CVE-2025-71418

PocketMine-MP versions before 5.25.2 fail to limit the explode function in packet parsing, allowing malicious clients to waste server resources. Attackers can send crafted packets with excessive delimiters to consume CPU and memory through sign editing, JWT parsing, and command parsing endpoints...

CVE-2025-71418

PocketMine-MP versions before 5.25.2 are vulnerable to a denial of service caused by an unbounded explode() function during packet parsing. A remote, unauthenticated attacker can send crafted packets containing excessive delimiters to exhaust CPU and memory resources. The affected parsing endpoin...

CVE-2025-71418 PocketMine-MP before 5.25.2 Denial of Service via explode

PocketMine-MP versions before 5.25.2 fail to limit the explode function in packet parsing, allowing malicious clients to waste server resources. Attackers can send crafted packets with excessive delimiters to consume CPU and memory through sign editing, JWT parsing, and command parsing endpoints...

EUVD-2025-210881

PocketMine-MP versions before 5.25.2 fail to limit the explode function in packet parsing, allowing malicious clients to waste server resources. Attackers can send crafted packets with excessive delimiters to consume CPU and memory through sign editing, JWT parsing, and command parsing endpoints...

EUVD-2025-210880

PocketMine-MP before 5.32.1 fails to validate uniqueness of pack UUIDs in ResourcePackClientResponsePacket STATUSSENDPACKS handling, allowing authenticated clients to trigger duplicate pack transmissions. Attackers can send multiple copies of valid pack UUIDs in a single packet to exhaust server...

Freeway

Freeway for Network Pentesting Read the article about Freeway, now on Medium !NOTE User will not be prompted to accept EULA anymore! Therefore, by downloading the software, user automatically agrees to follow every guideline specified in EULA section below. 1. Overview Freeway is a Python...

hcxdumptool

hcxdumptool A tool to capture packets from WLAN devices and to discover potential weak points within own WiFi networks by running layer 2 attacks against the WPA protocol. Designed to run mostly headless on small systems like a Raspberry Pi Zero. hcxnmealog A tool to handle NMEA 0183 sentences fr...

npcap

Npcap Npcap es una biblioteca de captura e inyección de paquetes para Windows del Nmap Project. Es una actualización completa del proyecto sin mantenimiento WinPcap con mayor velocidad, fiabilidad y seguridad. Documentación La documentación completa de Npcap está disponible en la Guía de Npcap en...

aircrack-ng

Aircrack-ng Badges GitHub CI...

airgorah

Airgorah A WiFi security auditing software mainly based on aircrack-ng tools suite Installation | Usage | Credits Airgorah is a WiFi security auditing software that can capture nearby WiFi traffic, discover clients connected to access points, perform deauthentication attacks, capture handshakes,...

zeek-spicy-ospf

zeek-spicy-ospf This is a Spicy based OSPF v2 & v3 packet analyzer for Zeek. You must install Spicy to use this package. Links: Original logic imported from https://github.com/s-wells/spicyparsers/tree/main/ospf, with author's permission. https://datatracker.ietf.org/doc/html/rfc2328...

cyberprobe

Cyberprobe La documentación completa está en https://cybermaggedon.github.io/cyberprobe-docs/ Resumen Cyberprobe es un conjunto de herramientas de inspección de paquetes de red Inspección Profunda de Paquetes para la monitorización en tiempo real de redes. Esto tiene aplicaciones en la...

network-fingerprint

network-fingerprint Capture packet request/response pairs for a port and/or IP to aid in Network protocol based Nuclei Templates creation. Resources Installation Instructions Usage Running network-fingerprint Output Format Usage...

PF_RING

PFRING™ Introducción PFRING™ es un módulo del kernel de Linux y un framework de espacio de usuario que te permite procesar paquetes a altas velocidades mientras te proporciona una API consistente para aplicaciones de procesamiento de paquetes. ¿Quién necesita PFRING™? Básicamente, cualquiera que...

wifitap

wifitap.py --- WiFi injection tool through tun/tap device Cedric Blancher [email protected] http://sid.rstack.org/index.php/Wifitap french http://sid.rstack.org/index.php/WifitapEN english This program is a proof of concept tool allowing WiFi communications using traffic injection. You'll...

OpenFPC

OpenFPC Captura Completa de Paquetes: Código Abierto y en tu propio hardware de bajo costo. OpenFPC es un conjunto de scripts que se combinan para proporcionar una herramienta ligera de grabación y almacenamiento en búfer de tráfico de red de paquetes completos. Su objetivo de diseño es permitir ...

CVE-2021-36798

CVE-2021-36798 CVE-2021-36798 Cobalt Strike 4.3 DoS Usage root@kitploit: python3 CVE-2021-36798.py BeaconURL Cripple Cobalt Strike with just one packet Tested on 4.3, 4.2 References: https://labs.sentinelone.com/hotcobalt-new-cobalt-strike-dos-vulnerability-that-lets-you-halt-operations/...

pgpdump

pgpdump: a PGP packet visualizer Kazu Yamamoto [email protected] August 16, 2010 Overview pgpdump is a PGP packet visualizer which displays the packet format of OpenPGP RFC 4880 and PGP version 2 RFC 1991. Here is an example: root@kitploit: % pgpdump test/sig1 Old: Marker Packettag 103 bytes...

libpcap

LIBPCAP 1.x.y by The Tcpdump Group To report a security issue please send an e-mail to [email protected]. To report bugs and other problems, contribute patches, request a feature, provide generic feedback etc please see the guidelines for contributing. The documentation directory has README...

Wireshark

Wireshark Malware Analysis Description This lab I analyzed a known malicious packet capture on the exploit Log4J. I begun my investigation with the same playbook I use for packet capture analysis, which is to examine the statistics and see how many and how much endpoints are communicating. Notici...