pfsense

pfSense Overview The pfSense project is a free network firewall distribution, based on the FreeBSD operating system with a custom kernel and including third party free software packages for additional functionality. pfSense software, with the help of the package system, is able to provide the sam...

dmz-security-monitoring-hardening

DMZ Security Monitoring and Hardening CY376: Network Monitoring, Security and Auditing — End-of-Semester Project Blue Team | University of Mines and Technology, Tarkwa Author: Kennedy Kumi Holomah Index number: FCM.41.018.148.23 Student ID: 9013004623 Overview This project builds, secures, and...

dod-blue-team-network-lab

DoD Blue Team Network Security & Hardening Lab Executive Summary High fidelity defensive security lab simulating a DoD aligned enterprise network. This project demonstrates structured network segmentation, system hardening, centralized telemetry ingestion, detection engineering, adversary...

pfsense-api-acme-key-dump

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-api-acme-key-dump pfsense-api-acme-key-dump Class: Privilege leftover Reach: Remote pfSense Plus Nexus Multi-instance Management OpenAPI toolkit b4acd7ca - Netgate GET /services/acme GetACMEConfig returns...

pfsense-api-fleet-jwt

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-api-fleet-jwt pfsense-api-fleet-jwt Class: IDOR Reach: Remote pfSense Plus MIM API Netgate pin b4acd7ca - github.com/Netgate/pfsense-api One POST /login Bearer is reused for every enrolled deviceid. Official...

pfsense-ldap-name-collision

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-ldap-name-collision pfsense-ldap-name-collision Class: Privilege leftover Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org getUserEntry$name returns the local row on name match. isAdminUID then...

pfsense-api-enroll-autoadd

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-api-enroll-autoadd pfsense-api-enroll-autoadd Class: Privilege leftover Reach: Remote pfSense Plus MIM API Netgate/pfsense-api b4acd7ca - Netgate example-add-devices.py is the documented way to register the...

pfsense-vlan-parent-ioctl

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-vlan-parent-ioctl pfsense-vlan-parent-ioctl Class: ioctl leftover Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org interfacesvlanedit.php builds $portlist for FormSelect only. Save checks...

pfsense-ovpn-connect-eval

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-ovpn-connect-eval pfsense-ovpn-connect-eval Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org openvpn.connectasync.sh eval "/sbin/pfctl -a '$anchorname' ..." with...

CVE-2014-4688-pfsense

CVE-2014-4688 – pfSense Command Injection Modified Exploit-DB proof-of-concept for CVE-2014-4688 pfSense statusrrdgraphimg.php command injection Overview This repository contains a modified version of the original Exploit-DB proof-of-concept for CVE-2014-4688 , affecting pfSense versions ≤ 2.1.3...

pfsense-api-acb-userkey

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-api-acb-userkey pfsense-api-acb-userkey Class: IDOR Reach: Remote pfSense Plus MIM API Netgate/pfsense-api b4acd7ca - Netgate GET /services/acb and GET /services/acb/bkp take userkey as an unconstrained query...

Vuln_Remediation_MegaQuagga

VulnRemediationMegaQuagga Remediation report for MegaQuagga Publishing validating the mitigation of CVE-2019-9978 through progressive defensive layering. Documents reverse proxy insertion, ModSecurity WAF deployment, Graylog SIEM integration, and SSL/TLS enforcement using multi-stage Wireshark PC...

CVE-2019-12949

CVE-2019-12949 From Cross Site Scripting Vulnerability to Remote Code Execution in pfSense 2.4.4-p2 and 2.4.4-p3 Information Description: In pfSense 2.4.4-p2 and 2.4.4-p3, if it is possible to trich the authenticated administrator into clicking on a button on a phishing page, an attacker can uplo...

pfsense-separator-color-xss

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-separator-color-xss pfsense-separator-color-xss Class: XSS Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org displayseparator concatenates $separator'color' into class="..." with no encode...

Red-Team-GOAD-Lab-Proxmox

Red-Team-GOAD-Lab-Proxmox Infrastructure diagram Build in order: pfSense VLANs and firewall policy. Operator and Redirector VMs. GOAD lab setup in Proxmox. Verification, snapshots and troubleshooting. Command syntax for Packer, Terraform and GOAD should be checked against your freshly cloned GOAD...

CVE-2024-46538

Thanks tophysicszq, who discovered this vulnerability. CVE-2024-46538 ★ CVE-2024-46538 PfSense Stored XSS lead to Arbitrary Code Execution PoC ★ Description CVE-2024-46538 : PfSense Stored XSS Vulnerability description: A cross-site scripting XSS vulnerability in pfsense v2.5.2 allows attackers t...

CVE-2024-46538

This post is a research article published by EQSTLab. Thanks tophysicszq, who discovered this vulnerability. CVE-2024-46538 ★ CVE-2024-46538 PfSense Stored XSS lead to Arbitrary Code Execution PoC ★ https://github.com/user-attachments/assets/f41d0945-b7f4-4f88-bac5-265904256aae Description...

CVE-2023-27100

CVE-2023-27100 - pfSense Anti-brute force protection bypass Problem Description The authentication system attempts to be informative and print extra information along with IP addresses to completely identify where a user logs in from when they login using the GUI. This includes the authentication...

pfsense-voucher-expire-sqli

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-voucher-expire-sqli pfsense-voucher-expire-sqli Class: SQLi Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org voucher.inc captiveportalreaddb"WHERE username = '$voucher'" then first-row sessioni...

pfsense-security-research

Authenticated Arbitrary File Read in pfSense 2.8.0 via Diagnostics Web Interface CVE ID: CVE-2025-53392 Date: 2025-06-27 Author: Seth Kraft Vendor Homepage: https://www.netgate.com/ Vendor Changelog: https://docs.netgate.com/pfsense/en/latest/releases/ Software Link:...