit: % sudo apt-get install build-essential python-dev...
mitmAP
root@kitploit: | / \ | \ | | / /\ | |/ / | ' | | | ' | || / | | | | | | | || | | | | | | | | | || || ||||| || || |/| 2.2 ⚠️ Avertissement ! Ce projet n'est plus maintenu et peut ne pas fonctionner comme prévu. Un programme Python pour créer un faux point d'accès et renifler des données...
WiFi-Pumpkin-deprecated
Ce dépôt est ⛔️ DÉPRÉCIÉ, wifipumpkin3 est sorti, jetez-y un coup d'œil ! WiFi-Pumpkin - Framework pour attaque de point d'accès Wi-Fi malveillant Description WiFi-Pumpkin est un framework de point d'accès malveillant rogue AP permettant de créer facilement ces faux réseaux, tout en redirigeant le...
CVE-2023-51073
CVE-2023-51073 - Уязвимость проверки сервера обновления прошивки в Buffalo LS210D версии 1.78-0.03 Кристофер Дж. Пейс и Райан Миллер Buffalo LS210D — это сетевой накопитель NAS, разработанный и продаваемый для малого бизнеса и частных лиц. В LS210D есть возможность удаленной загрузки и установки...
DNSSpoof
DNSSpoof Python3で書かれたDNSスプーフィングツール。 使い方 root@kitploit: usage: dnsspoof.py -h -d DOMAIN -i INTERFACE -t TARGET -r IP optional arguments: -h, --help show this help message and exit -d DOMAIN Domain to spoof default: all -i INTERFACE Interface to listen on default: default -t TARGET Target's IP. If...
AZL-98232 CVE-2026-80212 affecting package ruby 3.3.5-8
An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.getclass, Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create generate a new class for each unknown DNS resource record type, class pair, or each unknown SvcParamKey, encountered...
CVE-2026-66787 Lighthouse: go pprof profiling endpoint enabled unconditionally on lighthouse-agent :8082
A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability stems from insufficient validation of advertised IP addresses within EndpointSlice objects. A compromised spoke cluster can exploit this by creating EndpointSlices with...
CVE-2026-66787 Lighthouse: go pprof profiling endpoint enabled unconditionally on lighthouse-agent :8082
A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability stems from insufficient validation of advertised IP addresses within EndpointSlice objects. A compromised spoke cluster can exploit this by creating EndpointSlices with...
CVE-2026-70465
A buffer copy without checking size of input 'classic buffer overflow' vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.11 may allow an unauthenticated attacker in a position to alter or craft DNS responses to the targeted host to execute...
New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables
Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation NAT connection state to hijack active TCP sessions, spoof DNS responses, expose mapped ports, and exhaust NAT tables. Presented at Black Hat USA 2026, the research found...
Oracle Linux 9 : ELSA-2026-50108-0: / ldns (ELSA-2026-501080)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-501080 advisory. 1.7.1-12.1 - Fix CVE-2026-10846: DNS response spoofing via missing address/port/TXID and question section validation RHEL-210701 Tenable has extracted the...
