Detection-and-Mitigation-for-CVE-2022-2639

Detección y Mitigación para CVE-2022-2639 Descripción El módulo del kernel Open vSwitch permite un control flexible desde el espacio de usuario sobre el procesamiento de paquetes a nivel de flujo en dispositivos de red seleccionados. Puede utilizarse para implementar un conmutador Ethernet simple...

PacketSpy

PacketSpy Description PacketSpy is a powerful network packet sniffing tool designed to capture and analyze network traffic. It provides a comprehensive set of features for inspecting HTTP requests and responses, viewing raw payload data, and gathering information about network devices. With...

morpheus

Morpheus - automated ettercap TCP/IP Hijacking tool Version release: v2.2 - STABLE Author: pedro ubuntu r00t-3xp10it Codename: oneiroi phobetor The mithologic dream greek god Distros Supported: Linux Ubuntu, Kali, Debian, BackBox, Parrot OS Suspicious-Shell-Activity© SSA RedTeam develop @2018 LEG...

libpo32

libpo32 A small C99 library for Teenage Engineering PO-32 acoustic data transfers and drum synthesis. libpo32 reimplements the PO-32 Tonic transfer stack and a compatible drum voice model. It is not a full PO-32 firmware or UI emulator; it covers the packet format, acoustic modem, frame decoder,...

arp-dns-attacks

ARP-DNS attacks Using PCAP library in Linux for Windows, it would be Winpcap 1. The two attacks demonstrated here can be used to poison a victim's ARP cache with which we can sniff/manipulate the packets transmitted between the victim and the local gateway. Please note that these attacks are mean...

ipmi

I wrote some software to explore IPMI; here are some of results. I thought I'd do the usual detect, get data, and audit sort of cycle. Each of these turned out to be fairly interesting problem on its own, at least to me. BTW/FYI - I released a new tool to explore IPMI -...

PFQ

PFQ v6.2 Introduction PFQ is a functional framework designed for the Linux operating system built for efficient packets capture/transmission 10G, 40G and beyond, in-kernel functional processing, kernel-bypass and packets steering across groups of sockets/end-points. It is highly optimized for...

zmap

ZMap：互联网扫描器 ZMap 是一个快速的无状态单包网络扫描器，专为互联网范围内的网络普查而设计。在配备千兆以太网连接的典型台式计算机上，ZMap 能够在45分钟内扫描整个公共 IPv4 地址空间的单个端口。例如，向端口25上的每个 IPv4 地址发送 TCP SYN 数据包以查找潜在的 SMTP 服务器。借助10GigE连接以及 netmap 或 PFRING，ZMap 可以在5分钟内扫描整个 IPv4 地址空间。 ZMap 可在 GNU/Linux、Mac OS 和 BSD 上运行。ZMap 已完全实现了用于 TCP SYN 扫描、ICMP、DNS 查询、UPnP、BACNET...

pgpdump

pgpdump: un visualizador de paquetes PGP Kazu Yamamoto [email protected] 16 de agosto de 2010 Resumen pgpdump es un visualizador de paquetes PGP que muestra el formato de paquetes de OpenPGP RFC 4880 y PGP versión 2 RFC 1991. Aquí hay un ejemplo: % pgpdump test/sig1 Old: Marker Packettag 103...

MITM_Intercept

MITMIntercept A little bit less hackish way to intercept and modify non-HTTP protocols through Burp and others with SSL and TLS interception support. This tool is for researchers and applicative penetration testers that perform thick clients security assesments. An improved version of the fantast...

ipfire-2-25-auth-rce

Ipfire 2-25 core update 156 rce autenticado el sistema ejecuta un comando al instalar cualquier paquete el sistema obtiene 7zip directamente desde el html y comprueba el directorio tmp versión 2.25 - core update 156 ipfire permite ejecutar comandos arbitrarios del sistema operativo como nobody...

