906 matches found
ettercap
A suite for man in the middle attacks Copyright 2001-Current The Ettercap Dev Team INTRODUCTION Ettercap is a comprehensive suite for man in the middle attacks. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. It supports active and passive...
dsploit
dSploit - An Android network penetration suite. Copyleft of Simone Margaritelli aka evilsocket. http://www.dsploit.net/ http://www.evilsocket.net/ dSploit is an Android network analysis and penetration suite which aims to offer to IT security experts/geeks the most complete and advanced...
android
cSploit is now considered EOL and is not being updated by the developers. Current version might not be functional on newer Android versions. We appreciate everyone who contributed to cSploit over the years. cSploit: Android network pentesting suite cSploit is a free/libre and open source GPLed...
NetCrackPi
NetCrackPi This Repo is a collective download candidate to turn your raspberry pi into a Network Exploitation Utility for educational purposes of course. Features of the NetCrackPi include wardriving, WEP, WPA, WPA2 cracking, packet sniffing, ARP spoofing, MiTM attacks, NIDS, WPS Pixie-Dust...
Improper Certificate Validation
Overview uv is an An extremely fast Python package and project manager, written in Rust. Affected versions of this package are vulnerable to Improper Certificate Validation via uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised. By default, uv verifies TLS...
PT-2026-111187
Summary Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks in some cases. Details https://github.com/XTLS/Xray-core/blob/45cf2898ab12e97a55dd8f1f3d78d903340bdc9e/transport/internet/tls/config.goL333-L347 If r.Config.ServerName is empty, DNSName will be empty...
CVE-2026-0848
NLTK versions =3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module. The module dynamically loads external Java .jar files without verification or sandboxing. An attacker can supply or replace the JAR file, enabling the execution of...
CVE-2021-33879
Tencent GameLoop before 4.1.21.90 downloaded updates over an insecure HTTP connection. A malicious attacker in an MITM position could spoof the contents of an XML document describing an update package, replacing a download URL with one pointing to an arbitrary Windows executable. Because the only...
CVE-2022-0123
An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab does not validate SSL certificates for some of external CI services which makes it possible to perform MitM attacks on connections to these external services...
EUVD-2021-25722
Malware in sbrugna...
EUVD-2020-0857
Malware in sbrugna...
EUVD-2021-25720
Malware in sbrugna...
EUVD-2019-0279
Malware in sbrugna...
EUVD-2019-0247
Malware in sbrugna...
EUVD-2020-12713
Malware in sbrugna...
EUVD-2020-0784
Malware in sbrugna...
EUVD-2019-0320
Malware in sbrugna...
EUVD-2018-0457
Malware in sbrugna...