cdpsnarf

CDPSnarf v0.1.6 Cisco Discovery Protocol Sniffer by Tasos "Zapotek" Laskos [email protected] [email protected] root@kitploit: Licensed under the GNU General Public License v2 General root@kitploit: CDPSnarf is a network sniffer exclusively written to extract information from CDP packets...

peetch

peetch peetch is a collection of tools aimed at experimenting with different aspects of eBPF to bypass TLS protocol protections. Currently, peetch includes three subcommands. The first called dump aims to sniff network traffic by associating information about the source process with each packet...

ngrep

ngrep 1.49.0 2.7.2026 ngrepは、ネットワークレイヤーに適用されたGNU grepのようなものです。これはPCAPベースのツールで、拡張正規表現または16進表現を指定してパケットのデータペイロードと照合できます。IPv4/6、TCP、UDP、ICMPv4/6、IGMP、Rawなど、多くの種類のプロトコルを理解し、さまざまなインターフェースタイプに対応し、tcpdumpやsnoopなどのより一般的なパケットスニッフィングツールと同様にBPFフィルターロジックを理解します。 新機能 Docker/Podmanのコンテナ名解決（-r フラグ）...

AnySniff

💀AnySniff AnySniff is a tool for monitoring TCP connections of processes like AnyDesk on Windows. It uses the CVE-2024-52940 vulnerability to track open connections and log IPs, ports, and other relevant details. ⚙Features Monitors TCP connections of targeted processes e.g., AnyDesk. Logs IP...

creds.py

さらに多くのパース機能を備えた新バージョン: https://github.com/DanMcInerney/net-creds creds.py FTP/POP/IMAP/HTTP/IRC の認証情報と、各プロトコルからの興味深いデータを収集します。-i オプションでインターフェースを指定しない場合、スクリプトは ip route で見つけたインターネット接続インターフェースを使用します。断片化されたパケットを連結することで、重要な情報を見逃しません。Ctrl-C をキャッチすると、ネットワーク上でスニッフィングされた各 IP...

JavaDeserialization

Java 역직렬화 취약점 탐지 CVE-2017-10271과 같은 취약점을 대상으로 하는 Java 역직렬화 취약점 스캐너입니다. 이 프로젝트에는 하나의 PoC만 포함되어 있으며, 나머지는 아직 정리되지 않았습니다. 설치 1. nmap 설치 ​ https://nmap.org/download.html 운영 체제에 따라 다른 버전을 다운로드하여 설치합니다. 2. 타사 패키지 설치 pip install -r requirements.txt 3. 스캔 PoC를 수정하여 ping 명령어의 IP 주소를 자신의 IP 주소로 변경합니다. 25번째...

bettercap

This repository is DEPRECATED, bettercap developementmoved here and every version 2.0.0 is considered LEGACY and NOT SUPPORTED...

DNSSpoof

DNSSpoof Python3で書かれたDNSスプーフィングツール。 使い方 root@kitploit: usage: dnsspoof.py -h -d DOMAIN -i INTERFACE -t TARGET -r IP optional arguments: -h, --help show this help message and exit -d DOMAIN Domain to spoof default: all -i INTERFACE Interface to listen on default: default -t TARGET Target's IP. If...

PT-2026-84504

Name of the Vulnerable Software and Affected Versions Scrapy versions prior to 2.17.0 Description The S3DownloadHandler in scrapy/core/downloader/handlers/s3.py converts S3-scheme bucket and key requests into plaintext HTTP requests unless the is secure variable in request.meta is explicitly...

EUVD-2026-63545

A vulnerability exists in the Dynamic DNS DDNS functionality of TP-Link Omada Gateways. During communication with a third-party DDNS service, authentication credentials are transmitted over an unencrypted channel. An attacker who can observe or manipulate traffic between an affected device and th...

EUVD-2026-63144

RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

EUVD-2026-55995

The Windows installer deployed Npcap leaving its access restriction option at the insecure default value, so the driver was accessible to every local user of the host instead of being restricted to administrators only. A local user without administrative privileges could use the Npcap driver to...

CVE-2026-33921

CVE-2026-33921 maps to a Windows RPC Runtime (rpcrt4.dll) vulnerability where NdrComplexTypeBufferSize underflows, enabling a pre-auth heap-based overflow (Ghost-Call) via RPC/SMB without credentials. Impact: potential remote code execution with SYSTEM privileges on affected Windows hosts; exploi...

PYSEC-2026-732 Plone credentials stored in session cookie

Plone CMS 3.1.x uses invariant data a client username and a server secret when calculating an HMAC-SHA1 value for an authentication cookie, which makes it easier for remote attackers to gain permanent access to an account by sniffing the network...

PYSEC-2026-734 Plone CMS Improper Session Management

Plone CMS before 3 places a base64 encoded form of the username and password in the ac cookie for all user accounts, which makes it easier for remote attackers to obtain access by sniffing the network...

Sensitive Cookie Without "HttpOnly" Flag

Overview Affected versions of this package are vulnerable to Sensitive Cookie Without "HttpOnly" Flag via missing HttpOnly and Secure attributes on the pinpointJwt session cookie. An attacker can access session tokens by exploiting stored or reflected cross-site scripting to exfiltrate the cookie...

The Gentlemen are knocking: сustom backdoors and evolving tactics

Introduction This year saw the emergence of The Gentlemen, a prominent example of a group operating under the ransomware-as-a-service RaaS model. Although our initial assessment suggested the group first appeared in mid-2025, it actually started ramping up its activities at the beginning of 2026...

CVE-2025-13926

An attacker could use data obtained by sniffing the network traffic to forge packets in order to make arbitrary requests to Contemporary Controls BASC 20T...

CVE-2025-31981

HCL BigFix Service Management SM Discovery is vulnerable to unenforced encryption due to port 80 HTTP being open, allowing unencrypted access. An attacker with access to the network traffic can sniff packets from the connection and uncover the data...

CVE-2025-31981 HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption

HCL BigFix Service Management SM Discovery is vulnerable to unenforced encryption due to port 80 HTTP being open, allowing unencrypted access. An attacker with access to the network traffic can sniff packets from the connection and uncover the data...