Packet-Sniffer

RootWire A network traffic monitor for GNU/Linux — formerly known as Packet-Sniffer. Frames are captured from one or more network interfaces with a raw socket, timestamped by the kernel itself, decoded layer by layer with the NETProtocols library, and rendered live, written to nanosecond-precisio...

tcpcopy

TCPCopy - A TCP Stream Replay Tool TCPCopy is a TCP stream replay tool for realistic testing of Internet server applications. Getting to Know TCPCopy An Overview of TCPCopy for Beginners A General Overview of TCPCopy Architecture TCPCopy Testing Use Cases TCPCopy Pre-Warming Examples Description...

react2shell-CVE-2025-55182

React2Shell Exploit CVE-2025-55182 Python exploit for Next.js React Server Components RCE vulnerability with HTTP/HTTPS support. 🚀 Quick Start Clone & run git clone https://github.com/BrianLopezM99/react2shell-CVE-2025-55182.git cd react2shell-CVE-2025-55182 python3 exploitreact2shell.py "" 📖 Usa...

CVE-2015-1925.RCE

CVE-2015-1925 The exploit targets Tivoli Fastback Server running on Windows 10 x86, build: 16299 , affecting version 6.1.4 , where an unauthenticated attacker can perform a buffer overflow through a raw socket connection , resulting in remote code execution RCE. This exploit assumes ASLR is not...

CVE-2026-98460

A flaw was found in the Linux kernel's Bluetooth subsystem. This flaw allows a local, unprivileged user to bypass security restrictions and send unauthorized commands directly to the Bluetooth hardware. The vulnerability exists because the Host Controller Interface HCI raw socket improperly filte...

Malicious code in @galicia-toolkit-nestjs/commons (npm)

Source: amazon-inspector eae27acb3901d275439e482d51a1451df67c1a6b2011f35881253a3fa8d2456b The package ships a tiny index.js that requires a bundled ELF at prebuilds/linux-x64/metrics.node inside a swallow-all try/catch on module load. No C/C++ source, binding.gyp, or node-gyp/prebuild tooling is...

Malicious code in @galicia-toolkit-nestjs/paas (npm)

Source: amazon-inspector 5df4f7b59cbe90e6b36ce17f0870cd419345167d9aee683d65a43c65ea5fb213 The package's main entry index.js loads a prebuilt native addon prebuilds/-/metrics.node inside a try/catch on require. The ELF reads CI and cloud credentials from the environment — AWSACCESSKEYID,...

Malicious code in @galicia-toolkit-nestjs-20/paas (npm)

Source: amazon-inspector ffdc9c111498bf0f75d014ef58b811df488c9014addfb1ed64f7ab28cf9c11b1 On require'@galicia-toolkit-nestjs-20/paas', index.js unconditionally loads prebuilds/-/metrics.node at module top level inside a try/catch. The shipped ELF addon reads AWSACCESSKEYID, AWSSECRETACCESSKEY,...

Malicious code in @brick-v2/core (npm)

Source: amazon-inspector 90c1fd9505ce4256620f9cb647e3a57a5af52539aa1e717a3eecb0485dec8c83 The package's main entry index.js loads a prebuilt native binary at prebuilds/-/metrics.node inside a top-level try/catch, executing native code within the Node process as soon as the module is required. The...

Malicious code in @galicia-toolkit-nestjs-20/paas (npm)

@galicia-toolkit-nestjs-20/paas is a dependency confusion package published to npm on 2026-10-09 by the account s4yhii, targeting the internal @galicia-toolkit- / @brick-v2 package namespaces with inflated versions e.g. 999.0.x. Early versions resolve ..dc.oob.s4yhii.com via DNS to beacon the...

MAL-2026-17722 Malicious code in @galicia-toolkit-nestjs/commons (npm)

@galicia-toolkit-nestjs/commons is a dependency confusion package published to npm on 2026-10-09 by the account s4yhii, targeting the internal @galicia-toolkit- / @brick-v2 package namespaces with inflated versions e.g. 999.0.x. Early versions resolve ..dc.oob.s4yhii.com via DNS to beacon the...

MAL-2026-17724 Malicious code in @galicia-toolkit-nestjs/swagger (npm)

@galicia-toolkit-nestjs/swagger is a dependency confusion package published to npm on 2026-10-09 by the account s4yhii, targeting the internal @galicia-toolkit- / @brick-v2 package namespaces with inflated versions e.g. 999.0.x. Early versions resolve ..dc.oob.s4yhii.com via DNS to beacon the...

MAL-2026-17721 Malicious code in @galicia-toolkit-nestjs/archetype (npm)

@galicia-toolkit-nestjs/archetype is a dependency confusion package published to npm on 2026-10-09 by the account s4yhii, targeting the internal @galicia-toolkit- / @brick-v2 package namespaces with inflated versions e.g. 999.0.x. Early versions resolve ..dc.oob.s4yhii.com via DNS to beacon the...

Packet-Sniffer v6.0.0

RootWire A network traffic monitor for GNU/Linux — formerly known as Packet-Sniffer. Frames are captured from one or more network interfaces with a raw socket, timestamped by the kernel itself, decoded layer by layer with the NETProtocols library, and rendered live, written to nanosecond-precisio...

Exploit for Improper Access Control in Proftpd

cve-2015-3306-lab Reproducible...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053435)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053435 advisory. In the Linux kernel, the following vulnerability has been resolved: inetdiag: Initialize pad field in struct inetdiagreqv2 KMSAN reported uninit-value access in...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098725)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098725 advisory. In the Linux kernel, the following vulnerability has been resolved: inet: RAW sockets using IPPROTORAW MUST drop incoming ICMP Yizhou Zhao reported that simply havi...

Packet-Sniffer v4.0.0

Packet Sniffer A network traffic monitor for GNU/Linux. Frames are captured from a network interface with a raw socket, decoded layer by layer with the NETProtocols library, and rendered on screen as they arrive: root@kitploit: Frame 4 at 15:42:07 wlan0, 74 bytes + Ethernet 3c:7c:3f:1a:be:22 -...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100570)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100570 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: raw: reject IPHDRINCL packets with ihl ihl 4; err = -EINVAL; if iphlen length goto errorfre...

Hulios v2.0.0-rc.4

Hulios Hardened Universal Linux Invisibility and Onion System Hulios is an eBPF-powered, transparent Tor VPN gateway for Linux. It secures outbound network traffic by redirecting TCP sockets and DNS queries through an embedded Arti Tor client instance and a localized Hickory-based DNS resolver. B...