CVE-2020-8597

CVE-2020-8597 eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eaprequest and eapresponse functions. If you manage to get "EAP: unauthenticated peer name" long enough, seems like my client limits it to 255, you can do Buffer Overflow. You still have to beat the Sta...

assless-chaps

assless-chaps Crack MSCHAPv2/NTLMv1 challenge/responses quickly using a database of NT hashes Introduction Assless CHAPs is an efficient way to recover the NT hash used in a MSCHAPv2/NTLMv1 exchange if you have the challenge and response e.g. from a WiFi EAP WPE attack. It requires a database of ...

assless-chaps

assless-chaps Rompe desafíos/respuestas de MSCHAPv2/NTLMv1 rápidamente usando una base de datos de hashes NT Introducción Assless CHAPs es una forma eficiente de recuperar el hash NT utilizado en un intercambio MSCHAPv2/NTLMv1 si tienes el desafío y la respuesta por ejemplo, de un ataque WiFi EAP...

hostapd-mana

hostapd-mana Overview A featureful rogue access point first presented at Defcon 22 by Dominic White @singe & Ian de Villiers @ sensepost [email protected] Documentation Check the wiki for information of getting and using hostapd-mana. Features KARMA/MANA Mode - respond to any device looking...

wifi_db

wifidb Script para analizar capturas de Aircrack-ng en una base de datos SQLite y extraer información útil como handshakes en formato hashcat 22000, identidades enterprise MGT y pares challenge/response EAP-MD5, los certificados X.509 y la configuración de seguridad RSN/WPA de cada red, las...

Red Hat JBoss Enterprise Application Platform - Sensitive Information Disclosure

Red Hat JBoss Enterprise Application Platform 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 is susceptible to sensitive information disclosure. A remote attacker can obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true...

weape

wEAPe Script Weape-Wireless-EAP-Extractor ============================================ Extrae automáticamente nombres de usuario EAP 802.1x Desarrollado por Daniel Compton en Info-Assure Ltd https://github.com/commonexploits/weape.git Instalación root@kitploit: git clone...

weape

wEAPe Weape-Wireless-EAP-Extractor Script ============================================ Auto extracts EAP 802.1x user names Developed by Daniel Compton at Info-Assure Ltd https://github.com/commonexploits/weape.git Installing root@kitploit: git clone https://github.com/commonexploits/weape.git How...

Auto_EAP

AutoEAP Introducción Publicado el 15 de septiembre de 2016 AutoEAP.py es un script diseñado para realizar ataques automatizados de autenticación por fuerza bruta contra varios tipos de redes EAP. Estos tipos de redes inalámbricas proporcionan una interfaz para facilitar la adivinación de...

codeql-buffer-overflow-variant

codeql-buffer-overflow-variant A deliberately vulnerable, 170-line C program used as a CodeQL static-analysis target. It reproduces the bug class of CVE-2020-8597 — the pppd EAP rhostname stack buffer overflow CWE-120 — in a program that shares none of pppd's function names, call depth, or dispat...

eap_pwn

wpasupplicant y hostapd Copyright c 2002-2022, Jouni Malinen [email protected] y colaboradores Todos los derechos reservados. Estos programas están licenciados bajo la licencia BSD la que tiene la cláusula de publicidad eliminada. Si está enviando cambios al proyecto, consulte el archivo...

CVE-2026-25075-check

CVE-2026-25075 Herramienta de Evaluación de Vulnerabilidad Detecte de forma segura si un servidor VPN strongSwan es vulnerable a CVE-2026-25075 sin causar interrupciones. Consulte el análisis completo en el blog de Bishop Fox. Descripción CVE-2026-25075 es una vulnerabilidad de desbordamiento por...

CVE-2026-78134

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

DEBIAN-CVE-2026-78134

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

AZL-100034 CVE-2026-78134 affecting package strongswan 5.9.14-10

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

AZL-100043 CVE-2026-78126 affecting package strongswan 5.9.14-10

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

DEBIAN-CVE-2026-78126

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

CVE-2026-78126

strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin...

CVE-2026-78134

strongSwan versions 4.5.0 through 6.0.7 contain an Incorrect Access Control vulnerability in the eap-ttls and eap-peap plugins caused by missing or mismatched inner EAP identity authentication details. This can result in incorrect identity binding and a potential authorization bypass . The CVSS 3...

CVE-2026-78134

strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...