thc-tips-tricks-hacks-cheat-sheet

THC's favourite Tips, Tricks & Hacks Cheat Sheet https://thc.org/tips A collection of our favourite tricks. Many of those tricks are not from us. We merely collect them. We show the tricks 'as is' without any explanation why they work. You need to know Linux to understand how and why they work. G...

phantun

Phantun Un ofuscador ligero y rápido de UDP a TCP. Tabla de contenidos Phantun Última versión Resumen Uso 1. Habilitar el reenvío de IP del kernel 2. Agregar las reglas de firewall necesarias Cliente Usando nftables Usando iptables Servidor Usando nftables Usando iptables 3. Ejecutar los...

TOR Virtual Network Tunneling Tool 0.4.9.13

Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. It also enables software developers to create new communication tools with built-in privacy features. It provides the foundation for a range of applications that allow...

UBUNTU-CVE-2026-89563

In the Linux kernel, the following vulnerability has been resolved: ip6tunnel: use skbcowhead in ip6tnlxmit ip6tnlxmit may need to expand headroom before it can push the outer IPv6 and optional encap headers. It currently does that with skbreallocheadroom, copies skb-sk ownership, consumes the...

[SECURITY] Fedora 42 Update: openvpn-2.6.20-1.fc42

OpenVPN is a robust and highly flexible tunneling application that uses all of the encryption, authentication, and certification features of the OpenSSL library to securely tunnel IP networks over a single UDP or TCP port. It can use the Marcus Franz Xaver Johannes Oberhumers LZO library for...

Network tunneling with… QEMU?

Cyberattackers tend to give preference to legitimate tools when taking various attack steps, as these help them evade detection systems while keeping malware development costs down to a minimum. Network scanning, capturing a process memory dump, exfiltrating data, running files remotely, and even...

CVE-2021-44425

An issue was discovered in AnyDesk before 6.2.6 and 6.3.x before 6.3.3. An unnecessarily open listening port on a machine in the LAN of an attacker, opened by the Anydesk Windows client when using the tunneling feature, allows the attacker unauthorized access to the local machine's AnyDesk...

Multiple government entities targeted by China-linked Daxin malware

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here A technologically advanced and previously undocumented malware Daxin was used as the advanced persistent threat APT weapon by China-linked actor against government critical infrastructures across the globe. This malware can re...

Malicious Cyber Actor Use of Network Tunneling and Spoofing to Obfuscate Geolocation

Summary This Activity Alert uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge ATT &CK™ and Pre-ATT&CK frameworks. See the MITRE ATT&CK for Enterprise and Pre-ATT&CK frameworks for referenced threat actor techniques. Attributing malicious cyber activity that uses network tunneli...

CVE-2006-4983: Undefined Security Weakness

Cisco NAC allows quarantined devices to communicate over the network with 1 DNS, 2 DHCP, and 3 EAPoUDP, which allows attackers to bypass control methods by tunneling network traffic through one of these protocols...

l2tpd Malformed Data Remote DoS

The remote host is running l2tpd, a network tunneling application. The installed version is vulnerable to a denial of service attack. An attacker may use this flaw to disable the VPN and prevent partners / employees from connecting to it. C Tenable Network Security, Inc. Ref:...