ICMP-Timestamp-POC

ICMPタイムスタンプ情報漏洩スキャナー CVE-1999-0524 一連のスクリプトで、ICMPタイムスタンプ情報漏洩 脆弱性 CVE-1999-0524 を検出・実演します。 これらのツールは細工したICMPタイプ13（タイムスタンプ要求）パケットを送信し、応答を解析してリモートシステムの時刻情報を抽出します。 ⚙️ 機能 マルチターゲットスキャン（単一ターゲット、カンマ区切りリスト、ファイル入力） nping（推奨）と hping3（Bash）をサポート スキャン前のオプションの接続確認（ping） 色分けされた、タイムスタンプの内訳を含む人間が読みやすい出力...

CVE-1999-0524

CVE-1999-0524 システムがICMP Timestamp Request Remote Date Disclosure（CVE-1999-0524）に対して脆弱かどうかを確認するBashスクリプト。 使い方 1. hping3がインストールされ、PATHが通っていることを確認します。 2. ターゲットをIPv4形式で含むファイルを作成します。各ターゲットは新しい行に記載します。 3. スクリプトを実行可能にします。 4. 実行します。 Targets.txtのサンプルファイル cat targets.txt 127.0.0.1 127.0.1.1 10.10.10.10...

ASUS HG100 - Denial of Service Exploit

Exploit Title:ASUS HG100 devices denial of serviceDOS via IPv4 packets/SlowHTTPDOS Date: 2019-04-14 Exploit Author: YinT Wang; Vendor Homepage: www.asus.com Version: Hardware version: HG100 、Firmware version: 1.05.12 Tested on: Currnet 1.05.12 CVE : CVE-2018-11492 1. Description The attack at sam...

ASUS HG100 Denial Of Service

Exploit Title:ASUS HG100 devices denial of serviceDOS via IPv4 packets/SlowHTTPDOS Date: 2019-04-14 Exploit Author: YinT Wang; Vendor Homepage: www.asus.com Version: Hardware version: HG100 、Firmware version: 1.05.12 Tested on: Currnet 1.05.12 CVE : CVE-2018-11492 1. Description The attack at sam...

ASUS HG100 - Denial of Service

Exploit Title:ASUS HG100 devices denial of serviceDOS via IPv4 packets/SlowHTTPDOS Date: 2019-04-14 Exploit Author: YinT Wang; Vendor Homepage: www.asus.com Version: Hardware version: HG100 、Firmware version: 1.05.12 Tested on: Currnet 1.05.12 CVE : CVE-2018-11492 1. Description The attack at sam...

ASUS HG100 - Denial of Service

ASUS HG100 - Denial of Service Exploit Title:ASUS HG100 devices denial of serviceDOS via IPv4 packets/SlowHTTPDOS Date: 2019-04-14 Exploit Author: YinT Wang; Vendor Homepage: www.asus.com Version: Hardware version: HG100 、Firmware version: 1.05.12 Tested on: Currnet 1.05.12 CVE : CVE-2018-11492 1...

CVE-2018-18442

D-Link DCS-825L devices with firmware 1.08 do not employ a suitable mechanism to prevent denial-of-service DoS attacks. An attacker can harm the device availability i.e., live-online video/audio streaming by using the hping3 tool to perform an IPv4 flood attack. Verified attacks includes SYN...

Design/Logic Flaw

D-Link DCS-825L devices with firmware 1.08 do not employ a suitable mechanism to prevent denial-of-service DoS attacks. An attacker can harm the device availability i.e., live-online video/audio streaming by using the hping3 tool to perform an IPv4 flood attack. Verified attacks includes SYN...

CVE-2018-18442

D-Link DCS-825L devices with firmware 1.08 do not employ a suitable mechanism to prevent denial-of-service DoS attacks. An attacker can harm the device availability i.e., live-online video/audio streaming by using the hping3 tool to perform an IPv4 flood attack. Verified attacks includes SYN...

CVE-2018-18442

D-Link DCS-825L devices with firmware 1.08 do not employ a suitable mechanism to prevent denial-of-service DoS attacks. An attacker can harm the device availability i.e., live-online video/audio streaming by using the hping3 tool to perform an IPv4 flood attack. Verified attacks includes SYN...

CVE-2018-18442

CVE-2018-18442 affects the D-Link DCS-825L (firmware 1.08). The vulnerability is a DoS due to insufficient input validation in the firmware, enabling a remote attacker to disrupt device availability (e.g., live video/audio streaming) via crafted or flood-like network traffic (syn/udp/icmp, includ...

CVE-2018-18442: Undefined Security Weakness

D-Link DCS-825L devices with firmware 1.08 do not employ a suitable mechanism to prevent denial-of-service DoS attacks. An attacker can harm the device availability i.e., live-online video/audio streaming by using the hping3 tool to perform an IPv4 flood attack. Verified attacks includes SYN...

AXIS M1033-W IP Camera < 5.50.5.0 DoS Vulnerability

AXIS M1033-W IP camera devices are prone to a denial of service DoS vulnerability Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

AXIS M1033-W Denial of Service Vulnerability

AXIS M1033-W is a network camera product from Axis Sweden. A security vulnerability exists in the AXIS M1033-W using firmware version 5.40.5.1, which is caused by the program's failure to use reasonable protection mechanisms. The vulnerability can be exploited to cause a denial of service by usin...

CVE-2018-9158

An issue was discovered on AXIS M1033-W IP camera Firmware version 5.40.5.1 devices. They don't employ a suitable mechanism to prevent a DoS attack, which leads to a response time delay. An attacker can use the hping3 tool to perform an IPv4 flood attack, and the services are interrupted from...

Design/Logic Flaw

An issue was discovered on AXIS M1033-W IP camera Firmware version 5.40.5.1 devices. They don't employ a suitable mechanism to prevent a DoS attack, which leads to a response time delay. An attacker can use the hping3 tool to perform an IPv4 flood attack, and the services are interrupted from...

CVE-2018-9158

An issue was discovered on AXIS M1033-W IP camera Firmware version 5.40.5.1 devices. They don't employ a suitable mechanism to prevent a DoS attack, which leads to a response time delay. An attacker can use the hping3 tool to perform an IPv4 flood attack, and the services are interrupted from...

CVE-2018-9158

An issue was discovered on AXIS M1033-W IP camera Firmware version 5.40.5.1 devices. They don't employ a suitable mechanism to prevent a DoS attack, which leads to a response time delay. An attacker can use the hping3 tool to perform an IPv4 flood attack, and the services are interrupted from...

CVE-2018-9158

CVE-2018-9158 affects Axis M1033-W IP camera firmware version 5.40.5.1. The issue is that the device does not employ a suitable mechanism to prevent a DoS attack, resulting in a response time delay. An attacker can use the hping3 tool to perform an IPv4 flood attack, and services are interrupted ...

PT-2018-18895

Name of the Vulnerable Software and Affected Versions AXIS M1033-W IP camera Firmware version 5.40.5.1 Description The issue concerns a lack of a suitable mechanism to prevent a Denial of Service DoS attack, resulting in a response time delay. An attacker can exploit this by using the hping3 tool...