sshimpanzee

Sshimpanzee Sshimpanzeeを使用すると、静的 リバース SSHサーバーを構築できます。 ポートで待機して接続を待つ代わりに、SSHサーバーは攻撃者のIPへのリバース接続を通常のリバースシェルのように開始します。 Sshimpanzeeを使用すると、通常のSSH接続のすべての機能（ポートフォワーディング、ダイナミックSOCKSプロキシ、FTPサーバーなど）を活用できます。 さらに重要なことは、被害マシンから攻撃者サーバーへの直接接続が不可能な場合、DNSトンネリング、ICMPトンネリング、HTTPカプセル化などのさまざまなトンネリングメカニズムを提供します。...

ripple20

"Ripple20" Treck IOT/ICS 设备发现与漏洞利用检测 v0.2 Summary: 一个用于被动检测 Treck 设备、发现/扫描尝试以及针对 Treck TCP/IP 协议栈中 "Ripple20" 系列漏洞的利用行为的 Zeek 包。 References: https://corelight.blog/2020/06/30/ripple20-zeek-package-open-sourced/ https://www.jsof-tech.com/ripple20/ 由 JSOF 提供的 python/scapy 扫描包。...

Mistica

Mística --- Mística ロゴ 作成 JoelGMSec Mística は、アプリケーション層プロトコルのフィールドにデータを埋め込み、任意の通信のための双方向チャネルを確立することを目的としたツールです。 現在、HTTP、HTTPS、DNS、ICMP プロトコルへのカプセル化が実装されていますが、近い将来さらに多くのプロトコルが導入される予定です。 Mística は、SOTP Simple Overlay Transport Protocol...

rust_citadel

Citadel 后量子混合加密与密钥管理服务器。 Citadel 结合了 X25519 + ML-KEM-768 进行密钥封装，并使用 AES-256-GCM 进行数据加密，遵循 NIST 为后量子过渡提出的混合方法。应用程序通过 REST API 进行加密和解密。Citadel 负责管理密钥——包括生成、轮换、撤销、访问控制和审计日志记录。 状态: 功能实现。未经审计。无生产部署。请参阅下面的安全说明。 功能概述 root@kitploit: Your Application Citadel Database | | | |-- POST /encrypt -------| | | |...

zupt

Project archived. For newest versions and updates check it out. Compress everything. Trust nothing. Encrypt always. Backup compression with hardware-adaptive codec selection, AES-256 authenticated encryption, post-quantum key encapsulation, and full-disk backup. Pure C11, zero dependencies, 13,00...

CVE-2026-76989

A security vulnerability has been detected in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. This impacts an unknown function of the file source/src/enetencap/encap.cc of the component TCP Encapsulation Receive Path. The manipulation leads to out-of-bounds read. The attack can be...

EUVD-2026-63347

A security vulnerability has been detected in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. This impacts an unknown function of the file source/src/enetencap/encap.cc of the component TCP Encapsulation Receive Path. The manipulation leads to out-of-bounds read. The attack can be...

CVE-2026-76989

CVE-2026-76989 is an out-of-bounds read in the TCP Encapsulation Receive Path of liftoff-sr CIPster (commit 1802525), located in source/src/enet_encap/encap.cc. The flaw can be triggered remotely without authentication or user interaction, resulting in a low availability impact (no confidentialit...

CVE-2026-72246

A flaw was found in the Linux kernel's netfilter flowtable component. This vulnerability arises from an error in how the system sets up tunnel routes, specifically in handling network packet encapsulation and tunnel information. An attacker could potentially exploit this to cause incorrect networ...

CVE-2026-74900

opensslencrypt versions before 1.4.0 contain a critical vulnerability in pqc.py where KEM decapsulation failures silently fall back to simulation mode, generating a deterministic shared secret from only 16 bytes of the private key and publicly available encapsulated key data. Attackers who obtain...

UBUNTU-CVE-2026-72249

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: use dst in this direction when pushing IPIP header When pushing the IPIP header, the route of the other direction is used to calculate the headroom, use the route in this direction. Accessing the other tuple...

CVE-2026-73087

Dozzle is a realtime log viewer for docker containers. From 10.5.2 until 10.6.15, the isBlockedIP SSRF guard in internal/notification/dispatcher/webhook.go, used by safeDialContext for webhook notification URLs, does not inspect IPv4 addresses embedded in 6to4, NAT64, Teredo, or IPv4-compatible...

CVE-2026-68299

In the Linux kernel, the following vulnerability has been resolved: vmxnet3: fix BUGON in vmxnet3gethdrlen for Geneve packets vmxnet3gethdrlen assumes gdesc-rcd.v4/v6/tcp always describe the outer header, but for a Geneve-encapsulated packet the device can set them based on the inner header...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ip6tunnel: Use skbvlaninetprepare in ip6tnlrcv. The responsible commit did not handle VLAN encapsulation as detected by syzbot 1. Use skbvlaninetprepare instead of pskbinetmaypull. 1 Bug: KMSAN: uninit-value in...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net: gro: fix outer network offset The udpgrocomplete function assumes that all packets inserted into the receive queue have the encapsulation flag set to zero. However, this assumption is not true. Some hardware network cards ca...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: gue: Fixed a skb memory leak associated with the inner IP protocol 0. The syzbot reported a skb memory leak below. The repro process generated a GUE packet with its inner protocol set to 0. The function gueudprecv returns...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: l2tp: Fixed a memory leak in l2tpudpencaprecv. syzbot reported a memory leak in struct l2tpsession, l2tptunnel, sock, etc. 0 The referenced commit moved the validation of the protocol version in l2tpudpencaprecv. The new...

Linux Distros Unpatched Vulnerability : CVE-2026-68299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vmxnet3: fix BUGON in vmxnet3gethdrlen for Geneve packets vmxnet3gethdrlen assumes gdesc-rcd.v4/v6/tcp always describe the outer header, but for a...

CVE-2026-64577

CVE-2026-64577 concerns the Linux kernel GTP module. The vulnerability arises because gtp1u_send_echo_resp() ignores the return value of skb_pull_data(); the function’s caller guarantees 16 bytes but the pull may require 20, so an echo request of 16–19 bytes can fail to advance skb->data. This...

CVE-2026-64577

In the Linux kernel, the following vulnerability has been resolved: gtp: check skbpulldata return in gtp1usendechoresp gtp1usendechoresp ignores skbpulldata's return value. Its caller gtp1uudpencaprecv only guarantees 16 bytes udphdr + gtp1header, but the pull requests 20 gtp1headerlong + udphdr...