CVE-2024-38063

यह CVE-2024-38063 के लिए एक थोड़ा अस्थिर पीओसी है, जो tcpip.sys में एक RCE है जिसे 13 अगस्त 2024 को पैच किया गया था। मुझे यह भेद्यता नहीं मिली और न ही रिपोर्ट की, वह श्रेय Wei को जाता है। आवश्यकताएँ root@kitploit: pip3 install scapy उपयोग स्क्रिप्ट में फ़ील्ड्स को संशोधित करें: iface - यदि आपके...

CVE-2024-38063

CVE-2024-38063 - SSP H3 इस सेटअप वीडियो वाले के लिए मैंने Windows 22H2 19045 और बिल्ड 2468 का उपयोग किया है। यह CVE 4780 तक पैच नहीं किया गया है। मैंने इसे Qemu/KVM के साथ आज़माया, लेकिन नेटवर्क एडॉप्टर पैकेट को कोलेसिंग नहीं कर रहा था जैसा कि मैंने tcpdump के साथ जांचा। समाधान VirtualBox,...

kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels

A flaw was found in the Linux kernel's IPv6 networking implementation, specifically within the seg6 and rpl lwtunnels. A race condition can occur when handling destination cache entries, where a NOREF no reference destination object is used after it has been freed. This use-after-free vulnerabili...

fi6s

fi6s: Scanner IPv6 veloce fi6s è uno scanner di porte IPv6 progettato per essere veloce, mirato alla scansione e scoperta su Internet. Questo viene ottenuto inviando ed elaborando pacchetti grezzi in modo asincrono. Il design e l'obiettivo sono molto simili a Masscan, anche se non è altrettanto...

xmap

XMap: O Scanner da Internet XMap é um scanner de rede rápido projetado para realizar pesquisas de escaneamento de rede em toda a Internet IPv6 e IPv4. XMap foi reimplementado e melhorado profundamente a partir do ZMap e é totalmente compatível com o ZMap, equipado com a velocidade de sondagem de ...

CVE-2020-16898-EXP-POC

CVE-2020-16898 CVE-2020-16898 Vulnerabilità di esecuzione di codice remoto TCP/IP di Windows EXP&POC Riproduzione forforever: https://www.cnblogs.com/forforever/p/13846077.html poc CVE-2020-16898Checker-poc Comandi: Avvia PowerShell/CMD come amministratore root@kitploit: Powershell.exe...

CVE-2020-16898--EXP-POC

CVE-2020-16898 CVE-2020-16898 Windows TCP/IP Remote-Codeausführung-Schwachstelle EXP&POC Reproduktion forforever：https://www.cnblogs.com/forforever/p/13846077.html poc CVE-2020-16898Checker-poc Befehl: Als Administrator PowerShell/CMD starten root@kitploit: Powershell.exe -ExecutionPolicy...

CVE-2020-10749

CVE-2020-10749 CVE-2020-10749 PoC attacchi MitM su Kubernetes tramite annunci di router rogue IPv6 Solo a scopo educativo Requisiti Cluster Kubernetes con le seguenti versioni di kubelet kubelet v1.18.0-v1.18.3 kubelet v1.17.0-v1.17.6 kubelet mtu 1450 state UP inet6 fe80::3c07:afff:feb5:7219/64...

kernel: net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels

A flaw was found in the Linux kernel's IPv6 networking implementation, specifically within the seg6 and rpl lwtunnels. A race condition can occur when handling destination cache entries, where a NOREF no reference destination object is used after it has been freed. This use-after-free vulnerabili...

CVE-2026-52776 Trestle URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0

Compliance-trestle Trestle is a tooling platform for managing compliance as code. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, the URLSecurityValidator that guards trestle's remote-fetch paths against server-side request forgery can be bypassed to reach loopback, link-local,...

THC-Archive

THC-Archive Tutte le pubblicazioni del gruppo di ricerca sulla sicurezza noto anche come hacker The Hacker's Choice Seguici su Twitter: https://twitter.com/hackerschoice Leggi altro su Medium: https://medium.com/@hackerschoice Perché? Perché non abbiamo più tempo per gestire un server web complet...

CVE-2026-22007-NTP-monlist-Amplification-over-IPv6

CVE-2026-22007 – Amplificazione monlist NTP su IPv6 Codice del programma Python root@kitploit: ntpamplifysim.py - NTP server responding to monlist without authentication import socket, struct def ntpmonlistresponse: Simplified NTP reply with many entries return b'\x00' 1200 large response server ...

nipe

Un motore per rendere la rete Tor il tuo gateway predefinito. Riepilogo Il progetto Tor consente agli utenti di navigare in Internet, chattare e inviare messaggi istantanei in modo anonimo attraverso il proprio meccanismo. È utilizzato da un'ampia varietà di persone, aziende e organizzazioni, sia...

mitm6

mitm6 mitm6 ist ein Pentesting-Tool, das die Standardkonfiguration von Windows ausnutzt, um den Standard-DNS-Server zu übernehmen. Dies geschieht durch Antworten auf DHCPv6-Nachrichten, wobei den Opfern eine link-lokale IPv6-Adresse bereitgestellt und der Host des Angreifers als Standard-DNS-Serv...

CVE-2024-38063-poc

Real POC veröffentlicht unter https://github.com/ynwarcs/CVE-2024-38063 und ich habe es auch in meinem Code aktualisiert. Dies kann einen Absturz Ihres Systems verursachen, also verwenden Sie eine VM oder nur zu Lernzwecken. Sie können RCE erzielen, indem Sie Änderungen am Code vornehmen...

vc5

VC5 Diese README wird derzeit aktualisiert, um die jüngsten Änderungen zu berücksichtigen – einige Informationen entsprechen möglicherweise nicht dem aktuellen Codestand. Diese Codeiteration ist noch nicht produktionsreif – für den Produktionseinsatz eine v0.2-Version verwenden Ein horizontal...

Windows-CVE-2024-38063

Windows CVE-2024-38063 ID do CVE: CVE-2024-38063 Pontuação CVSS 3.1: 9.8 Crítico Pontuação EPSS: Baixo - 0.088% https://www.cvedetails.com/epss/CVE-2024-38063/epss-score-history.html Impacto: Execução Remota de Código Componentes Afetados: Pilha TCP/IP do Windows Vetor de Ataque: Rede Remoto...

CVE-2024-38063-Remediation

CVE-2024-38063-Rimedio Script di audit Scarica lo script usando un one-liner di PowerShell $downloadURI = 'https://raw.githubusercontent.com/dweger-scripts/CVE-2024-38063-Remediation/main/Audit-PatchInstalled-ipv6Vuln.ps1'; $script = 'C:\temp\Audit-PatchInstalled-ipv6Vuln.ps1'; Invoke-WebRequest...

grafana security, bug fix, and enhancement update

An update is available for grafana. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Grafana is an open source, feature rich metrics dashboard and graph editor fo...

EvilFOCA

Evil FOCA Requisiti Windows XP o successivi. .NET Framework 4 o successivi. Libreria Winpcap http://www.winpcap.org Introduzione Evil Foca è uno strumento per pentesters di sicurezza e auditor il cui scopo è testare la sicurezza nelle reti dati IPv4 e IPv6. Lo strumento è in grado di effettuare...