MITM_Intercept

MITMIntercept 一种稍微不那么笨拙的方式，通过Burp等工具拦截和修改非HTTP协议，并支持SSL和TLS拦截。 本工具面向研究人员和应用程序渗透测试人员，用于执行厚客户端安全评估。 这是出色的 mitmrelay 项目的改进版本。 故事 作为 CyberArk Labs 研究部门工作的一部分，我们需要一种方法来检查 TCP 上的 SSL 和 TLS 通信，并能够实时修改数据包内容。有很多方法可以做到这一点（例如，知名的 Burp Suite 扩展 NoPE），但在某些情况下，它们都对我们不起作用。最后我们偶然发现了 mitmrelay。 mitmrelay...

polymorph

Polymorph Polymorph is a tool that facilitates the modification of network traffic on the fly by allowing the execution of Python code on network packets that are intercepted in real time. This framework can be used to modify in real time network packets that implement any publicly specified...

cve-2021-33045

cve-2021-33045 通过修改浏览器发往/RPC2Login的数据包登录摄像头的网页。 这里采用mitmproxy脚本实现相关功能，也可以通过Fiddler、burpsuite实现类似功能。 用法如下： mitmweb --showhost --set blockglobal=false -s mitm.py 然后，浏览器将mitmproxy设置为http代理。 参考链接： Dahua Authentication Bypass ≈ Packet Storm...

udpack

UDPack UDPack 是一个可扩展的通用 UDP 数据包混淆器。该应用的目的是位于 UDP 数据流路径中，对数据包进行混淆、去混淆或以其他方式修改。 需要 Python 3.4 或更高版本，因为此脚本使用了 asyncio 库。始终强烈建议使用最新的 Python 版本。基本功能无需第三方依赖，但 XChaCha20Poly1305Packer 需要 PyNaCl。 警告： 必须强调，本应用的目的在于 混淆 ，而非 加密 。许多设计决策有意违背了密码学最佳实践，因此混淆方法很可能无法抵抗密码分析。切勿 依赖此混淆来保障数据的机密性！！！ 当前版本将网络部分分离为独立的 Manage...

CVE-2026-74724

In the Linux kernel, the following vulnerability has been resolved: ipvs: avoid out-of-bounds write in ipvsnaticmp Sashiko warns that local attacker can modify the packet while it is processed by IPVS. Some places read the IP ihl field multiple times which can cause out-of-bounds access. One such...

EUVD-2015-4478

Malware in sbrugna...

EUVD-2019-14896

Malware in sbrugna...

EUVD-2024-54574

Malicious code in bioql PyPI...

CVE-2024-40458

An issue in Ocuco Innovation Tracking.exe v.2.10.24.51 allows a local attacker to escalate privileges via the modification of TCP packets...

CVE-2024-40458

An issue in Ocuco Innovation Tracking.exe v.2.10.24.51 allows a local attacker to escalate privileges via the modification of TCP packets...

CVE-2024-40458

An issue in Ocuco Innovation Tracking.exe v.2.10.24.51 allows a local attacker to escalate privileges via the modification of TCP packets...

CVE-2024-40458

An issue in Ocuco Innovation Tracking.exe v.2.10.24.51 allows a local attacker to escalate privileges via the modification of TCP packets...

CVE-2024-40458

A security vulnerability exists in Ocuco Innovation Tracking.exe v.2.10.24.51 , a component of the Ocuco Ireland Laboratory Management System. A local attacker can escalate privileges by modifying TCP packets, which stems from improper input validation and improper privilege management (CWE-20, C...

CVE-2024-40458: Improper Input Validation

An issue in Ocuco Innovation Tracking.exe v.2.10.24.51 allows a local attacker to escalate privileges via the modification of TCP packets...

PT-2025-22550 · Ocuco · Ocuco Innovation Tracking.Exe

Name of the Vulnerable Software and Affected Versions: Ocuco Innovation Tracking.exe version 2.10.24.51 Description: The issue allows a local attacker to escalate privileges via the modification of TCP packets. Recommendations: For Ocuco Innovation Tracking.exe version 2.10.24.51, at the moment,...

RADIUS Protocol CVE-2024-3596

...

CVE-2021-43116

An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login...

CVE-2021-46086

xzs-mysql = t3.4.0 is vulnerable to Insecure Permissions. The front end of this open source system is an online examination system. There is an unsafe vulnerability in the functional method of submitting examination papers. An attacker can use burpuite to modify parameters in the packet to destro...

CVE-2021-46086: Incorrect Default Permissions

xzs-mysql = t3.4.0 is vulnerable to Insecure Permissions. The front end of this open source system is an online examination system. There is an unsafe vulnerability in the functional method of submitting examination papers. An attacker can use burpuite to modify parameters in the packet to destro...

WEB IPCAMERA Logic Flaw Vulnerability in Shenzhen Baoriming Technology Co.

Ltd. is a high-tech camera manufacturer integrating R&D, manufacturing, sales and service, providing face recognition, vivo detection and other high-quality products based on Hesi intelligent hardware for users all over the world. Shenzhen Baoriming Technology Co., Ltd WEB IPCAMERA There is a log...