sonar.js

sonar.js A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration, WebSocket host scanning, and external resource fingerprinting. How does it work? Upon loading the sonar.js payload in a modern web browser the following will happen: sonar....

network-attacker

Network-Attacker network-attacker V0.1 es un programa de script Bash para pruebas de estrés WiFi basado en Mdk3 Inundación de Balizas y Ataque de Desautenticación Creado para ayudar a principiantes e incluso profesionales en un ataque de inundación de balizas o desautenticación en redes Instalaci...

nfstream

NFStreamrepo es un framework multiplataforma de Python que proporciona estructuras de datos rápidas, flexibles y expresivas diseñadas para hacer que trabajar con datos de red en línea o fuera de línea sea fácil e intuitivo. Su objetivo es ser el bloque fundamental de alto nivel de Python para...

fierce

Fierce Fierce is a DNS reconnaissance tool for locating non-contiguous IP space. Useful links: Domain Name System DNS Domain Names - Concepts and Facilities Domain Names - Implementation and Specification Threat Analysis of the Domain Name System DNS Name Servers NS State of Authority Record SOA...

WonderShell

WonderShell - CVE - 2021-44595 | CVE - 2021-44596 Discovered by Netanel Cohen and Tomer Peled a Security Researchers from BugSec. Description POC example to exploit Wondershare Dr.Fone . Dr.Fone is a phone toolkit develop by wondershare , and vulnerable to RCE. Only with network access we manage ...

tcpreplay

Tcpreplay Tcpreplay is a suite of GPLv3 licensed utilities for UNIX and Windows under Cygwin for editing and replaying network traffic previously captured by tools like tcpdump and Wireshark. It classifies traffic as client or server, rewrites Layer 2/3/4 headers, and replays it back onto the...

tcpreplay

Tcpreplay Tcpreplay is a suite of GPLv3 licensed utilities for UNIX and Windows under Cygwin for editing and replaying network traffic previously captured by tools like tcpdump and Wireshark. It classifies traffic as client or server, rewrites Layer 2/3/4 headers, and replays it back onto the...

CVE-2025-24071_POC

Video Tutorial Windows Library File Creator CVE-2025-24071/CVE-2025-24054 Demo A minimalistic Rust application that demonstrates the creation of Windows Library files .library-ms with configurable network paths. Overview This project creates Windows Library Description .library-ms files that poin...

fence

Fence wraps commands in a sandbox that blocks network access by default and restricts filesystem operations based on configurable rules. It's most useful for running semi-trusted code package installs, build scripts, CI jobs, unfamiliar repos with controlled side effects, and it can also compleme...

HaE

Potencia al hacker ético para operaciones eficientes. Versión de red: overspace-labs/HaENet Versión de archivo: overspace-labs/HaEFile Versión del README: English | 简体中文 Introducción del Proyecto HaE es un proyecto de tipo framework en el campo de la ciberseguridad seguridad de datos , que adopta...

flashlight

Herramienta automatizada de recolección de información para testers de penetración Videos : https://www.youtube.com/watch?v=EUMKffaAxzs&list=PL1BVM6VWlmWZOv9Hv8TV2v-kAlUmvA5g7&index=4 https://www.youtube.com/watch?v=qCgW-SfYl1c&list=PL1BVM6VWlmWZOv9Hv8TV2v-kAlUmvA5g7&index=5...

flashlight

Automated Information Gathering Tool for Penetration Testers Videos : https://www.youtube.com/watch?v=EUMKffaAxzs&list=PL1BVM6VWlmWZOv9Hv8TV2v-kAlUmvA5g7&index=4 https://www.youtube.com/watch?v=qCgW-SfYl1c&list=PL1BVM6VWlmWZOv9Hv8TV2v-kAlUmvA5g7&index=5...

ssj

SSJ - Tu distribución Linux cotidiana convertida en Super Saiyan. Introducción SSJ es un pequeño script divertido que utiliza Docker instalado en tu distribución Linux cotidiana Ubuntu, Debian, etc. y la arma mágicamente con cientos de herramientas de pruebas de penetración y forenses. Detalles...

Puwr

Contenido Acerca de Puwr Uso de Puwr Escaneo de puertos Muestras Aviso legal Futuro Puwr Expande fácilmente tu superficie de ataque en una red local descubriendo más hosts, a través de SSH. Usando una máquina que ejecute un servicio SSH, Puwr utiliza un rango de subred dado para localizar IPs,...

ettercap

Un conjunto de herramientas para ataques de intermediario man-in-the-middle Copyright 2001-Actualidad El equipo de desarrollo de Ettercap INTRODUCCIÓN Ettercap es un conjunto completo de herramientas para ataques de intermediario man-in-the-middle. Incluye sniffing de conexiones en vivo, filtrado...

crowdsec

CrowdSec is an open-source and participative security solution offering crowdsourced server detection and protection against malicious IPs. Detect and block with our Security Engine, contribute to the network, and enjoy our real-time community blocklist. Features & Advantages Versatile Security...

kernel: net: qrtr: restrict socket creation to the initial network namespace

A flaw was found in the Linux kernel's QRTR Qualcomm IPC Router networking component. An unprivileged local attacker can create a QRTR socket in a separate network namespace. Due to improper handling of global state variables, this allows the attacker to send datagrams and control-plane messages ...

kernel: ice: fix double-free of tx_buf skb

A flaw was found in the Linux kernel's ice network driver. An error in the driver's handling of network packet transmission, specifically when icetso or icetxcsum functions fail, can lead to a double-free of a network buffer skb. This occurs because a transmit buffer txbuf may still point to an...

nimux

Pure-Nim network enumeration and remote execution toolkit nimux - Native Operator Toolkit nimux is a native command surface for authorized security assessments. It combines network enumeration, lightweight web discovery, credential validation, Active Directory operations, Kerberos workflows, remo...

heartbleedscanner

Heartbleed Scanner 针对 OpenSSL 内存泄漏（CVE-2014-0160）的网络扫描器 -t 参数用于优化超时时间（秒）。 -f 参数用于记录易受攻击系统的内存泄漏。 -n 参数用于扫描整个网络。 -i 参数用于从列表文件进行扫描。如果已有目标列表则很有用。 -r 参数用于随机化 IP 地址以避免线性扫描。 -s 参数用于利用需要明文命令启动 SSL/TLS 的服务（HTTPS/SMTP/POP3/IMAP） 示例用法： 扫描本地 192.168.1.0/24 网络以检测 HB 漏洞（https/443）并将泄漏保存到文件： python...