udpx

Быстрый и легковесный сканер UDP на одном пакете, написанный на Go, который поддерживает обнаружение более 45 сервисов с возможностью добавления собственных. Он прост в использовании и портативен, может работать на Linux, Mac OS и Windows. В отличие от интернет-сканеров, таких как zgrab2 и zmap,...

zmap

ZMap: Сканер Интернета ZMap — это быстрый не сохраняющий состояние однопакетный сетевой сканер, предназначенный для обследования всей сети Интернет. На обычном настольном компьютере с гигабитным Ethernet-соединением ZMap способен просканировать всё общедоступное пространство IPv4-адресов на одном...

knocker

Knocker — это самоуправляемый сервис, предоставляющий HTTP-шлюз для одноразовой авторизации SPA по принципу «тук-тук» для вашей домашней лаборатории. Имеет веб-, CLI + GNOME и Android-клиенты. Он может использоваться как аутентификация для вашего обратного прокси, например Caddy, или даже на уров...

fwknop

fwknop - Single Packet Authorization Introduction fwknop implements an authorization scheme known as Single Packet Authorization SPA for strong service concealment. SPA requires only a single packet which is encrypted, non-replayable, and authenticated via an HMAC in order to communicate desired...

fwknop

fwknop - Авторизация одиночным пакетом SPA Введение fwknop реализует схему авторизации, известную как Single Packet Authorization SPA авторизация одиночным пакетом, для надежного сокрытия сервисов. SPA требует только один пакет, который шифруется, невоспроизводим и аутентифицируется с помощью HMA...

CVE-2021-36798

CVE-2021-36798 CVE-2021-36798 Cobalt Strike 4.3 dos Использование python3 CVE-2021-36798.py BeaconURL Чтобы вывести из строя Cobalt Strike, достаточно одного пакета Протестировано: 4.3, 4.2 Ссылки:...

cve-2023-44487

CVE-2023-44487 HTTP/2 Быстрый сброс В этом репозитории есть несколько примеров, которые не были полностью протестированы для анализа воздействия, но я просто хотел продемонстрировать концепцию этой атаки starting many streams and immediately sending RSTSTREAM frame to avoid reaching...

ipmi

I wrote some software to explore IPMI; here are some of results. I thought I'd do the usual detect, get data, and audit sort of cycle. Each of these turned out to be fairly interesting problem on its own, at least to me. BTW/FYI - I released a new tool to explore IPMI -...

CVE-2023-44487-dos

CVE-2023-44487 HTTP/2 Быстрый сброс В этом репозитории есть несколько примеров, которые не были полностью протестированы для анализа воздействия, но я просто хотел реализовать концепцию этой атаки запуск множества потоков и немедленная отправка кадра RSTSTREAM для избежания достижения...

phantom-grid

Phantom Grid - 엔터프라이즈 제로 트러스트 네트워크 액세스 ZTNA Phantom Grid는 차세대 제로 트러스트 네트워크 액세스ZTNA 및 능동 방어 시스템입니다. 커널 수준eBPF과 애플리케이션 수준mTLS 모두에서 동작하여 Linux 서버를 강력하고 기만적인 공격 표면으로 변환합니다. 현대 기업을 위해 설계되었으며, 권한이 부여된 인원에게는 높은 접근성을 유지하면서 네트워크 스캐너로부터 인프라의 가시성을 크게 줄이도록 설계되었습니다. 핵심 기능 eBPF 네트워크 클로킹 및 SPA 레이어 4 제로 트러스트 중요한...

CVE-2026-33453 Apache Camel: CoAP URI Query Parameter to Exchange Header Injection in camel-coap Allows Single-Packet Pre-Auth Remote Code Execution

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Apache Camel Camel-Coap component. Apache Camel's camel-coap component is vulnerable to Camel message header injection, leading to remote code execution when routes forward CoAP requests to...

CVE-2026-33453

The Apache Camel camel-coap component is vulnerable to header injection because it maps CoAP request URI query parameters directly into Camel Exchange In message headers without applying a HeaderFilterStrategy . Specifically, CamelCoapResource.handleRequest() iterates over OptionSet.getUriQuery()...

CVE-2026-26233: Uncontrolled Resource Consumption

Mattermost versions 11.4.x = 11.4.0, 11.3.x = 11.3.1, 11.2.x = 11.2.3, 10.11.x = 10.11.11 fail to rate limit login requests which allows unauthenticated remote attackers to cause denial of service server crash and restart via HTTP/2 single packet attack with 100+ parallel login requests...

SUSE-SU-2025:01894-1 Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005597 fixes several issues. The following security issues were fixed: - CVE-2024-58013: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmtremoveadvmonitorsync bsc1239096. - CVE-2024-57996: netsched: schsfq: do not allow 1 packet limit bsc1239077...

Mars: 0 Click account takeover via timed requests to ███████forgot-password (single-packet attack)

A vulnerability was present in the forgot password functionality of the platform. By sending carefully timed requests, an attacker was able to obtain the password reset token for any account using only the victim's email address...

CVE-2017-12090

An exploitable denial of service vulnerability exists in the processing of snmp-set commands of the Allen Bradley Micrologix 1400 Series B FRN 21.2 and below. A specially crafted snmp-set request, when sent without associated firmware flashing snmp-set commands, can cause a device power cycle...

Midea's M-Smart smart socket has design logic flaws

M-Smart Smart Socket is a smart home appliance developed by Midea Group. Midea's M-Smart Smart Socket is susceptible to man-in-the-middle attacks due to insecure protocols for transmitting data and lack of validation of what is transmitted on the client and server side. The lack of effective...

Single Packet Authorization: fwknop

fwknop implements an authorization scheme known as Single Packet Authorization SPA for strong service concealment. SPA requires only a single packet which is encrypted, non-replayable, and authenticated via an HMAC in order to communicate desired access to a service that is hidden behind a firewa...

Oracle Internet Directory 10.1.4 - Remote Preauth DoS Exploit

No description provided by source. !/usr/bin/python Oracle Internet Directory 10.1.4 preauthentication Denial Of Service NOTES: Under 32 bits platforms it crashes immediately. Under 64 bits it may take even hours. Sometimes you need 2 shoots to crash OID completely. The server commonly tolerates...

[fwknop] Single Packet Authorization and Port Knocking

fwknop stands for the "FireWall KNock OPerator", and implements an authorization scheme called Single Packet Authorization SPA. This method of authorization is based around a default-drop packet filter fwknop supports iptables on Linux, ipfw on FreeBSD and Mac OS X, and PF on OpenBSD and libpcap...