explain-my-curl

explain-my-curl explain-my-curl é um CLI local-first para entender o que um comando curl está fazendo em DNS, TLS e HTTP. Este repositório atualmente inclui: Um comando CLI para analisar e explicar uma entrada curl Uma TUI inicial para exploração interativa Telemetria de execução para DNS, conexã...

AutoWIFI

Framework de testes de penetração sem fio. Automatiza toda a cadeia de ataque – do reconhecimento à exploração – com uma interface de terminal limpa. Funcionalidades Ataques multi-vetor – WEP replay ARP, fragmentação, chopchop, WPA/WPA2 captura de handshake, PMKID, WPS Pixie Dust, força bruta de...

CVE-2021-27876

CVE-2021-27876 Veritas Backup Exec एजेंट के लिए अप्रमाणित RCE शोषण CVE-2021-27876/77/78 — NDMP के माध्यम से SHA प्रमाणीकरण बाईपास से SYSTEM तक पहुँच सीवीई CVE| विवरण| CVSS 3.1 ---|---|--- CVE-2021-27876| NDMP प्रोटोकॉल में SHA हैश हेरफेर के माध्यम से प्रमाणीकरण बाईपास| 9.8 गंभीर CVE-2021-27877|...

AirmonGUI

AirmonGUI aircrack-ng 무선 도구 키트를 위한 로컬 웹 인터페이스입니다. 스크린샷 · 빠른 시작 · 기능 · 로드맵 · 기여하기 !WARNING 소유한 네트워크나 서면 허가를 받은 네트워크에서만 사용하십시오. 통제하지 않는 네트워크를 스캔하거나, 연결 해제Deauth하거나, 트래픽을 캡처하는 것은 대부분의 지역에서 불법입니다. 법적 및 책임 있는 사용을 참조하세요. 설명 AirmonGUI는 airmon-ng, airodump-ng, aireplay-ng, aircrack-ng를 하나의 웹 앱으로 묶어 사용자의...

psc

PortShellCrypter -- PSC This project - as well as its sister project crash - belongs to my anti-censorship tool-set that allows to setup fully working encrypted shells and TCP/UDP forwarding in hostile censoring environments. It is also useful for forensics to dump data from devices via UART or...

Politician

Politician Una libreria sofisticata per l'audit WiFi su microcontrollori ESP32 Politician è una libreria C++ embedded progettata per l'audit di sicurezza WiFi su piattaforme ESP32. Fornisce un'API pulita e moderna per catturare handshake WPA/WPA2/WPA3 e raccogliere credenziali enterprise...

h4rpy

h4rpy h4rpy è uno strumento di attacco automatizzato WPA/WPA2 PSK, wrapper del framework aircrack-ng. h4rpy fornisce un'interfaccia pulita per il cracking automatizzato delle reti WPA/WPA2 PSK. h4rpy abilita la modalità monitor sull'interfaccia wireless selezionata, scansiona lo spazio wireless p...

ids_bypass

Disclaimer Questi programmi sono SOLO a scopo educativo. Non utilizzarli senza autorizzazione. injectserver: Prova di concetto per CVE-2018-6794. Se come server si altera l'ordine normale dei pacchetti del three-way handshake TCP e si iniettano dati di risposta prima del completamento del 3whs, i...

pcapinator

pcapinator Eine Anwendung zum Bearbeiten vieler PCAPs durch das Ausführen vieler Tshark-Instanzen Einrichtung Installiere Python3, den einzig wahren Python... root@kitploit: pip install python-dateutil pandas Funktionen Verarbeitet rekursiv mehrere PCAP-Dateien, einschließlich derer in...

KSMBDrain

Panoramica Exploit proof-of-concept per KSMBDrain CVE-2025-38501. Consente di esaurire da remoto il limite di connessioni del server KSMBD. Dettagli Un attaccante remoto può esaurire il limite massimo di connessioni di un server KSMBD eseguendo il three-way handshake TCP e poi non rispondendo ai...

CVE-2025-68930

🔍 Analisi del CVE-2025-68930: Vulnerabilità di Hijacking dei WebSocket in Traccar Il CVE-2025-68930 espone una vulnerabilità critica di Cross-Site WebSocket Hijacking CSWSH in Traccar , il sistema di tracciamento GPS open source. Di seguito, i dettagli chiave: 🛡️ Dettagli della Vulnerabilità...

airgorah

Airgorah A WiFi security auditing software mainly based on aircrack-ng tools suite Installation | Usage | Credits Airgorah is a WiFi security auditing software that can capture nearby WiFi traffic, discover clients connected to access points, perform deauthentication attacks, capture handshakes,...

WEF

WiFi Exploitation Framework Programmiert mit 💙 von D3Ext Einführung • Angriffe • Funktionen • Installation • Verwendung README auf Spanisch Einführung Dieses Tool wurde für Sicherheitsforscher und Penetrationstester entwickelt, um Schwachstellen in Wi-Fi-Netzwerken zu analysieren und auszunutzen...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

CVE-2025-32433_PoC

CVE-2025-32433Erlang-OTP Dieses Skript ist ein benutzerdefiniertes Sicherheitstool, das entwickelt wurde, um eine kritische Pre-Authentifizierungs-Schwachstelle in Systemen mit Erlang-basierten SSH-Servern zu testen Dieses Skript ist ein benutzerdefiniertes Sicherheitstool, das entwickelt wurde, ...

CVE-2026-8932

🚨 CVE-2026-8932 - O Bug de Segurança Mais Antigo do libcurl Correspondência de Configuração mTLS Incompleta no libcurl A vulnerabilidade de segurança mais antiga já corrigida no libcurl—permanecendo despercebida por mais de 25 anos. 📖 Visão Geral CVE-2026-8932 é uma vulnerabilidade de segurança n...

USN-8678-2: OpenSSL, OpenSSL 1.0 vulnerabilities

USN-8678-1 fixed vulnerabilities in OpenSSL. This update provides the corresponding fix for OpenSSL and OpenSSL 1.0 on Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. In addition, this update also fixes the following issues that were not previously addressed in those releases: It was...

CVE-2026-54874

A flaw was found in OpenSSL. Receiving a DTLS Datagram Transport Layer Security record for a future epoch while a handshake is in progress causes OpenSSL to buffer an excessive amount of memory. This allows a peer to cause memory exhaustion, eventually resulting in a denial of service, using a...

CVE-2026-54874

Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a disproportionately large...

CVE-2026-30784-rustdesk-poc

CVE-2026-30784-rustdesk-poc CVE-2026-30784: RustDesk hbbs Verkehrsverstärkung PoC & PCAP-Analyse Wichtige Erkenntnisse Wichtige Erkenntnis: Das Erzwingen einer schlüsselbasierten Authentifizierung -k verhindert nicht diesen Verstärkungsangriff, da die Verstärkungsantwort während der nicht...