zeek-spicy-openvpn

zeek-spicy-openvpn これはOpenVPNトラフィックを検出するプロトコルアナライザです。 このパッケージを使用するには、Spicyをインストールする必要があります。 このプロトコルアナライザの開発について詳しく説明しているブログとウェビナー: https://zeek.org/2021/03/16/a-zeek-openvpn-protocol-analyzer/ https://zeek.org/2021/04/08/a-zeek-openvpn-protocol-analyzer-in-spicy/...

termshark

Termshark A terminal user-interface for tshark, inspired by Wireshark. V2.4 is out now with packet search and profiles for colors and columns! See theChangeLog. If you're debugging on a remote machine with a large pcap and no desire to scp it back to your desktop, termshark can help! Features Rea...

zkar

ZKar ZKar는 Go로 구현된 Java 직렬화 프로토콜 분석 도구입니다. 이 도구는 아직 진행 중인 작업 이므로 완전한 API 문서와 기여 가이드가 없습니다. ZKar는 다음을 제공합니다: 순수 Go로 작성된 Java 직렬화 페이로드 파서 및 뷰어, CGO나 JDK가 필요하지 않습니다 Java 직렬화 프로토콜에서 Go 구조체로 Java 직렬화 데이터를 조작할 수 있는 Go 라이브러리 작업 중: ysoserial의 Go 구현 작업 중: Java 클래스 바이트코드 파서, 뷰어 및 조작 작업 중: Go에서의 RMI/LDAP 구현...

zeek-spicy-ipsec

IPSec これは、Spicy に基づいて IPSec VPN を検出する Zeek プロトコルアナライザーです。 このパッケージを使用するには、Spicy をインストールする必要があります。 このアナライザーの開発の詳細を記したブログ: https://zeek.org/2021/04/20/zeeks-ipsec-protocol-analyzer/ RFC: https://tools.ietf.org/html/rfc2406 ESP https://tools.ietf.org/html/rfc4302 AH https://tools.ietf.org/html/rfc240...

zeek-spicy-wireguard

zeek-spicy-wireguard このパッケージは、Zeek 用の Spicy ベースの Wireguard プロトコルアナライザを提供します。 このパッケージを使用するには、Spicy をインストールする必要があります。 これは、https://www.wireguard.com/protocol/ に従った単純明快な実装です。 Wireguard Wireguard ログ separator \x09 setseparator , emptyfield empty unsetfield - path conn open 2021-11-24-18-10-11 fields t...

Protocol-Analyzer

프로토콜 분석기 NetProtoFuzz 네트워크 프로토콜을 위한 프로토콜 지향 퍼즈 테스트 프레임워크. Codacy Badge 프레임워크 및 스캐너는 심층 개발 중입니다. 버전 0.0.12. 프레임워크의 주요 목적 선언된 설명에 따라 독점 네트워크 프로토콜의 작동 검증; 독점 네트워크 프로토콜 구현에서 선언되지 않은 기능 및 정의되지 않은 동작 탐지; 보안 감사 및 마지막 스캔 기간 이후의 변경 사항 검색. 현재 목표 프레임워크의 요구를 위한 네트워크 상호 작용 기반 개발; 관찰 중인 모든 소켓을 위한 Epoll 소켓 상태 풀...

CryptoLyzer

CryptoLyzer 는 빠르고 유연하며 포괄적인 서버 암호화 프로토콜 TLS, SSL, SSH, IKE, DNSSEC 및 관련 설정 HTTP 헤더, DNS 레코드 분석기이자 핑거프린트 JA3, HASSH 생성기로, API와 CLI 인터페이스를 제공합니다. TLS/SSL 암호화 스위트를 감사해야 할 때 CryptoLyzer를 사용하세요 — testssl.sh 및 sslyze와 달리, OpenSSL에 독립적인 자체 프로토콜 구현을 사용하여 GOST 및 포스트 양자 알고리즘을 포함한 400개 이상의 암호화 스위트를 탐지합니다. S...

CryptoLyzer

CryptoLyzer is a fast, flexible, and comprehensive server cryptographic protocol TLS, SSL, SSH, IKE, DNSSEC and related setting HTTP headers, DNS records analyzer and fingerprint JA3, HASSH generator with API and CLI interfaces. Use CryptoLyzer when you need to audit TLS/SSL cipher suites — unlik...

zeek-mercury-npf

Mercury NPF for Zeek This Zeek plugin implements the Network Protocol Fingerprinting NPF format as specified in the Mercury project. Overview The plugin inspects the following protocols and generates the NPF for them: TCP TLS and DTLS QUIC HTTP SSH OpenVPN requires installation of...

The vulnerability of the IEEE 802.11 protocol analyzer in Wireshark allows a hacker to cause a service failure.

The vulnerability of the IEEE 802.11 protocol analyzer in Wireshark’s computer network traffic analyzer is related to buffer overflow in the stack. Exploiting this vulnerability can allow a hacker to cause a service failure...

The vulnerability of the Z39.50 protocol analyzer of Wireshark allows a hacker to cause a service failure.

The vulnerability of the Z39.50 protocol analyzer of Wireshark relates to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the IEEE 802.11 protocol analyzer in Wireshark allows a hacker to cause a service failure.

The vulnerability of the IEEE 802.11 protocol analyzer in Wireshark’s computer network traffic analyzer is related to buffer overflow in the stack. Exploiting this vulnerability can allow attackers to cause service interruptions...

[SECURITY] [DSA 6471-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6471-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 27, 2026 https://www.debian.org/security/faq -...

Debian dsa-6471 : libwireshark-data - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6471 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6471-1 [email protected] https://www.debian.org/securit...

The vulnerability of the CMS protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, allows a hacker to cause a service failure.

The vulnerability of the CMS protocol analyzer, which is also used for analyzing computer network traffic with Wireshark, relates to pointer manipulation. Exploiting this vulnerability can allow attackers to cause service interruptions...

The vulnerability of the SSH protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, allows a hacker to cause a service failure.

The vulnerability of the SSH protocol analyzer and the network traffic analyzer in Wireshark is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a attacker to cause a service failure...

The vulnerability of the CMS protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, allows a hacker to cause a service failure.

The vulnerability of the CMS protocol analyzer, a traffic analysis tool for computer networks developed by Wireshark, relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

zeek -- multiple vulnerabilities

Tim Wojtulewicz of Corelight reports: HIGH: SMB: Chains of AndX messages can crash Zeek HIGH: DNP3: Memory exhaustion via file control g70v1 fields HIGH: SIP: Memory exhaustion from long request/response paths HIGH: DHCP: Memory exhaustion from retained options after analyzer violation HIGH: SMTP...

The vulnerability of the UDS protocol analyzer, which is used by Wireshark for analyzing computer network traffic, allows a hacker to cause a service failure.

The vulnerability of the UDS protocol analyzer, a traffic analyzer for computer networks developed by Wireshark, relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the HTTP-protocol analyzer in Wireshark allows a hacker to induce a service failure.

The vulnerability of the HTTP protocol analyzer used by Wireshark, a tool for analyzing computer network traffic, relates to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...