Krb5RoastParser

Krb5RoastParser 📑 目录 ❓ 什么是Krb5RoastParser？ ⭐ 功能特点 ⚙️ 安装 ▶️ 使用 📈 执行后 📜 许可证 ❓ 什么是 Krb5RoastParser ？ Krb5RoastParser 是一个旨在从 .pcap 文件中解析 Kerberos 认证数据包（AS-REQ、AS-REP 和 TGS-REP）并生成用于安全测试的密码破解兼容哈希的工具。通过利用 tshark，Krb5RoastParser 从 Kerberos 数据包中提取必要细节，提供适用于 Hashcat 等工具的哈希格式。 ⭐ 功能特点 从 .pcap 文件中解析...

wireshark

Información general Wireshark es un analizador de tráfico de red, o "sniffer", para Linux, macOS, BSD y otros sistemas operativos Unix y similares a Unix, y para Windows. Utiliza Qt, una biblioteca de interfaz gráfica de usuario, y libpcap y npcap como bibliotecas de captura y filtrado de paquete...

FuzzAP

FuzzAP 一个用于混淆无线网络的Python脚本 ''' Warning: I am not a programmer by trade, nor would I consider myself one The common SSID list was pulled from https://wigle.net/gps/gps/Stat The OUI vendor list was parsed from http://standards.ieee.org/develop/regauth/oui/oui.txt for well known vendors netgear,...

CVE-2024-38063-poc

Real POC published https://github.com/ynwarcs/CVE-2024-38063 and I have updated in my code as well, This can cause crash into your system so use VM or just learning thing, you can get RCE by making changes in the code. Usage iface Most probably this is enabled bydefault. Check the...

packetStrider

Packet Strider v0.21 Summary packetStrider for SSH is a packet forensics tool that aims to provide valuable insight into the nature of SSH traffic, shining a light into the corners of SSH network traffic where golden nuggets of information previously lay in the dark. The problem that packet strid...

fwknop

fwknop - 单包授权 Single Packet Authorization 简介 fwknop 实现了一种称为单包授权 SPA 的授权方案，用于强大的服务隐藏。SPA 只要求一个数据包，该数据包经过加密、不可重放，并通过 HMAC 进行身份验证，以便向隐藏在默认丢弃过滤规则的防火墙后面的服务传达所需的访问权限。SPA 的主要应用是使用防火墙丢弃所有尝试连接到 SSH 等服务的行为，从而使利用漏洞（包括 0-day 和未打补丁的代码）更加困难。由于没有开放端口，任何通过 SPA 隐藏的服务自然无法被 Nmap 扫描到。fwknop 项目支持四种不同的防火墙：Linux 上的...

arkime

Arkime Arkime 是一个大规模的开源网络分析与数据包捕获系统。 Arkime 增强了您现有的安全基础设施，以标准的 PCAP 格式存储和索引网络流量，提供快速、索引化的访问。它提供了一个直观且简单的 Web 界面，用于 PCAP 的浏览、搜索和导出。Arkime 公开了 API，允许直接下载和使用 PCAP 数据以及 JSON 格式的会话数据。Arkime 以标准的 PCAP 格式存储和导出所有数据包，使您也可以在分析工作流程中使用您喜爱的 PCAP 摄取工具，如 Wireshark。 Arkime 设计为可跨多系统部署，并能扩展到处理数十 Gbps 的流量。PCAP...

npcap

Npcap Npcap 是由 Nmap 项目 开发的 Windows 数据包捕获与注入库。它是对已停止维护的 WinPcap 项目的全面更新，具有更高的速度、可靠性和安全性。 文档 有关 Npcap 的完整文档可在 npcap.com 上的 Npcap 指南 中找到。您将在那里找到关于安装、报告错误、使用 Npcap 进行软件开发 以及 Npcap 内部机制 的信息。 下载 最新的安装程序、软件开发工具包 SDK、源代码和调试符号可从 https://npcap.com/download 下载。 错误报告 请通过以下网址报告有关 Npcap 的任何错误或问题：GitHub 上的 Npca...

DNSWatch

DNSWatch - DNS Traffic Sniffer and Analyzer DNSWatch is a powerful packet sniffing tool designed to monitor and analyze DNS Domain Name System traffic on a network. This script provides a comprehensive set of features to help users understand and manage DNS activity efficiently. Whether you're a...