EvilFOCA

Evil FOCA Requirements Windows XP or later. .NET Framework 4 or later. Winpcap library http://www.winpcap.org Introduction Evil Foca is a tool for security pentesters and auditors whose purpose it is to test security in IPv4 and IPv6 data networks. The tool is capable of carrying out various...

QueenSono

QueenSono ICMP Data Exfiltration A Golang Package for Data Exfiltration with ICMP protocol IPv4 & IPv6. QueenSono tool only relies on the fact that ICMP protocol isn't monitored. It is quite common. It could also been used within a system with basic ICMP inspection ie. frequency and content lengt...

cve-2026-98432-check

cve-2026-98432-check Checks whether a host drops IPv4 TCP SYN with IP options , the recommended network mitigation for CVE-2026-98432 use-after-free in the Linux kernel's IPv4 TCP handshake, CVSS 9.8, until the patched kernel is released. For each port, it sends a normal SYN and a SYN with IPv4...

terraform-aws-security-group

terraform-aws-security-group Terraform module to manage AWS Security Groups. Currently, the ingress and egress rules support IPv4, IPv6, and Security Group ID inputs. Requirements Name| Version ---|--- terraform| = 1.6 aws| = 5.0 Providers Name| Version ---|--- aws| = 5.0 Modules No modules...

CVE-2026-98432

CVE-2026-98432: Linux kernel IPv4 TCP use-after-free Attackable over the network, with no login and no user action. The bug is in the kernel code that handles every incoming IPv4 TCP connection. This guide shows how to check a server, protect it until a patched kernel is available, and clean up...

sslsplit

SSLsplit - transparent SSL/TLS interception https://www.roe.ch/SSLsplit Overview SSLsplit is a tool for man-in-the-middle attacks against SSL/TLS encrypted network connections. It is intended to be useful for network forensics, application security analysis and penetration testing. SSLsplit is...

cve-2026-98432-ubuntu-backport

CVE-2026-98432: Ubuntu 6.8 backport candidate Status: source-validated candidate. Not compiled, boot-tested, installed, or published upstream. This repository adapts Eric Dumazet's existing upstream fix to the exact Ubuntu Ubuntu-6.8.0-147.147 source tree. It does not claim discovery of the...

cve-2026-98432-mitigation

CVE-2026-98432: audit and temporary mitigation for Debian / Ubuntu The script checks whether the kernel is patched against CVE-2026-98432 use-after-free in IPv4 TCP handling, CVSS 9.8. If the kernel is not patched, it immediately enables a temporary mitigation and helps install the kernel update...

scrying

NCC Group Scrying A new tool for collecting RDP, web and VNC screenshots all in one place This tool is still a work-in-progress and should be mostly usable but is not yet complete. Please file any bugs or feature requests as GitHub issues Motivation Since Eyewitness recently dropped support for R...

CVE-2026-33534

CVE-2026-33534 - EspoCRM 9.3.3 Authenticated SSRF Authenticated SSRF proof-of-concept for EspoCRM 9.3.3 via alternative IPv4 loopback notation in the /api/v1/Attachment/fromImageUrl endpoint. Summary EspoCRM 9.3.3 blocks direct loopback URLs such as http://127.0.0.1/..., but the server-side fetch...

mitigate-cve-2026-98432

mitigate-cve-2026-98432 Temporary Ubuntu/UFW mitigation using Puppet. Drops IPv4 TCP packets carrying IPv4 options, not ordinary TCP options. Ubuntu CVE tracker Red Hat RHSB-2026-016: recommends IPv4 TCP/IP-options filtering; explicitly distinguishes ordinary TCP options. AWS security bulletin...

cdpsnarf

CDPSnarf v0.1.6 Cisco Discovery Protocol Sniffer by Tasos "Zapotek" Laskos [email protected] [email protected] Licensed under the GNU General Public License v2 General CDPSnarf is a network sniffer exclusively written to extract information from CDP packets. It provides all the...

zmap

ZMap: The Internet Scanner ZMap is a fast stateless single packet network scanner designed for Internet-wide network surveys. On a typical desktop computer with a gigabit Ethernet connection, ZMap is capable of scanning the entire public IPv4 address space on a single port in under 45 minutes. Fo...

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...

CVE-2026-98432

🔥 CVE-2026-98432 — Linux Kernel IPv4 Use-After-Free Linux Kernel IPv4 TCP Memory Corruption Vulnerability Technical Analysis • Vulnerability Research • Defensive Security Overview • Analysis • Affected Versions • Detection • Mitigation 🟣 01. Overview CVE-2026-98432 is a critical Use-After-Free UA...

CVE-2026-99999

CVE-2026-99999 — PwnEscape: detection and mitigation Practical guide in Spanish to determine whether a Linux server is exposed to CVE-2026-99999 "PwnEscape" and how to mitigate it. Includes a script that checks the machine and gives a verdict with the reason. 📋 Summary Field| Value ---|--- CVE|...

CVE-2026-99999-pwnescape

English · 简体中文 Reproduction of the Linux IPv4 csumstart validation bug fixed by 6785011f8b16 "ipv4: validate checksumstart before completing checksum". Given code execution inside a guest VM, an unprivileged process on a prepared TAP rewrites a header the kernel has already parsed, then reads 32...

ubuntu-noble-tcp-rcu-backport

Ubuntu Noble IPv4 RCU lifetime backport Community backport, build records and downloadable packages for Ubuntu 24.04 amd64. The security repair is Eric Dumazet’s already accepted upstream commit e3f33b0a1d89, addressing CVE-2026-98432. This is an interim local build, not a Canonical release. The...

drop-ipv4-opt

drop-ipv4-opt A tiny XDP program to mitigate CVE-2026-98432, a use-after-free in the kernel's TCP handshake handling of IPv4 options. On most hosts the bug can only be triggered by an incoming SYN that carries IP options see the NetLabel/CIPSO exception below, so this program drops IPv4 packets...

nipe

An engine to make Tor Network your default gateway. Summary The Tor project allows users to surf the Internet, chat and send instant messages anonymously through its own mechanism. It is used by a wide variety of people, companies and organizations, both for lawful activities and for other illici...