pybatfish

Got questions, feedback, or feature requests? Join our community onSlack! Pybatfish Pybatfish is a Python client for Batfish. What is Batfish? Batfish is a network validation tool that provides correctness guarantees for security, reliability, and compliance by analyzing the configuration of...

NTP_Trojan

NTPTrojan About Reverse ntp remote access trojan in python, for penetration testers. For more information about roadmap and inspiration see: http://lockboxx.blogspot.com/2015/04/python-ntp-trojan.html References Server is heavily derived from: https://github.com/limifly/ntpserver...

ntpscanner

ntpscanner Scans NTP servers for CVE-2013-5211 NTP DDOS amplification vulnerability...

fraud-bridge

Intro fraud-bridge helps bypassing restrictive censorship environments that block direct TCP or UDP connections, by setting up ICMP, NTP or DNS over IPv4 or IPv6 tunnels. It automatically patches TCP MSS option to achieve a non-fragmented stream of packets known as MSS-clamping to gain performanc...

WireBug

WireBug WireBug is a tool set for Voice-over-IP penetration testing. It is designed as a wizard which makes it easy to use. The tools are build for single using too, so every tool is its own python or bash program. Installation Read the Installation Guide in the wiki. Tools FullBridge: This is a...

owt

Currently unstable will be updated eventually. Offensive Wifi Toolkit owt created by Brennan Mccown clu3bot This tool compiles some necessary tools for wifi auditing in a unix bash script with a user friendly interface. The goal of owt is to have the smallest file size possible while still...

Sandman

Sandman Sandman is a backdoor that is meant to work on hardened networks during red team engagements. Sandman works as a stager and leverages NTP a protocol to sync time & date to get and run an arbitrary shellcode from a pre-defined server. Since NTP is a protocol that is overlooked by many...

CVE-2020-35262

CVE-2020-35262: Stored XSS in Digisol DG-HR3400 Router Vulnerability Description It has been identified that the vulnerable endpoint doesn't have server side input validation and lacks client side filtering for any malicious script injection. An attacker can use this vulnerability to inject...

CVE-2026-22007-NTP-monlist-Amplification-over-IPv6

CVE-2026-22007 – NTP monlist Amplification over IPv6 Program Code Python ntpamplifysim.py - NTP server responding to monlist without authentication import socket, struct def ntpmonlistresponse: Simplified NTP reply with many entries return b'\x00' 1200 large response server =...

CVE-2026-58392

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the NTP GPS page stores the operator-supplied initcmd value in base64 form, applies legacyhtmlescapeformdata to the encoded string, and then uses base64decode to decode the value directly into the GPS...

CVE-2026-58392 OPNsense: Stored XSS in Services: NTP GPS

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the NTP GPS page stores the operator-supplied initcmd value in base64 form, applies legacyhtmlescapeformdata to the encoded string, and then uses base64decode to decode the value directly into the GPS...

CVE-2026-58392

The OPNsense firewall and routing platform (prior to version 26.1.11 ) is vulnerable to a Stored Cross-Site Scripting (XSS) flaw in the NTP GPS page. The root cause is that the src/www/services_ntpd_gps.php component applies legacy_html_escape_form_data() to a base64-encoded initcmd value but sub...

CVE-2026-58392 OPNsense: Stored XSS in Services: NTP GPS

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the NTP GPS page stores the operator-supplied initcmd value in base64 form, applies legacyhtmlescapeformdata to the encoded string, and then uses base64decode to decode the value directly into the GPS...

EUVD-2026-102132

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the NTP GPS page stores the operator-supplied initcmd value in base64 form, applies legacyhtmlescapeformdata to the encoded string, and then uses base64decode to decode the value directly into the GPS...

CVE-2020-25498

CVE-2020-25498: Stored XSS via CSRF in Beetel 777VR1 Router Vulnerability Description It has been identified that the vulnerable endpoint doesn't have server side input validation and lacks client side filtering for any malicious script injection. An attacker can use this vulnerability to inject...

ntpscanner

ntpscanner NTP monlist scanner CVE-2013-5211 This code is for educational and research purposes, do not use it for malicious purposes...

NTPUpdateSnowLeopard

This repository does not have a README...

NTP_CVE-2013-5211

NTPCVE-2013-5211 Exploit and check CVE-2013-5211...

CVE-2026-9218

Insufficient input validation vulnerability in time server NTP setting of the listed NETGEAR models allows an attacker who is connected to the router’s local network and has the router’s administrator credentials to run unauthorized commands on the router. This vulnerability could impact the...

CVE-2026-9218

Certain NETGEAR routers are vulnerable to an insufficient input validation vulnerability within the time server (NTP) setting . An attacker who is connected to the router's local network and possesses administrator credentials can exploit this flaw to execute unauthorized commands on the device. ...