zizzania

zizzania zizzania sniffs wireless traffic listening for WPA handshakes and dumping only those frames suitable to be decrypted one beacon + EAPOL frames + data. In order to speed up the process, zizzania sends IEEE 802.11 DeAuth frames to the stations whose handshake is needed, properly handling...

WPAxFuzz

!Contributorscontributors-shieldcontributors-url !Stargazersstars-shieldstars-url !Forksforks-shieldforks-url !Issuesissues-shieldissues-url !MIT Licenselicense-shieldlicense-url A full-fledged Wi-Fi Fuzzer Report Bug · Request Feature Table of Contents 1. About The Project 2. Fuzz Management and...

CVE-2023-33105-Transient-DOS-in-WLAN-Host-and-Firmware

CVE-2023-33105: Transient DOS in WLAN Host and Firmware Overview This repository contains the exploit code for CVE-2023-33105, a vulnerability identified in Qualcomm devices. The exploit leverages authentication frames to perform a denial of service DoS attack on a target access point AP by sendi...

GhostTunnel

GhostTunnel GhostTunnel is a covert backdoor transmission method that can be used in an isolated environment. It can attack the target through the HID device only to release the payload agent, then the HID device can be removed after the payload is released. GhostTunnel use 802.11 Probe Request...

Envoy-CPU-Exhaustion-Vulnerability-PoC

Envoy CPU Exhaustion Vulnerability PoC This repository contains a proof-of-concept PoC Python script to demonstrate the CPU exhaustion vulnerability in Envoy caused by a flood of CONTINUATION frames. Author: blackmagic 2024 Description Envoy is a cloud-native, open-source edge and service proxy...

GHOST

GHOST General Hacking & Observation Security Tool Standalone WPA/WPA2 handshake capture firmware for the Adafruit ESP32-S3 Reverse TFT Feather : built-in 240×135 TFT and three buttons — no companion phone app or browser required for normal use. Captures are saved as .pcap on LittleFS; Captures →...

dBmonster

With dBmonster, you are able to scan for nearby WiFi devices and track them through the signal strength dBm of their sent packets. Therefore, you can identify the exact location of nearby WiFi devices use a directional WiFi antenna for the best results or find out in which direction your self mad...

macstealer

MacStealer: Wi-Fi Client Isolation Bypass 1. Introduction This repo contains MacStealer. It can test Wi-Fi networks for client isolation bypasses CVE-2022-47522. Our attack can intercept steal traffic toward other clients at the MAC layer, even if clients are prevented from communicating with eac...

CVE-2023-44487

Rapid Reset Client Rapid Reset Client is a tool for testing mitigations and exposure to CVE-2023-44487 rapid reset DDoS attack vector. It implements a minimal HTTP/2 client that opens a single TCP socket, negotiates TLS, ignores the certificate, and exchanges SETTINGS frames. The client then send...

CVE-2023-44487-HTTP-2-Rapid-Reset-Exploit-PoC

CVE-2023-44487 - HTTP/2 Rapid Reset Checker PoC Descriptions This main is a Proof of Concept PoC for CVE-2023-44487 , also known as the HTTP/2 Rapid Reset Attack. The vulnerability allows attackers to perform a Denial of Service DoS attack by rapidly sending RSTSTREAM frames over HTTP/2...

skylift

SkyLift V0.4 Will be posted June 15 python3 click easier to use CLI parser workflow fix timestamp SkyLift V0.3 SkyLift is a low-cost geolocation spoofing device. It currently uses the ESP8266 to broadcast WiFi Beacon Frames to exploit a longstanding 2008 vulnerability in WiFi geolocation services...

wifi-monitor

wifi-monitor Prints the IPs on your local network that're sending the most packets ack = 802.11 control frame acknowledgement or block acknowledgement req = 802.11 control frame request to send clear = 802.11 control frame clear to send data = QoSData or Data Options: -j: prints new devices that...

http2-bomb

HTTP/2 Bomb — CVE-2026-49975 HTTP/2 Stream Amplification PoC · Docker · Web Console Vulnerability HTTP/2 allows multiplexing multiple streams over a single TCP connection. This PoC crafts specially formed HEADERS frames containing a large number of internal references, forcing the server to...

EUVD-2026-108932

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: account non-AQL frames per peer rather than per link The driver increments wcid-nonaqlpackets when a frame goes to the hardware queue. The completion path decrements the counter again. For an MLO peer, the hardware...

CVE-2026-98958

The Linux kernel contains a vulnerability in the wifi: mt76 driver. The driver incorrectly accounts for non-AQL frames by incrementing a counter when a frame enters the hardware queue and decrementing it upon completion. For MLO peers , the hardware may report completion on a different link than ...

CVE-2026-98958

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: account non-AQL frames per peer rather than per link The driver increments wcid-nonaqlpackets when a frame goes to the hardware queue. The completion path decrements the counter again. For an MLO peer, the hardware...

RLSA-2026:88262 Important: buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a...

RLSA-2026:88280 Important: golang-github-openprinting-ipp-usb security update

HTTP reverse proxy, backed by IPP-over-USB connection to device. It enables driverless support for USB devices capable of using IPP-over-USB protocol. Security Fixes: net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/tls: golang: crypto/tls: Denial o...

golang-github-openprinting-ipp-usb security update

An update is available for golang-github-openprinting-ipp-usb. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list HTTP reverse proxy, backed by IPP-over-USB...

podman security update

An update is available for podman. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The podman tool manages pods, container images, and containers. It is part of...