access-point

Point d'accès factice Point d'accès Wi-Fi ouvert rogue pour la capture de trafic dans des environnements contrôlés. Utilise hostapd mode AP natif nl80211 + dnsmasq DHCP/DNS + iptables NAT vers une interface de liaison montante. Prérequis Linux, root. Carte sans fil avec support du mode AP iw phy ...

dolos_cloak

Dolos Cloak Dolos Cloak est un script Python conçu pour aider les testeurs de pénétration réseau et les red teamers à contourner les solutions 802.1x en utilisant une attaque avancée de type man-in-the-middle. L'outil peut s'appuyer sur la connexion filaire d'un appareil victime déjà autorisé sur...

DEBIAN-CVE-2024-42270

In the Linux kernel, the following vulnerability has been resolved: netfilter: iptables: Fix null-ptr-deref in iptablenattableinit. We had a report that iptables-restore sometimes triggered null-ptr-deref at boot time. 0 The problem is that iptablenattableinit is exposed to user space before the...

CVE-2019-9946

Cloud Native Computing Foundation CNCF CNI Container Networking Interface 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI 'portmap' plugin, used to setup HostPorts for CNI, inserts rules at the front of the iptables nat chains; which take precedence over the KUBE-...

Code injection

Cloud Native Computing Foundation CNCF CNI Container Networking Interface 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI 'portmap' plugin, used to setup HostPorts for CNI, inserts rules at the front of the iptables nat chains; which take precedence over the KUBE-...

[fwknop] Single Packet Authorization and Port Knocking

fwknop stands for the "FireWall KNock OPerator", and implements an authorization scheme called Single Packet Authorization SPA. This method of authorization is based around a default-drop packet filter fwknop supports iptables on Linux, ipfw on FreeBSD and Mac OS X, and PF on OpenBSD and libpcap...