1337 matches found
doona
Doona - Network fuzzing tool .:: About ::. Doona is a fork of the Bruteforce Exploit Detector Tool BED. BED is a program which is designed to check daemons for potential buffer overflows, format string bugs etc. Doona is Australian for duvet. It adds a significant enough number of features/change...
smb
SMB SMB 통신을 위한 Go 패키지입니다. 현재는 클라이언트 측 기능만 최소한으로 구현되어 있습니다. 다음은 서버와 세션을 수립하는 샘플 클라이언트입니다: package main import "log" "github.com/stacktitan/smb/smb" func main host := "172.16.248.192" options := smb.Options Host: host, Port: 445, User: "alice", Domain: "corp", Workstation: "", Password:...
boofuzz
.. image:: https://github.com/jtpereyda/boofuzz/raw/master/artwork/boo-logo-dark.svg :width: 60% :alt: boofuzz logo boofuzz: Network Protocol Fuzzing for Humans .. image:: https://github.com/jtpereyda/boofuzz/actions/workflows/test.yml/badge.svg?branch=master :target:...
cve-2020-00796
CVE-2020–0796 취약점 식별 및 즉석에서 완화 CVE-2020–0796은 SMBv3Server Message Block 3.0 네트워크 통신 프로토콜에 존재하는 pre-remote 코드 실행 취약점으로, Microsoft는 2020년 3월 화요일 패치에서 이 문제를 해결하지 않을 것입니다. 사용법 python3 cve-2020-0796-scanner.py IP CVE-2020-0796은 어떤 장치에 영향을 미칩니까? SMB 프로토콜에서의 패킷 요청 협상...
metateta
Metateta Metateta 자동화 도구 Metasploit을 사용하여 네트워크 프로토콜을 스캔하고 익스플로잇하기 위한 도구 대규모 네트워크를 위한 더 빠른 침투 테스트 할 수 있는 작업 smb, smtp, snmp와 같은 특정 네트워크 프로토콜에 대해 모든 metasploit 모듈로 스캔 특정 네트워크 프로토콜에 대해 모든 보조 모듈 실행 특정 네트워크 프로토콜에 대해 가능한 모든 Metasploit 익스플로잇 실행 실제 침투 테스트에는 권장되지 않습니다 단일 대상, 네트워크 또는 대상이 포함된 텍스트 파일에 대해 실행 ...
termshark
Termshark A terminal user-interface for tshark, inspired by Wireshark. V2.4 is out now with packet search and profiles for colors and columns! See theChangeLog. If you're debugging on a remote machine with a large pcap and no desire to scp it back to your desktop, termshark can help! Features Rea...
polymorph
Polymorph Polymorph is a tool that facilitates the modification of network traffic on the fly by allowing the execution of Python code on network packets that are intercepted in real time. This framework can be used to modify in real time network packets that implement any publicly specified...
fuzzowski
Fuzzowski █ █ ████████ ██████████ ██ ████ ██ ██ ████ ██ ████ ████ █ ████████████ █ █ ██████████ █ Fuzzowski Network Fuzzer █ █ █ █ 🄯 Fuzzers, inc. ██ ██ by Mario Rivas The idea is to be the Network Protocol Fuzzer that we will want to use. The aim of this tool is to assist during the whole proces...
cve-2020-0796
CVE-2020-0796 취약점의 실시간 식별 및 완화 CVE-2020-0796은 서버 메시지 블록 3.0SMBv3 네트워크 통신 프로토콜에 존재하는 원격 코드 실행 전 취약점으로, Microsoft는 2020년 3월 화요일의 일부로 이 문제를 해결하지 않을 것입니다. 사용법 python3 cve-2020-0796-scanner.py IP CVE-2020-0796은 어떤 장치에 영향을 미치나요? SMB 프로토콜에서의 패킷 요청 협상 취약점과 이를 완화하는 방법에 대한 자세한 내용은 제 게시물을 확인하세요:...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: sctp: Handle the error returned from sctpauthasocinitactivekey. When an error is returned from sctpauthasocinitactivekey, the activekey is not actually updated. The old shkey remains freed while it’s still being used as the activ...
zeek-jetdirect
zeek-jetdirect용 Zeek 패키지 .. image::...
CVE-2025-14847
🚨 CVE-2025-14847 — “MongoBleed” 인증 없이 원격에서 메모리 내용을 노출할 수 있는 고위험 취약점입니다. 📖 목차 개요 기술 세부 사항 심각도 및 CVSS 영향을 받는 버전 실제 영향 익스플로잇 요약 탐지 가이드라인 수정 임시 완화 조치 보안 체크리스트 요약 🔎 개요 CVE-2025-14847일명 “MongoBleed”는 MongoDB 서버의 네트워크 프로토콜 처리에 존재하는 취약점입니다. 이 취약점을 통해 원격의 인증되지 않은 공격자 가 취약한 MongoDB 프로세스의 초기화되지 않은 힙 메모리 를 읽...
Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-8842-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8842-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...
USN-8842-1 linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - InfiniBand drivers; - Network drivers; - TCM subsystem; - B.A.T.M.A.N. meshing protocol; - HSR network protocol; -...
Ubuntu 24.04 LTS / 26.04 LTS : Linux kernel vulnerabilities (USN-8816-1)
The remote Ubuntu 24.04 LTS / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8816-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...
Wireshark Analyzer 4.6.9
Wireshark is a GTK+-based network protocol analyzer that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and Win32 and to give Wireshark features that are missing from closed-source sniffers. Thi...
Vulnerability of the Server component: The Connection Handling module of the MySQL Cluster database management system, which allows a hacker to cause a service failure.
The vulnerability of the Server: Connection Handling component of the MySQL Cluster database management system is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL network protocol...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
A flaw was discovered in the Linux kernel’s NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packets when using NVMe over TCP. This can lead to the NVMe driver dereferencing a NULL pointer, resulting in kernel panic and a denial of service...
