pmkidcracker

PMKID WPA2 破解器 本程序是一个用 Python 编写的工具，用于恢复 WPA2 WiFi 网络的预共享密钥，无需任何去认证，也无需网络上有任何客户端。它针对的是某些接入点在 EAPOL 消息 1 中通告 PMKID 值的弱点。 程序用法 root@kitploit: python pmkidcracker.py -s -ap -c -p -w -t 注意： apmac、clientmac、pmkid 必须是十六进制字符串，例如 b8621f50edd9 PMKID 的计算方式 获取 PMKID 的两个主要公式如下： 1. 成对主密钥（PMK）计算： 口令 + 盐值ssid =...

SYNwall

SYNwall Firewall de configuración cero IoT. SYNwall es un proyecto construido por ahora como un Módulo del Kernel de Linux, para implementar un firewall transparente y sin configuración/sin mantenimiento. Puede que quieras echar un vistazo al para un ejemplo de uso. Conceptos básicos Normalmente,...

ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...

ike-scan

ike-scan 发现并识别 IKE 主机（IPsec VPN 服务器） 目录 构建与安装 概述 使用说明 实现细节 主机输入与内存需求 速率限制 Cookie 生成与远程主机识别 IKE 数据包细节 后退指纹识别 程序输出 示例 支持的平台 进一步阅读与 RFC 联系方式 构建与安装 ike-scan 使用标准的 GNU autoconf 和 automake 工具，因此安装过程如下： 运行 git clone https://github.com/royhills/ike-scan.git 获取项目源码 运行 cd ike-scan 进入源码目录 运行 autoreconf...

CVE-2025-63353

CVE-2025-63353 Una vulnerabilidad en la ONU GPON HG6145F1 RP4423 de Fiberhome permite que la contraseña Wi-Fi predeterminada de fábrica del dispositivo clave precompartida WPA/WPA2 pueda predecirse a partir del SSID...

CVE-2026-81321

CM2507 IP cameras store configured wireless network credentials in cleartext within the device filesystem. An attacker who obtains filesystem access through physical access, a debugging interface, or another vulnerability could recover the configured network identifier and pre-shared key...

EUVD-2026-83053

CM2507 IP cameras store configured wireless network credentials in cleartext within the device filesystem. An attacker who obtains filesystem access through physical access, a debugging interface, or another vulnerability could recover the configured network identifier and pre-shared key...

CVE-2026-81321

CareCam CM2507 IP cameras store configured wireless network credentials (network identifier and pre-shared key) in cleartext within the device filesystem. An attacker who obtains filesystem access—through physical access, a debugging interface, or another vulnerability—can recover these credentia...

tinydtls

CONTENTS This library contains functions and structures that can help constructing a single-threaded UDP server with DTLS support in C99. The following components are available: dtls Basic support for DTLS with pre-shared key mode. tests The subdirectory tests contains test programs that show how...

ReverseSocks5

ReverseSocks5 Reverse SOCKS5 proxy in Golang. Usage root@kitploit: Usage of ReverseSocks5.exe: -cert string Certificate file if using TLS on the server -connect string Connect address for socks agent address:port -k Skip TLS certificate verification when using -tls insecure -key string Private ke...

CVE-2025-63353

Predictor de Contraseñas Wi-Fi de FiberHome CVE-2025-63353 Una utilidad de Python diseñada para auditorías de seguridad y demostración de prueba de concepto de la falla en la generación determinista de contraseñas encontrada en los routers FiberHome HG6145F1 RP4423. 📋 Descripción General Este...

CVE-2025-63353

CVE-2025-63353：FiberHome GPON ONT设备中的可预测Wi-Fi密码漏洞 参考文献 基于Hanianis的研究（原始CVE披露地址：CVE-2025-63353） 感谢识别此漏洞的安全研究人员。 法律免责声明 此信息仅用于教育和安全研究目的。用户有责任遵守所有适用的地方法律、州法律和联邦法律。作者对因使用或滥用此信息而产生的任何损害不承担任何责任。 摘要 在FiberHome GPON ONU HG6145F1...

CVE-2026-66781 Submariner-operator: pprof debug endpoint enabled by default on 0.0.0.0:8082 without authentication

A flaw was found in the Submariner operator. The Submariner Custom Resource CR, used for configuring network connectivity, stores the IPsec pre-shared key PSK in an unencrypted format. This key, which is critical for securing communication between Kubernetes clusters, can be accessed by...

PT-2026-77225

Name of the Vulnerable Software and Affected Versions Submariner operator affected versions not specified Description A flaw exists in the Submariner operator where the Submariner Custom Resource CR, used for network connectivity configuration, stores the IPsec pre-shared key PSK in an unencrypte...

CVE-2026-74243

A flaw was found in Red Hat Quay. When the SECURITYSCANNERV4PSK pre-shared key is not set, a remote unauthenticated attacker can send POST requests to the security scanner notification endpoint. This allows the attacker to flood the notification queue and inject path traversal characters into Cla...

Remote Denial Of Service (Dos)

github.com/pion/dtls is vulnerable to Remote Denial of Service Dos. The vulnerability is due to improper parsing of a crafted ECDHEPSK ServerKeyExchange message, which allows a remote attacker to trigger a panic...

openSUSE 16 Security Update : libkrun (openSUSE-SU-2026:21464-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21464-1 advisory. - CVE-2025-24898: openssl: use-after-free in ssl::selectnextproto due to improper lifetime handling bsc1270429. - CVE-2026-41676: openssl: short...

CVE-2026-67596 CSL 1010 M2M 3G WiFi Module 2.2.1.4 Weak Encryption via Router.cfg

CSL 1010 M2M 3G WiFi Module firmware through 2.2.1.4 contains a weak encryption vulnerability that allows unauthenticated attackers to recover all stored secrets in plaintext by reversing a single-byte XOR cipher that uses a static key to obfuscate the configuration backup file. Attackers can...

EUVD-2026-51157

CSL 1010 M2M 3G WiFi Module firmware through 2.2.1.4 contains a weak encryption vulnerability that allows unauthenticated attackers to recover all stored secrets in plaintext by reversing a single-byte XOR cipher with a static key applied to the configuration backup file. Attackers can trivially...

OPENSUSE-SU-2026:21464-1 Security update for libkrun

This update for libkrun fixes the following issues: - CVE-2025-24898: openssl: use-after-free in ssl::selectnextproto due to improper lifetime handling bsc1270429. - CVE-2026-41676: openssl: short buffer overflow via Deriver:derive and PkeyCtxRef:derive when using OpenSSL 1.1.1 bsc1270198. -...