CVE-2026-80905

A flaw was found in the kernel. When processing VLAN-tagged frames, the network header is incorrectly advanced past the VLAN tag before the transport header is probed. This misinterprets the inner protocol header as a VLAN header, resulting in an uninitialized transport header. This issue can lea...

CVE-2023-44487

Rapid Reset Client Rapid Reset Client is a tool for testing mitigations and exposure to CVE-2023-44487 rapid reset DDoS attack vector. It implements a minimal HTTP/2 client that opens a single TCP socket, negotiates TLS, ignores the certificate, and exchanges SETTINGS frames. The client then send...

PoC-CVE-2025-8671-MadeYouReset-HTTP-2

PoC-CVE-2025-8671-MadeYouReset-HTTP-2 PoC to validate MadeYouReset vulnerability This repository contains a controlled PoC developed to validate whether an infrastructure is potentially vulnerable to CVE-2025-8671 MadeYouReset. The code is not a full exploit and does not perform real DoS – the go...

wifi-monitor

wifi-monitor Prints the IPs on your local network that're sending the most packets ack = 802.11 control frame acknowledgement or block acknowledgement req = 802.11 control frame request to send clear = 802.11 control frame clear to send data = QoSData or Data Options: -j: prints new devices that...

CVE-2023-44487-HTTP-2-Rapid-Reset-Exploit-PoC

CVE-2023-44487 - HTTP/2 Rapid Reset Checker PoC Descriptions This main is a Proof of Concept PoC for CVE-2023-44487 , also known as the HTTP/2 Rapid Reset Attack. The vulnerability allows attackers to perform a Denial of Service DoS attack by rapidly sending RSTSTREAM frames over HTTP/2...

zizzania

zizzania zizzania sniffs wireless traffic listening for WPA handshakes and dumping only those frames suitable to be decrypted one beacon + EAPOL frames + data. In order to speed up the process, zizzania sends IEEE 802.11 DeAuth frames to the stations whose handshake is needed, properly handling...

macstealer

MacStealer: Wi-Fi Client Isolation Bypass 1. Introduction This repo contains MacStealer. It can test Wi-Fi networks for client isolation bypasses CVE-2022-47522. Our attack can intercept steal traffic toward other clients at the MAC layer, even if clients are prevented from communicating with eac...

GHOST

GHOST General Hacking & Observation Security Tool Standalone WPA/WPA2 handshake capture firmware for the Adafruit ESP32-S3 Reverse TFT Feather : built-in 240×135 TFT and three buttons — no companion phone app or browser required for normal use. Captures are saved as .pcap on LittleFS; Captures →...

mdk4

MDK4 MDK is a proof-of-concept tool to exploit common IEEE 802.11 protocol weaknesses. About MDK4 MDK4 is a new version of MDK3. MDK4 is a Wi-Fi testing tool from E7mer, ASPj of k2wrlz, it uses the osdep library from the aircrack-ng project to inject frames on several operating systems. Many part...

Envoy-CPU-Exhaustion-Vulnerability-PoC

Envoy CPU Exhaustion Vulnerability PoC This repository contains a proof-of-concept PoC Python script to demonstrate the CPU exhaustion vulnerability in Envoy caused by a flood of CONTINUATION frames. Author: blackmagic 2024 Description Envoy is a cloud-native, open-source edge and service proxy...

CVE-2023-33105-Transient-DOS-in-WLAN-Host-and-Firmware

CVE-2023-33105: Transient DOS in WLAN Host and Firmware Overview This repository contains the exploit code for CVE-2023-33105, a vulnerability identified in Qualcomm devices. The exploit leverages authentication frames to perform a denial of service DoS attack on a target access point AP by sendi...

WPAxFuzz

!Contributorscontributors-shieldcontributors-url !Stargazersstars-shieldstars-url !Forksforks-shieldforks-url !Issuesissues-shieldissues-url !MIT Licenselicense-shieldlicense-url A full-fledged Wi-Fi Fuzzer Report Bug · Request Feature Table of Contents 1. About The Project 2. Fuzz Management and...

http2-bomb

HTTP/2 Bomb — CVE-2026-49975 HTTP/2 Stream Amplification PoC · Docker · Web Console Vulnerability HTTP/2 allows multiplexing multiple streams over a single TCP connection. This PoC crafts specially formed HEADERS frames containing a large number of internal references, forcing the server to...

CVE-2026-85045

CVE-2026-85045 A training poc I cooked up while going after the larger chains. Maglev reuses one mutable HeapNumber while materializing recursive deoptimization frames. The exact upstream trigger produces 0,3,3,3 on both 148 builds and 152.0.7977.75, versus 0,1,2,3 on fixed 152.0.7977.82. Load...

dBmonster

With dBmonster, you are able to scan for nearby WiFi devices and track them through the signal strength dBm of their sent packets. Therefore, you can identify the exact location of nearby WiFi devices use a directional WiFi antenna for the best results or find out in which direction your self mad...

CVE-2025-69822-Atomberg_Erica_SmatFan_Security_Assessment

CVE-2025-69822-AtombergEricaSmatFanSecurityAssessment This vulnerability impacts device availability and reliable operation of Atomberg Erica Smart FanFirmware Version 1.0.36. The issue arises due to a lack of protection mechanisms against forged deauthentication frames and lack of fallback or...

skylift

SkyLift V0.4 Will be posted June 15 python3 click easier to use CLI parser workflow fix timestamp SkyLift V0.3 SkyLift is a low-cost geolocation spoofing device. It currently uses the ESP8266 to broadcast WiFi Beacon Frames to exploit a longstanding 2008 vulnerability in WiFi geolocation services...

cve-2023-44487-demo

⚡ CVE-2023-44487 Demo – HTTP/2 Rapid Reset Attack This project demonstrates the HTTP/2 "Rapid Reset" vulnerability CVE-2023-44487 that allows attackers to overwhelm servers using RSTSTREAM frames, causing denial-of-service DoS. It includes: ✅ Exploit test using Golang-based tool ✅ Vulnerable Apac...

Rocky Linux 10.2 [CIQ] Security Update: podman / podman-debuginfo / podman-debugsource / podman-docker / etc Multiple Vulnerabilities (crlsa-2026_88336)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202688336 advisory. net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 net/http: net/http/internal/http2: golang.org/x/net/http2:...

Rocky Linux 8 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource / grafana-selinux Multiple Vulnerabilities (crlsa-2026_88188)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202688188 advisory. net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/tls: golang: crypto/tls: Denial of Service via multiple E...