xerosploit

Xerosploit Xerosploit 是一款渗透测试工具包，其目标是为了测试目的而执行中间人攻击。它提供了多种模块，能够实现高效的攻击，同时还可以进行拒绝服务攻击和端口扫描。 由 bettercap 和 nmap 提供支持。 依赖项 nmap hping3 build-essential ruby-dev libpcap-dev libgmp3-dev tabulate terminaltables 安装 依赖项将自动安装。 git clone https://github.com/LionSec/xerosploit cd xerosploit && sudo python...

ufonet

网站：https://ufonet.03c8.net 描述： UFONet 是一款自由软件、P2P 且基于密码学的破坏性工具包，允许在第 7 层（应用层/HTTP）通过利用第三方网站上的开放重定向漏洞实施 DoS 和 DDoS 攻击，从而充当僵尸网络；并在第 3 层（网络层）滥用协议发起攻击。 它还作为一个加密的暗网（DarkNET），通过基于直接连接 P2P 架构的全局客户端/服务器网络来发布和接收内容。 更多信息请参考以下链接： 常见问题： https://ufonet.03c8.net/FAQ.html CWE-601：开放重定向：...

rapidscan

🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...

WPAxFuzz

!Contributorscontributors-shieldcontributors-url !Stargazersstars-shieldstars-url !Forksforks-shieldforks-url !Issuesissues-shieldissues-url !MIT Licenselicense-shieldlicense-url 本格的なWi-Fiファザー バグを報告 · 機能をリクエスト 目次 1. プロジェクトについて 2. 管理・制御・データフレームのファジング 要件と依存関係 説明 3. SAE交換のファジング 4. DoS攻撃モジュール 説明 5. 脆...

hyenae-ng

Hyenae NG Hyenae NG Next Generation is a re-write of the original Hyenae tool which was originally published back in the year 2010. Besides switching from C to C++, using modern design concepts, Hyenae NG was just like the original Hyenae written with maximum portability in mind. Since the origin...

slowloris

slowloris.py - Simple slowloris in Python What is Slowloris? Slowloris is basically an HTTP Denial of Service attack that affects threaded servers. It works like this: 1. We start making lots of HTTP requests. 2. We send headers periodically every 15 seconds to keep the connections open. 3. We...

htshells

HTSHELLS - 通过 .htaccess 文件实现的自包含 Web Shell 及其他攻击。 攻击的命名方式为 module.attack.htaccess，并按攻击类型分组存放在目录中。选择你需要的攻击，将其复制到一个新文件并命名为 .htaccess，检查文件以确认在上传前是否需要编辑。除非文件另有说明，Web Shell 通过查询参数 c 执行命令。 要准备攻击，运行 ./prepare.sh file 生成待上传的 .htaccess 文件。示例： $ ./prepare.sh shell/modphp.shell.htaccess ┬ ┬┌┬┐┌─┐┬ ┬┌─┐┬ ┬ ┌...

Astra Linux – Vulnerability in libde265

It was discovered that libde265 v1.0.10 contains a NULL pointer dereference in the ffhevcputweightedpredavg8sse function located at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS attack through a crafted input file...

Astra Linux – Vulnerability in Redis

Redis is an open-source, in-memory database that persists data on disk.Authenticated users can trigger a denial-of-service attack by using specially crafted, overly long pattern matching on supported commands such as KEYS, SCAN, PSUBSCRIBE, FUNCTION LIST, COMMAND LIST, and ACL definitions. Matchi...

Astra Linux – Vulnerability in Gunicorn

Gunicorn version 21.2.0 does not properly validate the value of the ‘Transfer-Encoding’ header as specified in the RFC standards. This results in the use of the default fallback method ‘Content-Length’, making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisonin...

EUVD-2026-70574

Unauthenticated Denial of Service Attack in MalCare Security = 6.69 versions...

TencentOS Server 3: resource-agents (TSSA-2026:0892)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0892 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

CVE-2026-52734 ZEBRA: Unbounded memory leak in mempool download pipeline via timeout path cancel_handles retention

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, an unauthenticated P2P peer can cause the mempool download pipeline to retain transactions after verification reaches the outer RATELIMITDELAY timeout. In zebrad/src/components/mempool/downloads.rs, Downloads::pollnext removed...

PT-2026-76699

In JetBrains YouTrack before 2026.1.13901, 2026.2.17950 doS attack was possible via crafted type parameters...

CVE-2026-73500

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a network attacker who can reach an etcd TLS listener can open many TCP connections and never send a ClientHello. In client/pkg/transport/listenertls.go, each connection handle...

EUVD-2026-57548

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 is vulnerable to a denial of service attack...

CVE-2026-11937

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 and IBM Security Verify Access Container 10.0 through 10.0.9.2 Reverse Proxy in certain configurations is vulnerable to a denial of...

Exploit for CVE-2026-67822

CVE-2026-67822 — Tenda W6-S wifiSSIDset Stack Buffer Overflo...

CVE-2026-43628

llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sampler that allows unauthenticated attackers to trigger a heap buffer underflow by sending a crafted HTTP request with dryallowedlength set to INT32MIN to the /v1/completions or...

CVE-2026-67296

A flaw was found in FreeRDP. A remote attacker can exploit a vulnerability in the Remote Desktop Protocol RDP Enhanced Input RDPEI server channel handler. By sending a malicious RDPEI message with an oversized declared body length, the attacker can force the server to allocate excessive memory,...