ipeeyoupeewepee

ipeeyoupeewepee Un scanner et une suite d'attaque pour les hôtes de l'internet public principalement des routeurs Cisco qui transmettent des paquets non authentifiés encapsulés dans les protocoles IP-in-IP et GRE. Cette vulnérabilité, connue sous le nom d'« Insecure Implementation of Tunneling...

dontgo403

dontgo403 é uma ferramenta para contornar erros 40X. Instalação Baixe a versão mais recente para seu sistema operacional em RELEASES Desatualizada no momento Ou compile por conta própria RECOMENDADO: root@kitploit: git clone https://github.com/devploit/dontgo403; cd dontgo403; go get; go build...

Nac_Bypass_Agent

Nac Bypass Agent Este trecho de código é um script escrito em Python e projetado para ser executado no Kali Linux. Aqui está um resumo explicando o que cada função faz: runcommandcommand: Esta função executa o comando que recebe como entrada e retorna sua saída. killnetworkservices: Esta função...

Dosinator

DoSinator DoSinator è un potente strumento di test Denial of Service DoS sviluppato in Python. Progettato per professionisti della sicurezza e ricercatori, questo strumento consente di simulare vari attacchi DoS, fornendo un ambiente realistico per valutare la resilienza di reti, sistemi e...

CVE-2022-46169

CVE-2022-46169 Cacti Esecuzione Remota di Codice Cieca Pre-Auth Disclaimer Questo è solo a scopo educativo. Non sono responsabile delle tue azioni. Usalo a tua discrezione. Spiegazione Questo script esegue un brute force sulle variabili necessarie per sfruttare questa vulnerabilità. Questo exploi...

Cisco-SNMP-Slap

PANORAMICA cisco-snmp-slap utilizza lo spoofing degli indirizzi IP per aggirare un'ACL che protegge un servizio SNMP su un dispositivo Cisco IOS. Tipicamente lo spoofing IP ha un uso limitato negli attacchi reali al di fuori dei DoS. Nessun servizio TCP può completare l'handshake iniziale. I...

fireprox

FireProx Übersicht Vorteile Haftungsausschlüsse Betreuer Anerkennung Grundlegende Nutzung Installation Screenshots Mitwirken Übersicht Die Quell-IP-Adresse bei Webaufrufen verbergen oder kontinuierlich rotieren zu können, kann schwierig oder teuer sein. Es gibt seit einiger Zeit eine Reihe von...

burpsuiefakeip

Repost von https://github.com/TheKingOfDuck/burpFakeIP BurpFakeIP Burpsuite-IP-Fälschung, ich meine es ernst. Vier kleine Funktionen Bestimmte IP fälschen Lokale IP fälschen Zufällige IP fälschen Zufalls-IP-Brute-Force 0x01 Bestimmte IP fälschen Klicken Sie im Modul Repeater mit der rechten...

CVE-2026-14840

CVE-2026-14840 — YOP Poll 7.0.6 Umgehung der Abstimmungsbegrenzung Autor: nullwhisper Verwendungszweck: ausschließlich autorisierte Sicherheitsforschung / Schwachstellenvalidierung. Was ist das? Das YOP-Poll-Plugin in Versionen 7.0.6 erzwingt eine Begrenzung von einer Stimme pro IP. Das Problem...

CVE-2021-40438

CVE-2021-40438 Richiesta di inoltro Apache CVE CVE-2021-40438: un uri-path di richiesta appositamente costruito può indurre modproxy a inoltrare la richiesta a un server di origine scelto dall'utente remoto. Questa vulnerabilità interessa Apache HTTP Server 2.4.48 e versioni precedenti. Questa CV...

CVE-2023-4631

CVE ID : CVE-2023-4631 漏洞类型 : IP地址欺骗 描述 : WordPress的DoLogin Security插件在版本3.6及之前版本中存在IP地址欺骗漏洞。这是由于在请求日志记录和登录限制时，对IP地址信息获取位置的限制不足。攻击者可以提供带有不同IP地址的X-Forwarded-For头部，该地址将被记录，并可用于绕过已阻止某个IP地址登录的设置。 复现步骤 : 1. 发送带有x-forwarded-for头部的登录请求，例如 X-Forwarded-For: 8.8.8.8。 2. 在“登录尝试日志”中看到被伪造的IP地址。 参考链接 : 1...

CVE-2026-37432

CVE-2026-37432 Posizione: Apiutil.java: 107-113 Principio: fidarsi direttamente dell'header di richiesta X-Forwarded-For, che può essere falsificato per manipolare gli indirizzi IP. Metodo di sfruttamento: X-Forwarded-For: 127.0.0.1...

CVE-2025-12720

g-FFL Cockpit = 1.7.1 - Eliminazione arbitraria di prodotti non autenticata Il plugin g-FFL Cockpit non implementa controlli di autorizzazione adeguati sugli endpoint REST API queue e process, consentendo a utenti non autenticati di eliminare prodotti WooCommerce arbitrari spoofando gli header HT...

Typecho-Multiple-Vulnerabilities

Typecho ثغرات متعددة يحتوي هذا المستودع على استغلالات الثغرات التالية: CVE-2024-35538: في Typecho الإصدار 1.3.0 توجد ثغرة تزوير عنوان IP العميل، والتي تسمح للجهات الخبيثة بتزوير عناوين IP الخاصة بهم عن طريق تحديد عنوان IP عشوائي كقيمة لرؤوس "X-Forwarded-For" أو "Client-Ip" أثناء تنفيذ طلبات HTTP...

SUSE CVE-2026-72815

go-chi chi versions = 5.2.1 and before 5.3.0 contain an IP spoofing vulnerability in the RealIP middleware, which blindly trusts the first leftmost value of the X-Forwarded-For HTTP header. A remote attacker can bypass IP-based access control lists and rate-limiting mechanisms, and forge log...

EUVD-2026-62921

In Splunk SOAR versions below 8.6.0, an unauthenticated user could spoof the source IP address in a crafted request to an Automation Broker notification endpoint and execute arbitrary code on the Splunk SOAR host. The vulnerability is possible because the Splunk SOAR Automation Broker trusts a...

CVE-2026-76356

In Splunk SOAR versions below 8.6.0, an unauthenticated user could spoof the source IP address in a crafted request to an Automation Broker notification endpoint and execute arbitrary code on the Splunk SOAR host. The vulnerability is possible because the Splunk SOAR Automation Broker trusts a...

CVE-2026-76356 Authentication Bypass through IP Address Spoofing in the Automation Broker in Splunk SOAR

In Splunk SOAR versions below 8.6.0, an unauthenticated user could spoof the source IP address in a crafted request to an Automation Broker notification endpoint and execute arbitrary code on the Splunk SOAR host. The vulnerability is possible because the Splunk SOAR Automation Broker trusts a...

CVE-2026-76356

Splunk SOAR versions below 8.6.0 are vulnerable: the Automation Broker trusts a client-supplied source IP header, allowing an unauthenticated attacker to spoof the local system IP and execute arbitrary code on the host. CVSS 8.1 (HIGH). No exploit code or in-the-wild exploitation is documented. U...

PT-2026-78783

Name of the Vulnerable Software and Affected Versions Splunk SOAR versions prior to 8.6.0 Description An unauthenticated user can execute arbitrary code on the host by spoofing the source IP address in a crafted request to an Automation Broker notification endpoint. This occurs because the...