CVE-2025-63353

CVE-2025-63353 Una vulnerabilidad en la ONU GPON HG6145F1 RP4423 de Fiberhome permite que la contraseña Wi-Fi predeterminada de fábrica del dispositivo clave precompartida WPA/WPA2 pueda predecirse a partir del SSID...

pmkidcracker

PMKID WPA2 破解器 本程序是一个用 Python 编写的工具，用于恢复 WPA2 WiFi 网络的预共享密钥，无需任何去认证，也无需网络上有任何客户端。它针对的是某些接入点在 EAPOL 消息 1 中通告 PMKID 值的弱点。 程序用法 python pmkidcracker.py -s -ap -c -p -w -t 注意： apmac、clientmac、pmkid 必须是十六进制字符串，例如 b8621f50edd9 PMKID 的计算方式 获取 PMKID 的两个主要公式如下： 1. 成对主密钥（PMK）计算： 口令 + 盐值ssid = 4096 次迭代的...

SYNwall

SYNwall 零配置（物联网）防火墙。 SYNwall是一个项目（目前）作为Linux内核模块构建，实现一个透明且无需配置/无需维护的防火墙。 你可能想查看以了解使用示例。 基础 通常，物联网设备缺乏集中控制，硬件配置低，环境条件恶劣，而且……我们没有时间专门维护安全性。因此，我们可能无法修补物联网基础设施，并且很难维护一个类似防火墙的访问控制。 其想法是创建一个去中心化的单向一次性密码（OTP）代码，以允许对设备的网络访问。所有不包含OTP的流量将被丢弃。无需预先了解谁需要访问，我们只需要部署一个预共享密钥（PSK）。由于在网络协议层（TCP和UDP）实现，该保护对于应用程序层完全透...

ike-scan

ike-scan Discover and fingerprint IKE hosts IPsec VPN Servers Table of Contents Building and Installing Overview Usage Implementation Details Host Input and Memory Requirements Rate Limiting Cookie Generation and Remote Host Identification IKE Packet Details Backoff Fingerprinting Program Output...

ike-scan

ike-scan 发现并识别 IKE 主机（IPsec VPN 服务器） 目录 构建与安装 概述 使用说明 实现细节 主机输入与内存需求 速率限制 Cookie 生成与远程主机识别 IKE 数据包细节 后退指纹识别 程序输出 示例 支持的平台 进一步阅读与 RFC 联系方式 构建与安装 ike-scan 使用标准的 GNU autoconf 和 automake 工具，因此安装过程如下： 运行 git clone https://github.com/royhills/ike-scan.git 获取项目源码 运行 cd ike-scan 进入源码目录 运行 autoreconf...

CVE-2025-63353

Predictor de Contraseñas Wi-Fi de FiberHome CVE-2025-63353 Una utilidad de Python diseñada para auditorías de seguridad y demostración de prueba de concepto de la falla en la generación determinista de contraseñas encontrada en los routers FiberHome HG6145F1 RP4423. 📋 Descripción General Este...

CVE-2025-63353

CVE-2025-63353：FiberHome GPON ONT设备中的可预测Wi-Fi密码漏洞 参考文献 基于Hanianis的研究（原始CVE披露地址：CVE-2025-63353） 感谢识别此漏洞的安全研究人员。 法律免责声明 此信息仅用于教育和安全研究目的。用户有责任遵守所有适用的地方法律、州法律和联邦法律。作者对因使用或滥用此信息而产生的任何损害不承担任何责任。 摘要 在FiberHome GPON ONU HG6145F1...

CVE-2020-25867

CVE-2020-25867 : Omisión de la clave de uso compartido de SoPlanning Información Versión vulnerable : 1.46.01 Versión corregida : 1.47 y superiores CVE : CVE-2020-25867 Cronología 26/06/2020 : Este informe de vulnerabilidad fue enviado al proveedor 21/07/2020 : La vulnerabilidad fue corregida...

dc34-vault

Aplicación vault de DC34 !WARNING Cargar tu propio firmware en tu badge borrará la clave de cifrado de luz y hará que tu badge entre en modo desarrollador. AVISO: este repositorio ahora está huérfano y se archivará pronto, ya que se ha fusionado en xous-core. Solo existía en el repositorio de...

cip-security-poc

cip-security-poc — demostrando el principio de la corrección detrás de CVE-2021-22681 no solo su falla Seis scripts ejecutables — tráfico real de protocolo EtherNet/IP Prueba 1, mecánica real de TLS/PKI Pruebas 3–6 — cero software o licencias de Rockwell en toda la cadena. Construido para probar...

tinydtls

CONTENIDO Esta biblioteca contiene funciones y estructuras que pueden ayudar a construir un servidor UDP de un solo hilo con soporte DTLS en C99. Los siguientes componentes están disponibles: dtls Soporte básico para DTLS con modo de clave precompartida. tests El subdirectorio tests contiene...

ReverseSocks5

ReverseSocks5 Reverse SOCKS5 proxy in Golang. Usage Usage of ReverseSocks5.exe: -cert string Certificate file if using TLS on the server -connect string Connect address for socks agent address:port -k Skip TLS certificate verification when using -tls insecure -key string Private key file if using...

zeek-openvpn

zeek::openvpn ESTO ESTÁ OBSOLETO EN FAVOR DE https://github.com/corelight/zeek-spicy-openvpn Un plugin para detectar y analizar OpenVPN en los siguientes modos: UDP con TLS UDP con TLS y TLS Auth TCP con TLS TCP con TLS y TLS Auth Hasta ahora esto no detectará el modo de clave compartida para UDP...

CLEANSTART-2026-EI89098 Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello

Security vulnerability affects the cri-tools package. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello...

CLEANSTART-2026-GK62523 Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello

Security vulnerability affects the cri-tools package. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello...

Amazon Linux 2 : amazon-ssm-agent (ALAS-2026-3963)

The version of amazon-ssm-agent installed on the remote host is prior to 3.3.5226.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3963 advisory. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a...

CLEANSTART-2026-LW45744 Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello

Security vulnerability affects the minio-operator package. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello...

Amazon Linux 2023 : amazon-ssm-agent (ALAS2023-2026-3149)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3149 advisory. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello. CVE-2026-425...

CVE-2026-81321

CM2507 IP cameras store configured wireless network credentials in cleartext within the device filesystem. An attacker who obtains filesystem access through physical access, a debugging interface, or another vulnerability could recover the configured network identifier and pre-shared key...

CVE-2026-81321 CareCam CM2507 Cleartext Storage of Sensitive Information

CM2507 IP cameras store configured wireless network credentials in cleartext within the device filesystem. An attacker who obtains filesystem access through physical access, a debugging interface, or another vulnerability could recover the configured network identifier and pre-shared key...