cloud_ip_ranges

Cloud IP Ranges Description Most cloud providers publish up to date lists of their IP address ranges. This tools identifies if an IP belongs to a provider's ranges by fetching and parsing the latest lists. Supports: AWS source Azure source Google Cloud Platform source Alibaba Cloud currently...

Cisco-SNMP-Slap

OVERVIEW cisco-snmp-slap utilises IP address spoofing in order to bypass an ACL protecting an SNMP service on a Cisco IOS device. Typically IP spoofing has limited use during real attacks outside DoS. Any TCP service cannot complete the inital handshake. UDP packets are easier to spoof but the...

ImpossibleTravelLogAnalysis

Impossible Travel Log Analysis by NCC Group About Basic log analysis tool to detect impossible travel via IP address geographic information Expected Data Format A CSV file with the following headers When,User,Event,IP With the following format 2019-04-09...

bigip-scanner

BIG-IP Scanner Determine the running software version of a remote F5 BIG-IP management interface. Developed with ❤️ by the Bishop Fox Cosmos team. Description CVE-2022-1388, a critical vulnerability in the F5 BIG-IP management interface, allows an attacker to bypass authentication and remotely...

CVE-2026-72815-poc

CVE-2026-72815: go-chi/chi middleware.RealIP IP Spoofing PoC 日本語版 Overview This repository contains a local Proof of Concept PoC for CVE-2026-72815 GHSA-3fxj-6jh8-hvhx, an IP spoofing vulnerability in go-chi/chi's middleware.RealIP. The vulnerable middleware blindly trusts the first leftmost valu...

CVE-2026-74586

CVE-2026-74586 — SCTP ASCONF newtransport use-after-free trigger A self-contained, unprivileged PoC for CVE-2026-74586, a use-after-free in the Linux kernel's SCTP ASCONF dynamic address reconfiguration handling. Credit for the bug itself goes to Qing Ming, who reported it upstream; the fix is...

ip-camera-research

IP Camera Research - Fullhan FH8626V100 AJL30PG0803 Security research on a consumer IP camera built on the Fullhan FH8626V100 SoC model AJL30PG0803, resulting in six assigned CVEs covering unauthenticated API access, plaintext credential disclosure, and full unauthenticated device compromise via ...

burpFakeIP

burpFakeIP Download and use: Releases 2021/09/24 1. Fixed a bug reported by M00nBack. 2. Added an AutoXFF switch, and set AutoXFF to disabled by default. If you need the plugin to add a random XFF header to every request, you can select ON in the right-click menu to enable it. 2021/05/21 Refactor...

ip-https-tools

ip-https-tools A collection of tools for the IP over HTTPS IP-HTTPS Tunneling Protocol used by Microsoft DirectAccess to send Teredo related IPv6 packets over an IPv4-based HTTPS session. MS-IPHTTPS protocol pecification DirectAccess Technical Overview DirectAccess Requirements DirectAccess...

CVE-2026-34160

CVE-2026-34160 — Unauthenticated SSRF in Chamilo LMS via PENS plugin pens.php Severity : High CVSS 8.6 CWE : CWE-918 Server-Side Request Forgery Affected : chamilo/chamilo-lms 2.0-RC.2 Fixed in : 2.0-RC.3 Advisory : GHSA-g2xj-4cch-j276 NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-34160 Credit ...

CVE-2025-57457

OS Command Injection in CURO UC300 IP Phone An OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 allows local attackers to inject arbitrary OS Commands via the "IP Addr" parameter. PoC: https://github.com/restdone/CVE-2025-57457/blob/main/oscommandinject.mp4 Step...

CVE-2026-33827

🔴 CVE-2026-33827: Windows TCP/IP Remote Code Execution RCE 📌 General Description CVE-2026-33827 is a critical Remote Code Execution RCE vulnerability affecting the Windows TCP/IP network stack. It is classified as a Race Condition flaw caused by improper synchronization when handling shared...

CVE-2026-24061

CVE-2026-24061 python3 exploit.py...

cve-2026-32746-mitigation

CVE-2026-32746: Advanced Linux Networking Mitigation Tool 🚨 TECHNICAL DISCLAIMER CVE-2026-32746 is a hypothetical vulnerability used for educational demonstrations. This tool addresses the "Perfect Storm" scenario: A memory-unsafe Telnet daemon telnetd combined with a race condition in privilege...

CVE-2026-6274

CVE-2026-6274: Redline WR3200 Authentication Bypass English | Turkish This repository contains the technical details and Proof of Concept PoC for CVE-2026-6274. The vulnerability exists in Redline WR3200 routers prior to firmware v7.1.8 and allows an attacker to bypass authentication and change t...

CVE-2024-49113-Checker

Usage and information Command - python3 CVE-2024-49113.py targets.txt -o vulnerablehosts.txt -t 16 -o = Output -t = Threads Targets.txt should contain IPs in this format: 1.117.193.20 1.180.234.219 1.180.234.228 1.180.234.232 1.29.77.19 POC by Chirag Artani https://3rag.com...

CVE-2021-40438

CVE-2021-40438 Apache forward request CVE CVE-2021-40438: A crafted request uri-path can cause modproxy to forward the request to an origin server chosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier. This CVE could be used to spoof the original IPs in DoS attacks...

CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical-

CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical- Oracle Fusion Middleware Oracle HTTP Server / WebLogic Server Proxy Plug-in has an easily exploitable, unauthenticated, network-reachable flaw allowing compromise over HTTP. Affected supported versions include 12.2.1.4.0,...

ip2

@bybrave/ip2 Fork mantenido de ip — utilidades de direcciones IP para Node.js — con el aviso SSRF sin parchear corregido. El paquete original tiene 38 millones de descargas/mes, sin lanzamiento desde febrero de 2024, y un aviso de gravedad ALTA CVE-2024-29415 / GHSA-2p57-rm9w-gvfp que afecta a...

CVE-2025-1868

CVE-2025-1868: Probador HTTP de Filtración NTLM de Advanced IP Scanner y Advanced Port Scanner Pequeña aplicación PHP dockerizada que desencadena un handshake NTLM y extrae el dominio , usuario y estación de trabajo reclamados de los mensajes NTLM Tipo 3. No valida contraseñas. No almacena...