CyberDefense-Lab

Cyber Security Lab: Blue Team Infrastructure & Network Defense This laboratory project demonstrates the creation of an integrated "Blue Team" infrastructure, focusing on centralized network security, Intrusion Detection/Prevention Systems IDS/IPS, and Security Information and Event Management SIE...

CVE-2018-11510

A couple exploits for CVE-2018-11510 by Kyle Lovett @SquirrelBuddha and myself Matthew Fulton/@haqur. Leverages an unauthneticated command injection to get a root shell back. The metasploit module has a separate payload included in the repo. Will see if I can get them included via a pull request...

pfsense-security-research

Authenticated Arbitrary File Read in pfSense 2.8.0 via Diagnostics Web Interface CVE ID: CVE-2025-53392 Date: 2025-06-27 Author: Seth Kraft Vendor Homepage: https://www.netgate.com/ Vendor Changelog:...

CVE-2023-42326

pfSense 2.7.0 Exploit de Inyección de Comandos CVE-2023-42326 Este script de Python es una Prueba de Concepto PoC para la vulnerabilidad de inyección de comandos CVE-2023-42326 en pfSense 2.7.0. La vulnerabilidad permite a atacantes autenticados inyectar y ejecutar comandos arbitrarios a través d...

pfsense

pfSense Overview The pfSense project is a free network firewall distribution, based on the FreeBSD operating system with a custom kernel and including third party free software packages for additional functionality. pfSense software, with the help of the package system, is able to provide the sam...

CVE-2023-27100

CVE-2023-27100 - Omisión de protección anti-fuerza bruta en pfSense Descripción del problema El sistema de autenticación intenta ser informativo e imprime información adicional junto con las direcciones IP para identificar completamente desde dónde inicia sesión un usuario cuando lo hace a través...

SenselessViolence

SenselessViolence CVE-2022-31814 pfSense pfBlockerNG = 2.1.426 Kit de explotación. ¿Qué? Este es un kit de explotación para la inyección remota de comandos en los plugins pfSense pfBlockerNG = 2.1.426 descubierta por IHTeam. Escribí esto para jugar con algunos de los principios de diseño...

CVE-2014-4688

CVE-2014-4688 root@kitploit: python3 pfsense.py --rhost 10.10.10.60 --lhost 10.10.14.2 --lport 9999 --username rohit --password pfsense...

CVE-2024-46538

Esta publicación es un artículo de investigación publicado por EQSTLab. Gracias aphysicszq, quien descubrió esta vulnerabilidad. CVE-2024-46538 ★ CVE-2024-46538 XSS almacenado en PfSense conduce a PoC de Ejecución de Código Arbitrario ★...

CVE-2022-31814

CVE-2022-31814 root@kitploit: Reworked and optimized exploit script of pfBlockerNG 2.1.426 vulnerability Exploit Title: pfBlockerNG 2.1.426 - Remote Code Execution RCE Shodan Results:...

pfSense pfBlockerNG - OS Command Injection

pfSense pfBlockerNG through 2.1.427 allows remote attackers to execute arbitrary OS commands as root via the HTTP Host header. id: CVE-2022-40624 info: name: pfSense pfBlockerNG - OS Command Injection author: ritikchaddha severity: critical description: | pfSense pfBlockerNG through 2.1.427 allow...

Security_incident_report

01. Infrastructure Configuration The infrastructure for this project is not managed with IaC e.g., Terraform code; instead, it was built by installing pfSense and Wazuh and then changing settings directly from the admin GUI. So instead of "code", this document records the network diagram,...

CVE-2025-69690-CVE-2025-69691

🔐 CVE-2025-69690 & CVE-2025-69691 Authenticated Remote Code Execution in Netgate pfSense Community Edition 📋 Summary...

CVE-2022-31814

Download CVE-2022-31814 Este script explota una vulnerabilidad en pfSense para subir un shell, ejecutar un comando y luego eliminar el shell. Requisitos Python 3.x Librería requests Instalación 1. Clone el repositorio o descargue el script. 2. Instale las librerías Python requeridas: root@kitploi...

pfSense pfBlockerNG <=2.1..4_26 - OS Command Injection

pfSense pfBlockerNG through 2.1.426 is susceptible to OS command injection via root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected. id: CVE-2022-31814 info: name: pfSense pfBlockerNG =2.1..427 to mitigate this vulnerability. reference: -...

dod-blue-team-network-lab

DoD Blue Team Network Security & Hardening Lab Executive Summary High fidelity defensive security lab simulating a DoD aligned enterprise network. This project demonstrates structured network segmentation, system hardening, centralized telemetry ingestion, detection engineering, adversary...

CVE-2014-4688-pfsense

CVE-2014-4688 – Inyección de Comandos en pfSense Prueba de concepto modificada de Exploit-DB para CVE-2014-4688 inyección de comandos en pfSense statusrrdgraphimg.php Resumen Este repositorio contiene una versión modificada de la prueba de concepto original de Exploit-DB para CVE-2014-4688 , que...

pfSense - Arbitrary File Write

diagroutes.php in pfSense 2.5.2 allows sed data injection. Authenticated users are intended to be able to view data about the routes set in the firewall. The data is retrieved by executing the netstat utility, and then its output is parsed via the sed utility. Although the common protection...

Penetration-Testing-Walkthrough-Hacksudo-Thor

HackSudo Thor Recorrido Completo de Pruebas de Penetración Objetivo: HackSudo Thor de VulnHub Objetivo: Obtener acceso root y leer /root/proof.txt Entorno: Laboratorio aislado de VirtualBox segmentado por un firewall pfSense Tabla de Contenidos Resumen Topología de Red Resumen de la Cadena de...

CVE-2024-46538

Thanks tophysicszq, who discovered this vulnerability. CVE-2024-46538 ★ CVE-2024-46538 PfSense Stored XSS lead to Arbitrary Code Execution PoC ★ Description CVE-2024-46538 : PfSense Stored XSS Vulnerability description: A cross-site scripting XSS vulnerability in pfsense v2.5.2 allows attackers t...