183 matches found
zeek-spicy-openvpn
zeek-spicy-openvpn 这是一个用于检测 OpenVPN 流量的协议分析器。 你必须安装 Spicy 才能使用此包。 介绍此协议分析器开发过程的博客和网络研讨会： https://zeek.org/2021/03/16/a-zeek-openvpn-protocol-analyzer/ https://zeek.org/2021/04/08/a-zeek-openvpn-protocol-analyzer-in-spicy/ https://event.webinarjam.com/replay/16/405xvaqawfzfqn...
termshark
Termshark A terminal user-interface for tshark, inspired by Wireshark. V2.4 is out now with packet search and profiles for colors and columns! See theChangeLog. If you're debugging on a remote machine with a large pcap and no desire to scp it back to your desktop, termshark can help! Features Rea...
zkar
ZKar ZKar は Go で実装された Java シリアライゼーションプロトコル解析ツールです。このツールは現在 開発中 であり、完全な API ドキュメントやコントリビューションガイドはまだ用意されていません。 ZKar が提供する機能: Java シリアライゼーションペイロードのパーサーとビューワー（純粋な Go 実装、CGO や JDK は不要） Java シリアライゼーションプロトコルを Go 構造体に変換 Java シリアライゼーションデータを操作できる Go ライブラリ WIP: ysoserial の Go 実装 WIP: Java...
zeek-spicy-ipsec
IPSec 这是一个基于 Spicy 的 Zeek 协议分析器，用于检测 IPSec VPN。 您必须安装 Spicy 才能使用此包。 详细介绍该分析器开发过程的博客： https://zeek.org/2021/04/20/zeeks-ipsec-protocol-analyzer/ RFC： https://tools.ietf.org/html/rfc2406 ESP https://tools.ietf.org/html/rfc4302 AH https://tools.ietf.org/html/rfc2408 IKE v1...
zeek-spicy-wireguard
zeek-spicy-wireguard Este paquete proporciona un analizador de protocolo Wireguard basado en Spicy para Zeek. Debe instalar Spicy para usar este paquete. Esta es una implementación sencilla que sigue https://www.wireguard.com/protocol/ Wireguard Registros de Wireguard separator \x09 setseparator ...
Protocol-Analyzer
Protocol Analyzer NetProtoFuzz ネットワークプロトコルのためのプロトコル指向ファズテストフレームワーク。 Codacy Badge フレームワークとスキャナーは活発に開発中です。 バージョン 0.0.12. フレームワークの主な目的 宣言された説明に従った独自ネットワークプロトコルの動作の検証; 独自ネットワークプロトコルの実装における未宣言機能と未定義動作の検出; セキュリティ監査と前回のスキャン期間からの変更の検索。 現在の目標 フレームワークのニーズに応じたネットワーク相互作用の基盤の開発; 監視下の全ソケット向け Epoll...
CryptoLyzer
CryptoLyzer は、高速で柔軟かつ包括的なサーバー暗号化プロトコル TLS、 SSL、 SSH、 IKE、 DNSSEC および関連設定 HTTP ヘッダー、 DNS レコード のアナライザーであり、フィンガープリント JA3、 HASSH ジェネレーターです。 API と CLI インターフェースを備えています。 TLS/SSL 暗号スイートを監査する必要がある場合は CryptoLyzer を使用してください — testssl.sh や sslyze とは異なり、OpenSSL に依存しない独自のプロトコル実装を使用して、GOST や耐量子アルゴリズムを含む 400...
CryptoLyzer
CryptoLyzer is a fast, flexible, and comprehensive server cryptographic protocol TLS, SSL, SSH, IKE, DNSSEC and related setting HTTP headers, DNS records analyzer and fingerprint JA3, HASSH generator with API and CLI interfaces. Use CryptoLyzer when you need to audit TLS/SSL cipher suites — unlik...
zeek-mercury-npf
适用于 Zeek 的 Mercury NPF 该 Zeek 插件实现了 Mercury 项目中定义的网络协议指纹识别（NPF）格式。 概述 该插件检测以下协议并为其生成 NPF： TCP TLS 和 DTLS QUIC HTTP SSH OpenVPN（需要安装 https://github.com/corelight/zeek-spicy-openvpn） STUN（需要安装 https://github.com/corelight/zeek-spicy-stun） 安装 该插件以 Zeek 包的形式分发。 要使用 Zeek 包管理器 zkg 安装当前版本，只需使用 zkg insta...
The vulnerability of the IEEE 802.11 protocol analyzer in Wireshark allows a hacker to cause a service failure.
The vulnerability of the IEEE 802.11 protocol analyzer in Wireshark’s computer network traffic analyzer is related to buffer overflow in the stack. Exploiting this vulnerability can allow a hacker to cause a service failure...
The vulnerability of the Z39.50 protocol analyzer of Wireshark allows a hacker to cause a service failure.
The vulnerability of the Z39.50 protocol analyzer of Wireshark relates to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of the IEEE 802.11 protocol analyzer in Wireshark allows a hacker to cause a service failure.
The vulnerability of the IEEE 802.11 protocol analyzer in Wireshark’s computer network traffic analyzer is related to buffer overflow in the stack. Exploiting this vulnerability can allow attackers to cause service interruptions...
[SECURITY] [DSA 6471-1] wireshark security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6471-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 27, 2026 https://www.debian.org/security/faq -...
Debian dsa-6471 : libwireshark-data - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6471 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6471-1 [email protected] https://www.debian.org/securit...
The vulnerability of the CMS protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, allows a hacker to cause a service failure.
The vulnerability of the CMS protocol analyzer, which is also used for analyzing computer network traffic with Wireshark, relates to pointer manipulation. Exploiting this vulnerability can allow attackers to cause service interruptions...
The vulnerability of the SSH protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, allows a hacker to cause a service failure.
The vulnerability of the SSH protocol analyzer and the network traffic analyzer in Wireshark is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a attacker to cause a service failure...
The vulnerability of the CMS protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, allows a hacker to cause a service failure.
The vulnerability of the CMS protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
zeek -- multiple vulnerabilities
Tim Wojtulewicz of Corelight reports: HIGH: SMB: Chains of AndX messages can crash Zeek HIGH: DNP3: Memory exhaustion via file control g70v1 fields HIGH: SIP: Memory exhaustion from long request/response paths HIGH: DHCP: Memory exhaustion from retained options after analyzer violation HIGH: SMTP...
The vulnerability of the UDS protocol analyzer, which is used by Wireshark for analyzing computer network traffic, allows a hacker to cause a service failure.
The vulnerability of the UDS protocol analyzer, a traffic analyzer for computer networks developed by Wireshark, relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the HTTP-protocol analyzer in Wireshark allows a hacker to induce a service failure.
The vulnerability of the HTTP protocol analyzer used by Wireshark, a tool for analyzing computer network traffic, relates to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...