MIDAS

MIDAS Mac 入侵检测分析系统 MIDAS 已归档 MIDAS 不再受支持且已被归档。 原始源代码可通过 https://github.com/etsy/MIDAS/tree/prearchive 获取。 更多详情请参阅开源春季大扫除。...

blackboxprotobuf

Blackbox Protobuf Blackbox Protobuf now has an official package on PyPi under the namebbpb. The blackboxprotobuf package is an older fork Description Blackbox Protobuf is a set of tools for working with encoded Protocol Buffers protobuf without the matching protobuf definition. Protobuf is a bina...

wificurse

该程序监听无线接入点在其无线站范围内发送的信标帧。一旦收到，程序提取AP的BSSID，并使用广播MAC地址发送去认证包。这导致攻击时所有连接到该AP的客户端断开连接。这本质上是一个仅用于教育目的的WiFi拒绝服务攻击工具。它仅在Linux下工作，并且需要具备在无线网络中注入数据包能力的无线网卡驱动。 使用方法：以root身份运行，并将网卡接口作为第一个参数。它会自动将接口设置为监听模式，并在1-14信道范围内监听。如果当前信道没有AP，它每1秒切换一次信道；否则，它将开始攻击，大约持续30秒。之后它会切换信道。 编译： make 安装： make PREFIX=/usr install...

AZL-102807 CVE-2026-93191 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: smack: fix incorrect task context in smackmsgqueuemsgrcv The smackmsgqueuemsgrcv function incorrectly checks the permissions of the 'current' task instead of the 'target' task. In the msgsnd syscall path, if a receiver is already...

AZL-102804 CVE-2026-90098 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: net: sparx5: fix sleep in atomic context in MAC table access sparx5setrxmode runs with netifaddrlockbh held and iterates dev-mc via devmcsync, which per address calls sparx5mcsync / sparx5mcunsync - sparx5mactlearn /...

CVE-2026-93191 smack: fix incorrect task context in smack_msg_queue_msgrcv

In the Linux kernel, the following vulnerability has been resolved: smack: fix incorrect task context in smackmsgqueuemsgrcv The smackmsgqueuemsgrcv function incorrectly checks the permissions of the 'current' task instead of the 'target' task. In the msgsnd syscall path, if a receiver is already...

EUVD-2026-82299

In the Linux kernel, the following vulnerability has been resolved: smack: fix incorrect task context in smackmsgqueuemsgrcv The smackmsgqueuemsgrcv function incorrectly checks the permissions of the 'current' task instead of the 'target' task. In the msgsnd syscall path, if a receiver is already...

CVE-2026-93191

CVE-2026-93191 affects the Linux kernel's SMACK (Security Markup and Labeling Kernel) module. The root cause is in smack_msg_queue_msgrcv(), which incorrectly checks the permissions of the current task rather than the target task. When the pipelined_send() optimization in the msgsnd() syscall pat...

CVE-2026-90098 net: sparx5: fix sleep in atomic context in MAC table access

In the Linux kernel, the following vulnerability has been resolved: net: sparx5: fix sleep in atomic context in MAC table access sparx5setrxmode runs with netifaddrlockbh held and iterates dev-mc via devmcsync, which per address calls sparx5mcsync / sparx5mcunsync - sparx5mactlearn /...

hawkopsec

HawkOpsec One-tap Linux OPSEC hardening & anonymity toolkit -0b0d10 HawkOpsec turns a pile of manual privacy commands into security modes you apply with one tap. Pick a mode — the tool starts Tor, configures DNS, randomizes your identity and hardens the kernel for you. Hit RESET and every change ...

Blackash-CVE-2025-20343

🔒 CVE-2025-20343：Cisco ISE RADIUS 抑制 DoS 漏洞 🌐 ⚠️ 概述 🚨 高危 拒绝服务（DoS）漏洞，存在于 Cisco Identity Services Engine ISE ！ 💥 未认证的远程攻击者 可通过精心构造的 RADIUS 数据包 使设备崩溃 。 📅 披露时间 ：2025年11月5日 ✅ 尚无野外利用 （目前！） 🛠️ 工作原理 🔄 “拒绝来自重复失败客户端的 RADIUS 请求” 设置中存在 逻辑错误 。 🕵️‍♂️ 攻击者发送 精心构造的 RADIUS Access-Request ，目标是 被拒绝的 MAC 地址 。 💣 触发...

hawk

Hawk Hawk 是一个网络和渗透测试实用工具，我开发它是为了能够使用同一套工具执行不同类型的任务，而不是在多个工具之间来回切换。 目前，该脚本可以执行多种任务，例如 ifconfig 、ping 、traceroute 、端口扫描 （包括 SYN、TCP、UDP、ACK、全面扫描、主机发现 （扫描本地网络上的在线设备）、MAC 地址检测 （获取本地网络上主机 IP 的 MAC 地址）、Banner 抓取 、DNS 检查 （含地理位置信息）、WHOIS 、子域枚举 、漏洞侦察 、数据包嗅探 、MAC 欺骗 、IP 欺骗 、SYN 泛洪 、Deauth 攻击 和暴力破解攻击 （Beta）...

CLEANSTART-2026-GK72927 Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification

Multiple security vulnerabilities affect the openssl package. Issue summary: PBMAC1 parameters in PKCS12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification. See references for individual vulnerability...

CVE-2017-9476

CVE-2017-9476 带有确定性凭据的隐藏接入点。 编译 root@kitploit: cc xhscmmac2psk.c -o xhscmmac2psk 使用方法 root@kitploit: ./xhscmmac2psk 该算法也已添加到 PSKracker。 参考 CVE-2017-9476 Bastille-18.home-security-wifi-network.txt DEFCON 25 白皮书 DEFCON 25 幻灯片...

Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite

Summary There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite Vulnerability Details CVEID:CVE-2026-59645 DESCRIPTION: In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects...

test_struts2_vulnerability_CVE-2017-5638

teststruts2vulnerabilityCVE-2017-5638inMACOSX 在 Mac OS X 中测试 struts2 漏洞 CVE-2017-5638 下载测试 Web 应用并在 tomcat 中运行 root@kitploit: install tomcat brew install tomcat confirm where the tomcat installed ls -lF which catalina confirm tomcat home dir ls -lF /usr/local/Cellar/tomcat/8.5.11/libexec create w...

pwnfb50

pwnfb50 将任意FB50智能锁的所有权转移到自己手中 CVE-2019-13143 PoC Video 使用方法 root@kitploit: $ python3 pwnfb50.py id mac 其中 id 是你的用户ID，mac 是你的锁的MAC地址。...

CVE-2026-76860

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in wakeupset.cgi caused by unbounded tokenization of MAC and ID input. Attackers can supply crafted MAC and ID values to the affected endpoint to overflow the stack buffer and corrupt program memory...

CVE-2026-76860 Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in wake_up_set.cgi via MAC and ID Tokenization

Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in wakeupset.cgi caused by unbounded tokenization of MAC and ID input. Attackers can supply crafted MAC and ID values to the affected endpoint to overflow the stack buffer and corrupt program memory...

CVE-2026-76860

Netcore NR255-V version 1.5.130703 is affected by a stack-based buffer overflow in the wake_up_set.cgi endpoint. The root cause is unbounded tokenization of MAC and ID input , allowing a network attacker with low privileges to supply crafted values that overflow the stack buffer and corrupt progr...