opnsense-lockout-factory-ip

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · opnsense-lockout-factory-ip opnsense-lockout-factory-ip Class: Privilege leftover Reach: Remote OPNsense core 26.7.6 a842fe48 - opnsense.org Unauth WebGUI login still drives lockouthandler from a factory LOGAUTH line...

pfsense-cp-ha-pfctl

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-cp-ha-pfctl pfsense-cp-ha-pfctl Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org captiveportalloadpfctl runs mwexec"/usr/bin/printf "$rules" | /sbin/pfctl -a $anchor/$host -f-" with...

pfsense-ovpn-connect-eval

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-ovpn-connect-eval pfsense-ovpn-connect-eval Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org openvpn.connectasync.sh eval "/sbin/pfctl -a '$anchorname' ..." with...

CVE-2026-111229 Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via Captive Portal HA Sync

pfSense CE 2.7.0 through 2.9.0 contains a command injection vulnerability in servicescaptiveportalhasync.php that allows users with only the Captive Portal HA privilege to execute commands as root. Attackers can set backwardsyncip to a malicious XMLRPC server returning connectedusers with shell...

CVE-2026-111229

pfSense CE 2.7.0 through 2.9.0 contains a command injection vulnerability in servicescaptiveportalhasync.php that allows users with only the Captive Portal HA privilege to execute commands as root. Attackers can set backwardsyncip to a malicious XMLRPC server returning connectedusers with shell...

pfsense-ovpn-connect-eval

abraxaslabs.tech · github.com/abraxas ·&...

pfsense-cp-ha-pfctl

abraxaslabs.tech · github.com/abraxas ·&...

CVE-2026-54085: Improper Neutralization of Argument Delimiters in a Command

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.2.0 through 4.14.6, multiple active response scripts pass attacker-influenced alert fields to privileged system commands without validating their format, allowing...

Firewall and Privatizing Proxy: macOS Fortress

macOS-Fortress is a Firewall, Blackhole, and Privatizing Proxy for Trackers, Attackers, Malware, Adware, and Spammers. It is Kernel-level, OS-level, and client-level security for macOS. Built to address a steady stream of attacks visible on snort and server logs, as well as blocks ads, malicious...

FreeBSD/x86 - //sbin/pfctl -F all Shellcode (47 bytes)

/ Title: FreeBSD 8.0-RELEASE/x86 '//sbin/pfctl -F all Shellcode 47 Bytes' Type: Shellcode Author: antrhacks Platform: FreeBSD 8.0-RELEASE / / ASSembly 31 c0 xor %eax,%eax 50 push %eax 68 2d 46 61 6c push $0x6c61462d 89 e1 mov %esp,%ecx 50 push %eax 68 66 63 74 6c push $0x6c746366 68 69 6e 2f 70...

freebsd/x86 /sbin/pfctl -F all Shellcode 47 Bytes

Exploit for freebsd/x86 platform in category shellcode ============================================================== FreeBSD 8.0-RELEASE/x86 //sbin/pfctl -F all Shellcode 47 Bytes ============================================================== / Title: FreeBSD 8.0-RELEASE/x86 '//sbin/pfctl -F all...

FreeBSD/x86 - /sbin/pfctl -F all Shellcode (47 bytes)

FreeBSD/x86 - /sbin/pfctl -F all Shellcode 47 bytes. Shellcode exploit for FreeBSDx86 platform / Title: FreeBSD 8.0-RELEASE/x86 '//sbin/pfctl -F all Shellcode 47 Bytes' Type: Shellcode Author: antrhacks Platform: FreeBSD 8.0-RELEASE / / ASSembly 31 c0 xor %eax,%eax 50 push %eax 68 2d 46 61 6c pus...

freebsd/x86 setreuid, execve(pfctl -d) 56 bytes

No description provided by source. CoDed bY suN8Hclf DaRk-CodeRs Group production, kid FreeBSD x86 setreuid0, 0 + execvepfctl -d 56 bytes The simples way to disable the FreeBSD's packet filter. We do not flush all rules pfctl -F all but only turn the firewall off. Assembly code:...

freebsd/x86 setreuid, execve(pfctl -d) 56 bytes

Exploit for freebsd/x86 platform in category shellcode =============================================== freebsd/x86 setreuid, execvepfctl -d 56 bytes =============================================== CoDed bY suN8Hclf DaRk-CodeRs Group production, kid FreeBSD x86 setreuid0, 0 + execvepfctl -d 56 byt...

freebsd/x86 - setreuid, execvepfctl -d 56 bytes

freebsd/x86 setreuid, execvepfctl -d 56 bytes. Shellcode exploit for freebsdx86 platform CoDed bY suN8Hclf DaRk-CodeRs Group production, kid FreeBSD x86 setreuid0, 0 + execvepfctl -d 56 bytes The simples way to disable the FreeBSD's packet filter. We do not flush all rules pfctl -F all but only...

freebsd/x86 setreuid execve(pfctl -d) 56 bytes

No description provided by source. CoDed bY suN8Hclf DaRk-CodeRs Group production, kid FreeBSD x86 setreuid0, 0 + execvepfctl -d 56 bytes The simples way to disable the FreeBSD's packet filter. We do not flush all rules pfctl -F all but only turn the firewall off. Assembly code:...