EUVD-2026-93927

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana could lead to cross-tenant data interception. In this context, "tenant" refers to a user or team sharing the same Kibana deployment, not a separate Elastic Cloud organization or customer. Kibana's Fleet package installation proces...

CVE-2026-102406 Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interception

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana could lead to cross-tenant data interception. In this context, "tenant" refers to a user or team sharing the same Kibana deployment, not a separate Elastic Cloud organization or customer. Kibana's Fleet package installation proces...

DrMITM

D̳r̳M̳I̳T̳M̳ DrMITM es un programa diseñado para registrar globalmente todo el tráfico. Diagrama: C̳ó̳m̳o̳ f̳u̳n̳c̳i̳o̳n̳a̳ DrMITM envía una solicitud al sitio web y devuelve la IP del sitio web por si acaso el servidor del sitio web está diseñado para confiar en la IP del sitio para las...

tirith

tirith Your browser would catch this. Your terminal won't. Website | Docs | SKILL.md | Changelog | Releases Independent open-source project, with hosting supported by the Vercel Open Source Program Spring 2026 Cohort. Can you spot the difference? curl -sSL https://install.example-cli.dev | bash...

drift-node-sdk

The Node.js Tusk Drift SDK enables fast and deterministic API testing by capturing and replaying API calls made to/from your service. Automatically record real-world API calls, then replay them as tests using the Tusk CLI to find regressions. During replay, all outbound requests are intercepted...

dnsdiag

Conjunto de herramientas de medición, resolución de problemas y auditoría de seguridad de DNS ¿Alguna vez te has preguntado si tu ISP está interceptando tu tráfico DNS? ¿Has notado algún comportamiento inusual en tus respuestas DNS, o has sido redirigido a la dirección incorrecta y has sospechado...

CVE-2014-1266-poc

OS X/iOS SSL Flaw POC Overview This repository contains some Go code that demonstrates the recently discovered SSL verification vulnerability in iOS and OS X. Apple Update Announcement Adam Langley's writeup Usage $ git clone https://github.com/gabrielg/CVE-2014-1266-poc.git $ cd CVE-2014-1266-po...

Kibana 8.19.22, 9.4.7, 9.5.4 Security Update (ESA-2026-187)

Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interception Authorization Bypass Through User-Controlled Key CWE-639 in Kibana could lead to cross-tenant data interception. In this context, "tenant" refers to a user or team sharing the same Kibana...

thats_no_pipe

Thats no pipe Frida-based project to intercept Windows named pipe communication Objectives This project aims at intercepting IPC communications by hooking specific WinAPI functions and forwarding them to an HTTP proxy using a websocket. Architecture Read from and write to a named pipe can happen ...

macstealer

MacStealer: Bypass de Aislamiento de Clientes Wi-Fi 1. Introducción Este repositorio contiene MacStealer. Puede probar redes Wi-Fi para detectar bypasses de aislamiento de clientes CVE-2022-47522. Nuestro ataque puede interceptar robar tráfico hacia otros clientes en la capa MAC, incluso si los...

macstealer

MacStealer: Wi-Fi Client Isolation Bypass 1. Introduction This repo contains MacStealer. It can test Wi-Fi networks for client isolation bypasses CVE-2022-47522. Our attack can intercept steal traffic toward other clients at the MAC layer, even if clients are prevented from communicating with eac...

pypacker

一般信息 这是 Pypacker：Python 中最快、最简单的底层数据包操作库。 参见下面的示例，了解您可以用它做什么。 如果您想支持此项目，可以通过 PayPal 进行捐赠。 使用 Pypacker 可以做什么 通过关键字或原始字节创建自定义数据包，并通过 Python 读取/更改其数据：examples/createpackets.py 从 pcap 文件读取/写入数据包（仅支持 Wireshark/tcpdump pcap 格式）：examples/pcapreadwrite.py 将多个 pcap 文件合并为一个文件。尝试读取损坏的 pcap...

IIS-Backdoor

IIS-Backdoor In this article I will explain how I designed a rootkit for Microsoft Internet Information Services IIS.The question is: why a backdoor in a web server? First obvious but useless answer: because we can. Ok, let us give a more clever answer. The purpose of backdooring a web sever is...

CVE-2021-33699_Task_Hijacking

CVE-2021-33699TaskHijacking What is it? An attacker app and a victim app to practice the CVE-2021-33699Task Hijacking vulnerability. Reference https://naro-security.tistory.com/55...

socksmon

socksmon Monitorea tráfico TCP arbitrario utilizando tu proxy de intercepción HTTP favorito ¿Qué es socksmon? socksmon es un servidor SOCKSv4 basado en Twisted que tuneliza el tráfico TCP entrante a través de un proxy HTTP. socksmon lo hace iniciando un servidor web interno en el puerto 2357,...

CVE-2026-100725

A flaw was found in http4k-core. The client-side cookie storage mechanism fails to enforce standard scoping rules for domain, path, and secure transmission attributes. When an application communicates with multiple destinations using a single cookie store, cookies intended for one server can be...

atlantis-android

Atlantis Android Capture HTTP/HTTPS traffic from Android apps and send to Proxyman for debugging. Overview Atlantis Android es una biblioteca complementaria de Proxyman que te permite capturar e inspeccionar el tráfico de red de tus aplicaciones Android sin necesidad de configurar un proxy ni...

polymorph

Polymorph Polymorph es una herramienta que facilita la modificación del tráfico de red sobre la marcha al permitir la ejecución de código Python en paquetes de red que son interceptados en tiempo real. Este marco de trabajo se puede utilizar para modificar en tiempo real paquetes de red que...

FstHook

FstHook A library for intercepting native functions by hooking KiFastSystemCall Note: KiFastSystemCall hooking only works on the following systems: Windows XP Service Pack 3 32-bit Windows Vista 32-bit Windows 7 32-bit...

tcpflow

TCPFLOW 1.5.0 Downloads directory: http://digitalcorpora.org/downloads/tcpflow/ Installation Most common GNU/Linux distributions ship tcpflow in their repositories. So on Debian/Ubuntu/etc you can say sudo apt-get install tcpflow and on Fedora/RedHat/CentOS/etc you can say sudo dnf install tcpflo...