iptable_evil

iptableevil iptableevil ist eine sehr spezifische Hintertür für iptables, die alle Pakete mit gesetztem Evil Bit durchlässt, unabhängig von den Firewall-Regeln. Die erste Implementierung befindet sich in iptableevil.c, die eine Tabelle zu iptables hinzufügt und eine Modifikation eines...

totp-ssh-fluxer

TOTP SSH port fluxing Some people change their SSH port on their servers so that it is slightly harder to find for bots or other nasties, and while that is generally viewed as an action of security through obscurity it does work very well at killing a lot of the automated logins you always see in...

silverboxcc

Malware Android sottoposto a reverse engineering chiamato Red Alert V2.0. Al momento dell'analisi, non erano più in esecuzione server C2, quindi non siamo stati in grado di osservare alcun traffico tra il malware e il server C2. Così abbiamo ricostruito il protocollo C2 e scritto questo pannello ...

network-security-snort

Laboratório de Implantação de IDS/IPS Snort Um ciclo completo de implantação do Snort 3 como Sistema de Detecção de Intrusão monitoramento passivo e como Sistema de Prevenção de Intrusão bloqueio ativo via iptables, validado contra quatro vetores de ataque em uma rede virtual de três máquinas no...

PrivacyNet

PrivacyNet: Rede de Privacidade PrivacyNet é uma ferramenta de anonimização que configura iptables e Tor para rotear todos os serviços, tráfego e DNS através da rede Tor. Esta ferramenta permite que os usuários roteiem o tráfego da Internet através do Tor e ocultem seu endereço IP real. Recursos...

vcsa-hardening-tool

VCSA-Härtungs- und Protokollierungstool Ein automatisiertes Härtungsskript für die VMware vCenter Server Appliance VCSA, das Zero-Trust-Netzwerksegmentierung und tiefgehende forensische Auditierung erzwingt. Dieses Tool wurde entwickelt, um kritische Risiken im Zusammenhang mit fortschrittlichen...

opensnitch

Join the project community on our server! OpenSnitch is a GNU/Linux application firewall. •• Key Features • Download • Installation • Usage examples • In the press ••...

firehol

FireHOL http://firehol.org/ root@kitploit: FireHOL, an iptables stateful packet filtering firewall for humans! FireQOS, a TC based bandwidth shaper for humans! Git These instructions are for people who are working with the git repository. There are more general instructions starting with Upgrade...

SystemVulnerabilityChecklist_Project4_Decodelabs

🔐 System-Schwachstellen-Checkliste Eine Übung zur Sicherheitsbewertung und Netzwerkhärtung, die gegen eine verwundbare Linux-Zielmaschine durchgeführt wurde. Das Projekt konzentriert sich auf die Identifizierung kritischer Schwachstellen, die Bewertung ihrer Auswirkungen und die Implementierung...

CVE-2026-16503

Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that is published on all interfaces 0.0.0.0:5432 with a default database password set to "postgres". Because Docker installs its own iptables rules, this exposure bypasses a standard host UFW configuration...

CVE-2026-16503

CVE-2026-16503 concerns VPS.org’s one-click Supabase template, which deploys PostgreSQL bound to all interfaces (0.0.0.0:5432) with the default password postgres . This exposure can bypass host firewall rules (Docker iptables), enabling potential remote database access. The linked sources indicat...

CVE-2026-16503 VPS.org one-click Supabase template deployment instance contains multiple vulnerabilities

Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that is published on all interfaces 0.0.0.0:5432 with a default database password set to "postgres". Because Docker installs its own iptables rules, this exposure bypasses a standard host UFW configuration...

EUVD-2026-51547

Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that is published on all interfaces 0.0.0.0:5432 with a default database password set to "postgres". Because Docker installs its own iptables rules, this exposure bypasses a standard host UFW configuration...

PT-2026-66762

Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that is published on all interfaces 0.0.0.0:5432 with a default database password set to "postgres". Because Docker installs its own iptables rules, this exposure bypasses a standard host UFW configuration...

PYSEC-2026-852 OpenStack Neutron Intended MAC-spoofing protection mechanism bypass

The IPTables firewall in OpenStack Neutron up to 7.0.4 and 8.x before 8.1.0 allows remote attackers to bypass an intended MAC-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via 1 a crafted DHCP discovery message or 2 crafted non-IP traffic...

PYSEC-2026-856 OpenStack Neutron Improper Input Validation vulnerability

OpenStack Neutron before 2014.2.4 juno and 2015.1.x before 2015.1.1 kilo, when using the IPTables firewall driver, allows remote authenticated users to cause a denial of service L2 agent crash by adding an address pair that is rejected by the ipset tool...

OpenStack Neutron Improper Input Validation vulnerability

OpenStack Neutron before 2014.2.4 juno and 2015.1.x before 2015.1.1 kilo, when using the IPTables firewall driver, allows remote authenticated users to cause a denial of service L2 agent crash by adding an address pair that is rejected by the ipset tool...

PYSEC-2026-431 OpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source address...

CVE-2026-53269

A flaw was found in the Linux kernel's netfilter synproxy component. This vulnerability is caused by a race condition during the on-demand registration of netfilter hooks. A local user with privileges to modify netfilter rules could exploit this flaw by concurrently adding iptables targets or...

Astra Linux – Vulnerability in Linux

A flaw was discovered in the Linux kernel’s implementation of string matching within packets. A privileged user with root or CAPNETADMIN status can insert rules into iptables, and this action may cause the system to panic. The issue affects kernels prior to version 5.5-rc1...