427 matches found
pyshark
pyshark tshark の Python ラッパー。Wireshark のディセクタを使用して Python でパケット解析を可能にします。 拡張ドキュメント: http://kiminewt.github.io/pyshark コントリビューター募集中 - 様々な理由により、現在パッケージのメンテナンスと機能強化に時間を割くのが難しい状況です。プルリクエストはすべて確認します。興味があり、適任と思われる方は、プロジェクトに参加していただけると嬉しいです。[email protected] までご連絡ください。 Python...
laf
LoRaWAN 監査フレームワーク - アルファ版 IoTデプロイメントは成長を続けており、その大きな成長の一部は、世界中の何百もの都市（スマートシティ）や産業、家庭に展開された数百万のLPWAN（低消費電力広域ネットワーク）センサーで構成されています。最も使用されているLPWAN技術の1つがLoRaであり、LoRaWANはそのネットワーク標準（MAC層）です。LoRaWANは暗号化を組み込んだ安全なプロトコルですが、実装上の問題や脆弱性が現在のほとんどのデプロイメントのセキュリティに影響を与えています。...
pyshark-legacy
pyshark このリポジトリは、Python2.7+ で動作する pyshark のレガシーバージョン用です。バージョン 0.3.8 以降はバグ修正のみが行われます。 Python 3.5+ のみをサポートする新しいバージョンについては、メインリポジトリ をご利用ください。 tshark の Python ラッパー。Wireshark のディセクタを使用した Python でのパケット解析を可能にします。 拡張ドキュメント: http://kiminewt.github.io/pyshark Python...
PoC-CVE-2018-15473
PoC-CVE-2018-15473 OpenSSH 7.7及之前的版本存在用户枚举漏洞，原因是在完全解析包含请求的数据包之前，不会对无效认证用户延迟退出，涉及auth2-gss.c、auth2-hostbased.c和auth2-pubkey.c。 CVE: CVE-2018-15473 来自 https://www.openwall.com/lists/oss-security/2018/08/15/5 的分析 在未修补当前版本的情况下，远程攻击者可以轻松测试目标OpenSSH服务器上某个用户是否存在（用户名枚举）： root@kitploit: 87 static int 88...
Krb5RoastParser
Krb5RoastParser 📑 Table of Contents ❓ What is Krb5RoastParser? ⭐ Features ⚙️ Installation ▶️ Execution 📈 Post Execution 📜 License ❓ What is Krb5RoastParser? Krb5RoastParser is a tool designed to parse Kerberos authentication packets AS-REQ, AS-REP and TGS-REP from .pcap files and generate...
isip
isip Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks. Video https://asciinema.org/a/11128 Setup root@kitploit: git clone https://github.com/halitalptekin/isip.git cd isip pip install -r requirements.txt Usage Packet...
CVE-2026-18282
The Sony XAV-9500ES infotainment system is vulnerable to a heap-based buffer overflow in the AVRCP_Br_Response_Parser component. The parser fails to validate the length of attacker-supplied AVRCP packet data before copying it to a heap buffer, enabling remote code execution after an attacker pair...
EUVD-2026-63175
Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
EUVD-2026-63166
X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-76921
CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
DEBIAN-CVE-2026-76887
Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-76924
Wireshark versions 4.4.0–4.4.18 and 4.6.0–4.6.7 contain an out-of-bounds read in the Kerberos protocol dissector that crashes the application when processing malformed Kerberos traffic, causing denial of service (CVSS 5.5 MEDIUM). No exploitation observed in the wild. Update to a patched version;...
CVE-2026-74464
A flaw was found in the Open vSwitch OVS component of the Linux kernel. This vulnerability occurs when a packet becomes unparseable during a flow key update operation. This can lead to a memory leak, potentially allowing a remote attacker to cause a denial of service by exhausting system resource...
CVE-2026-74474
In the Linux kernel, the following vulnerability has been resolved: vxlan: use pskbnetworkmaypull for transmit path header pulls In vxlanxmit, arpreduce, and vxlanmdbentryskbget, pskbmaypull was being called to verify the availability of network layer headers ARP, IPv6/ND, IP/IPv6 MDB keys...
CVE-2026-74558 xsk: reclaim invalid Tx descriptors in ZC batch path
In the Linux kernel, the following vulnerability has been resolved: xsk: reclaim invalid Tx descriptors in ZC batch path The zero-copy Tx batch parser stops when it encounters an invalid descriptor. If this happens after one or more continuation descriptors, the Tx consumer can be advanced past...
CVE-2026-74464 net: openvswitch: fix skb leak on flow key update failure during ct
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix skb leak on flow key update failure during ct ovsctexecute always steals or frees the skb on failure while ovsflowkeyupdate does not. So, if it fails and we return right away, the skb ends up leaked. Fix tha...
CVE-2026-72351 gue: validate REMCSUM private option length
In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE private flags can indicate that remote checksum offload metadata is present. The private flags field itself is accounted for by guehdrflagslen, but guehdrprivflagslen currently...
CVE-2026-72296 net: ife: require ETH_HLEN to be pullable in ife_decode()
In the Linux kernel, the following vulnerability has been resolved: net: ife: require ETHHLEN to be pullable in ifedecode ife decode may return after making only the outer IFE header and metadata pullable. The caller then passes the decapsulated packet to ethtypetrans, which expects the inner...
CVE-2026-72021
Summary: The CVE-2026-72021 issue affects the Linux kernel’s IPVS SCTP state lookup. The kernel incorrectly read the SCTP chunk header using a wrong offset for IPv6 when extension headers were present, causing misclassification of handshake steps (e.g., INIT1 vs ESTABLISHED) and incorrect managem...
