3574 matches found
owt
Currently unstable will be updated eventually. Offensive Wifi Toolkit owt created by Brennan Mccown clu3bot This tool compiles some necessary tools for wifi auditing in a unix bash script with a user friendly interface. The goal of owt is to have the smallest file size possible while still...
pybatfish
Got questions, feedback, or feature requests? Join our community onSlack! Pybatfish Pybatfish is a Python client for Batfish. What is Batfish? Batfish is a network validation tool that provides correctness guarantees for security, reliability, and compliance by analyzing the configuration of...
ntpscanner
ntpscanner Escanea servidores NTP en busca de la vulnerabilidad de amplificación DDoS NTP CVE-2013-5211...
NTP_Trojan
NTPTrojan Acerca de Troyano inverso de acceso remoto ntp en python, para pentesters. Para obtener más información sobre la hoja de ruta y la inspiración, consulta: http://lockboxx.blogspot.com/2015/04/python-ntp-trojan.html Referencias El servidor se deriva en gran medida de:...
WireBug
WireBug WireBug 是一套用于语音IP渗透测试的工具集。它被设计成一个向导模式，易于使用。这些工具也支持单独使用，每个工具都是一个独立的Python或Bash程序。 安装 请阅读 wiki 中的安装指南。 工具 FullBridge：一个简单的bash脚本，用于在两个指定接口之间设置二层桥接。 TimeShift：用于在中间人位置（配合FullBridge）响应NTP请求的工具，可返回过去或未来的时间戳。你可以轻松检查客户端（VoIP电话）是否验证了服务器证书（SIPS、H.323s、HTTPS、LDAPS等）的有效性，或将其用作DoS工具。...
fraud-bridge
简介 fraud-bridge 有助于绕过限制性审查环境，这些环境会阻止直接的 TCP 或 UDP 连接， 通过设置 ICMP、NTP 或 DNS（通过 IPv4 或 IPv6）隧道来实现。 它会自动调整 TCP MSS 选项，以实现非分片的数据包流（即 MSS 钳制），从而提高性能， 使你能够在桥接上进行网络会话。 它使用 MD5（HMAC）完整性保护隧道，防止被恶意注入的 TCP 数据包攻击。如果你需要隐私保护， 则必须自行使用加密。这里假设你无论如何都会通过隧道使用 SSH。 可以直接使用，或者如果你需要 HTTP 隧道，则使用 SSH 代理选项。 当进行 DNS 隧道时，...
Sandman
桑德曼 桑德曼是一个后门工具，专为红队行动中在加固型网络上工作而设计。 桑德曼作为一个装载器，利用NTP（一种同步时间和日期的协议）从预定义的服务器获取并运行任意的shellcode 。 由于NTP是一种常被防御者忽视的协议，因此其网络可访问性广泛。 使用方法 SandmanServer（使用方法） 在Windows/nix机器上运行： root@kitploit: python3 sandmanserver.py "Network Adapter" "Payload Url" "optional: ip to spoof" Network...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ntp (UTSA-2023-002187)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002187 advisory. praecisparse in ntpd/refclockpalisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manipulated GPS receiver. Tenabl...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ntp (UTSA-2026-090102)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090102 advisory. ntpd in ntp 4.2.8 before 4.2.8p15 and 4.3.x before 4.3.101 allows remote attackers to cause a denial of service memory consumption by sending packets, because memory...
ntpdos
ntpdos PoC for distributed NTP reflection DoS CVE-2013-5211. Usage root@kitploit: $ ./ntpdos -H --== ntpdos by sepehrdad ==-- usage: ntpdos -t -s options | misc options: -t - target ip address -T - list of target ip addresses -s - ntp server ip address -S - list of ntp server ip addresses -p -...
hlf-time-oracle
hlf-time-oracle hlf-time-oracle es un chaincode para blockchain Hyperledger Fabric que proporciona hora precisa a otros chaincodes. hlf-time-oracle se basa en el paquete ntp y en el paquete nts. De esta manera se resuelve el problema de seguridad asociado con la posible manipulación del tiempo de...
CVE-2016-3962-Exploit
CVE-2016-3962, CVE-2016-3989 POC Exploit Este es un exploit de prueba de concepto para la versión V5.30p de la interfaz de configuración web del Meinberg NTP Time Server. Este exploit también utiliza CVE-2016-3989 para escalar al usuario root. Se pueden encontrar más detalles sobre las...
CVE-2020-35262
CVE-2020-35262: Stored XSS in Digisol DG-HR3400 Router Vulnerability Description It has been identified that the vulnerable endpoint doesn't have server side input validation and lacks client side filtering for any malicious script injection. An attacker can use this vulnerability to inject...
Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in NTP
Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-63379, CVE-2026-63381, CVE-2026-63382, CVE-2026-63383, CVE-2026-63384, CVE-2026-63385, CVE-2026-63387, CVE-2026-63388 in Network Time Protocol NTP as described in the vulnerability details section. Vulnerability Details...
CVE-2026-22007-NTP-monlist-Amplification-over-IPv6
CVE-2026-22007 – Amplificación de monlist de NTP sobre IPv6 Código del programa Python root@kitploit: ntpamplifysim.py - NTP server responding to monlist without authentication import socket, struct def ntpmonlistresponse: Simplified NTP reply with many entries return b'\x00' 1200 large response...
NTPUpdateSnowLeopard
Este repositorio no tiene un README...
CVE-2020-25498
CVE-2020-25498: XSS almacenado mediante CSRF en el router Beetel 777VR1 Descripción de la vulnerabilidad Se ha identificado que el endpoint vulnerable no tiene validación de entrada en el lado del servidor y carece de filtrado en el lado del cliente frente a cualquier inyección de script malicios...
The vulnerability of the handler_update_system_time() function (libdeuteron_modules.so) in the NTP Service component of D-Link DIR-825 and DIR-825R router microprogramming software, allowing a attacker to execute arbitrary commands.
The vulnerability of the handlerupdatesystemtime function libdeuteronmodules.so of the NTP Service component of D-Link DIR-825 and DIR-825R routers is related to the lack of measures taken to protect data at the management level. Exploiting this vulnerability could allow a remote attacker to...