cve-2021-33045

cve-2021-33045 ブラウザから/RPC2Loginに送信されるデータパケットを改変して、カメラのWebページにログインします。 ここではmitmproxyスクリプトを使用して関連機能を実装していますが、Fiddlerやburpsuiteを使用して同様の機能を実装することもできます。 使い方は以下のとおりです： root@kitploit: mitmweb --showhost --set blockglobal=false -s mitm.py 次に、ブラウザでmitmproxyをHTTPプロキシとして設定します。 参考リンク： Dahua Authentication...

polymorph

Polymorph Polymorph is a tool that facilitates the modification of network traffic on the fly by allowing the execution of Python code on network packets that are intercepted in real time. This framework can be used to modify in real time network packets that implement any publicly specified...

MITM_Intercept

MITMIntercept Burp 및 기타 도구를 통해 SSL 및 TLS 가로채기 지원으로 비HTTP 프로토콜을 가로채고 수정하는 약간 덜 해킹적인 방법입니다. 이 도구는 연구원 및 두꺼운 클라이언트 보안 평가를 수행하는 응용 침투 테스터를 위한 것입니다. mitmrelay 프로젝트의 개선된 버전입니다. 이야기 CyberArk Labs 연구 부서의 작업의 일환으로, 우리는 TCP를 통한 SSL 및 TLS 통신을 검사하고 패킷 콘텐츠를 즉석에서 수정할 수 있는 방법이 필요했습니다. 이를 위한 많은 방법이 있습니다예를 들어, 잘...

udpack

UDPack UDPack은 확장 가능한 범용 UDP 패킷 난독화기입니다. 이 애플리케이션의 목적은 UDP 데이터 스트림의 경로에 위치하여 패킷을 난독화, 역난독화 또는 수정하는 것입니다. 이 스크립트는 asyncio 라이브러리를 사용하므로 Python 3.4 이상이 필요합니다. 항상 최신 Python 릴리스를 사용하는 것을 강력히 권장합니다. 기본 기능에는 서드파티 의존성이 필요 없지만, XChaCha20Poly1305Packer는 PyNaCl이 필요합니다. 경고: 이 애플리케이션의 목적이 암호화 가 아니라 난독화 라는 점을...

CVE-2026-74724

In the Linux kernel, the following vulnerability has been resolved: ipvs: avoid out-of-bounds write in ipvsnaticmp Sashiko warns that local attacker can modify the packet while it is processed by IPVS. Some places read the IP ihl field multiple times which can cause out-of-bounds access. One such...

EUVD-2015-4478

Malware in sbrugna...

EUVD-2019-14896

Malware in sbrugna...

EUVD-2024-54574

Malicious code in bioql PyPI...

CVE-2024-40458

An issue in Ocuco Innovation Tracking.exe v.2.10.24.51 allows a local attacker to escalate privileges via the modification of TCP packets...

CVE-2024-40458

An issue in Ocuco Innovation Tracking.exe v.2.10.24.51 allows a local attacker to escalate privileges via the modification of TCP packets...

CVE-2024-40458

An issue in Ocuco Innovation Tracking.exe v.2.10.24.51 allows a local attacker to escalate privileges via the modification of TCP packets...

CVE-2024-40458

An issue in Ocuco Innovation Tracking.exe v.2.10.24.51 allows a local attacker to escalate privileges via the modification of TCP packets...

CVE-2024-40458

CVE-2024-40458 affects Ocuco Innovation Tracking.exe 2.10.24.51. The issue allows a local attacker to escalate privileges through modification of TCP packets. CVSSv3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, no user interaction, and impact to Confidentiality, Integr...

PT-2025-22550 · Ocuco · Ocuco Innovation Tracking.Exe

Name of the Vulnerable Software and Affected Versions: Ocuco Innovation Tracking.exe version 2.10.24.51 Description: The issue allows a local attacker to escalate privileges via the modification of TCP packets. Recommendations: For Ocuco Innovation Tracking.exe version 2.10.24.51, at the moment,...

RADIUS Protocol CVE-2024-3596

...

CVE-2021-43116

An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login...

CVE-2021-46086

xzs-mysql = t3.4.0 is vulnerable to Insecure Permissions. The front end of this open source system is an online examination system. There is an unsafe vulnerability in the functional method of submitting examination papers. An attacker can use burpuite to modify parameters in the packet to destro...

WEB IPCAMERA Logic Flaw Vulnerability in Shenzhen Baoriming Technology Co.

Ltd. is a high-tech camera manufacturer integrating R&D, manufacturing, sales and service, providing face recognition, vivo detection and other high-quality products based on Hesi intelligent hardware for users all over the world. Shenzhen Baoriming Technology Co., Ltd WEB IPCAMERA There is a log...

Ksix Zigbee Devices Playback Protection Bypass

Exploit Title: Ksix Zigbee Devices - Playback Protection Bypass PoC Date: 2020-11-15 Exploit Author: Alejandro Vazquez Vazquez Vendor Homepage: https://www.ksixmobile.com/ Firmware Version: Gateway Zigbee Module - v1.0.3, Gateway Main Module - v1.1.2, Door Sensor - v1.0.7, PIR Motion Sensor -...

CVE-2019-5291

Some Huawei products have an insufficient verification of data authenticity vulnerability. A remote, unauthenticated attacker has to intercept specific packets between two devices, modify the packets, and send the modified packets to the peer device. Due to insufficient verification of some field...