SystemVulnerabilityChecklist_Project4_Decodelabs

🔐 System Vulnerability Checklist A security assessment and network hardening exercise conducted against a vulnerable Linux target machine. The project focuses on identifying critical vulnerabilities, assessing their impact, and implementing firewall-based mitigation using IPTables. 📌 Project...

rpcfirewall

Necesito Más Información Consulte nuestra publicación del blog sobre RPC Firewall o nuestra charla de BlackHat para comprender mejor RPC, los ataques RPC y la solución: RPC Firewall. Únase a nuestro espacio de trabajo de la comunidad Slack de |Zero| Labs para cualquier pregunta, problema o...

bluewall

BLUEWALL Bluewall es un framework de firewall diseñado para profesionales del ciberespacio ofensivo y defensivo. Este framework permite a los profesionales de la ciberseguridad configurar rápidamente su entorno mientras se mantienen dentro de su alcance. Créditos Inspirado en el script de...

ssct

ShadowSocks ConnecTion Una herramienta envolvente para shadowsocks para sortear cortafuegos de manera consistente. Inicio rápido Conexión automática La forma más fácil de ejecutar esta herramienta es simplemente escribir ssct en la terminal, y ssct obtendrá servidores shadowsocks disponibles de...

firehol

FireHOL http://firehol.org/ FireHOL, un firewall stateful di filtraggio dei pacchetti basato su iptables, pensato per gli esseri umani! FireQOS, un modellatore di banda basato su TC, pensato per gli esseri umani! Git Queste istruzioni sono per chi lavora con il repository git. Sono disponibili...

CVE-2022-30525

CVE-2022-30525 Zyxel Firewall Remote Command Injection A python based exploit for CVE-2022-30525 Vulnerability Summary NIST A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100W firmware versions 5.00 up to and including 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 u...

Palo Alto Networks PAN-OS Web Interface - Cross Site-Scripting

PAN-OS management web interface is vulnerable to reflected cross-site scripting. A remote attacker able to convince an administrator with an active authenticated session on the firewall management interface to click on a crafted link to that management web interface could potentially execute...

Lotus Domino R5 and R6 WebMail - Information Disclosure

Lotus Domino R5 and R6 WebMail with 'Generate HTML for all fields' enabled which is by default allows remote attackers to read the HTML source to obtain sensitive information including the password hash in the HTTPPassword field, the password change date in the HTTPPasswordChangeDate field, and t...

Zyxel - Cross-Site Scripting

Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, and ZyWALL 1100 devices contain a reflected cross-site scripting vulnerability on the security firewall login page via the mpidx...

Cisco Secure Firewall Management Center - Authentication Bypass

Cisco Secure Firewall Management Center Software contains an authentication bypass caused by improper system process creation at boot, letting unauthenticated remote attackers execute scripts and gain root access, exploit requires crafted HTTP requests. id: CVE-2026-20079 info: name: Cisco Secure...

web-application-firewall-

Web Application Firewall Simulation Overview This project demonstrates a Web Application Firewall WAF simulation using Flask and a vulnerability checker for CVE-2017-5638. The WAF middleware blocks HTTP requests containing specific patterns, and the vulnerability checker tests for and exploits th...

CVE-2022-4539

Usage Considerations: Adaptability: You can easily modify the payloads, IP generation logic, and proxies to match different scenarios or environments. Ethical Use: Ensure you have explicit permission before testing any system with this code. Scalability: This code is designed to be scalable and...

Block-Spring4Shell

Project Spring4Shell CVE-2022-22965 Blocker Firewall Server Handler - This project is a proof-of-concept POC firewall server designed to detect and block attacks exploiting the CVE-2022-22965 vulnerability, commonly known as Spring4Shell. The server inspects incoming HTTP requests and blocks any...

fortinet-fortiweb-cve-2025-64446-58034

Understanding Fortinet FortiWeb Vulnerabilities CVE-2025-64446, CVE-2025-58034 1. Overview Fortinet FortiWeb is a Web Application Firewall WAF device widely deployed in enterprise systems to protect web applications from common threats. Since FortiWeb typically sits at a central protection layer,...

CVE-2024-30973

CVE-2024-30973 - V-SOL G/EPON ONU - HG323AC-B Description Item: Item: G/EPON ONU Specification: HG323AC-B Device model XPON+2GE+1POTS+2WIFI+USB Device SN 70B64F-1234570B64F0C2C0C Hardware Version V1.0 Firmware Version V2.0.08-210715 PON S/N GPON000C2C0C Vulnerability Type: Incorrect...

cve-2022-1040

Environment In Python Environment3.10 It's strongly recommended to use the virtual environment pip3 install baseproxy python3.10 will raise an AttributeError if the version of pyOpenSSLdownloaded with baseproxy is too low. Reinstalling the latest version will fix it. pip3 uninstall pyOpenSSL pip3...

EVIL-CVE-2021-23017-Update-2025

vulnerability in NGINX servers versions 0.6.18–1.20.0. The scripts aim to cause a Denial of Service DoS by sending malicious DNS responses, with enhancements to bypass firewalls. This is an improved version of the original PoC from M507/CVE-2021-23017-PoC . Warning : Use only with explicit writte...

Cisco Secure Firewall ASA & FTD - Authentication Bypass

A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to access restricted URL endpoints that are related to remote access VPN that should...

malvinci

malvinci This simple script will introduce a new type of malware that will turn off the firewall, start an HTTP server, forward its port through ngrok, and send the URL of the server through a Telegram bot. You will need to create a new Telegram BOT. Follow the steps the steps here to create one⚡...

waf-community-bypasses

WAF community bypasses Web Application Firewalls a.k.a. WAF are garbage. All the vendors, from the cheapest Cloudflare to "enterpise" like Imperva, Akamai, F5, Checkpoint, or Fortinet are just cheating with their customers by delivering 0 actual protection. 99.9% of WAF signatures are just RegExp...