Network_Assessment

Network Assessment With Wireshark or TCPdump, you can determine whether there is harmful activity on your network traffic that you have recorded on the network you monitor. This Python script analyzes network traffic in a given .pcap file and attempts to detect the following suspicious network...

H1R0GH057

Fork of https://github.com/H1R0GH057/Anonymous Note: The following commands are provided strictly for educational purposes only. It is essential to use this information responsibly, ethically, and in compliance with the law. Unauthorized use of any form of cyber-attack tools or scripts is against...

slowloris

slowloris.py - Simple slowloris in Python What is Slowloris? Slowloris is basically an HTTP Denial of Service attack that affects threaded servers. It works like this: 1. We start making lots of HTTP requests. 2. We send headers periodically every 15 seconds to keep the connections open. 3. We...

slowloris

slowloris.py - 简单的 Python slowloris 什么是 Slowloris？ Slowloris 基本上是一种影响多线程服务器的 HTTP 拒绝服务攻击。它的工作原理如下： 1. 我们开始发起大量 HTTP 请求。 2. 我们定期（每约 15 秒）发送头部信息，以保持连接处于打开状态。 3. 除非服务器主动关闭，否则我们从不关闭连接。如果服务器关闭了一个连接，我们就创建一个新连接并继续做同样的事情。 这会耗尽服务器的线程池，导致服务器无法响应其他用户。 引用 如果你觉得这个作品有用，请按以下方式引用它 root@kitploit:...

topera

Topera project page You can see more extensive reference of Topera at our web page at github: Topera project page What's Topera? Topera is a new security tools for IPv6, with the particularity that their attacks can't be detected by Snort. Snort is the most known IDS/IPS and is widely used in man...

CVE-2026-88290

GeoVision GV-LPC2211 V1.14 (260903) is affected by an unauthenticated resource-exhaustion vulnerability in its VLSVR service. Remote clients can declare unbounded VLSVR frame lengths and indefinitely delay blocking receives, leading to exhaustion of memory, connection, and worker resources . The ...

CVE-2026-88290 GV-LPC2011/LPC2211 - Unauthenticated VLSVR Slowloris and Memory Resource Exhaustion

GeoVision GV-LPC2211 V1.14 260903 allows unauthenticated clients to declare unbounded VLSVR frame lengths and indefinitely delay blocking receives, allowing remote exhaustion of memory, connection, and worker resources...

siem-threat-detection-lab

🛡️ SIEM + Threat Detection Lab An end-to-end blue-team lab: a Wazuh 4.7.5 SIEM detecting 7 simulated attacks — from port scanning and SSH brute force to a real CVE exploit Slowloris DoS — with every event logged, alerted, and mapped to MITRE ATT &CK in real time. Built from scratch on two virtual...

nmap-scan-results

Nmap 扫描：发现 200 多个漏洞 严重： CVE-2023-38408 9.8, CVE-2024-38476 9.8, Slowloris DoS 完整报告...

IBM Engineering Requirements Management DOORS 9.6.1.1 <= 9.6.1.13 / 9.7.2.1 < 9.7.2.11 Multiple Vulnerabilities (7279145)

The version of IBM Engineering Requirements Management DOORS formerly IBM Rational DOORS installed on the remote host is 9.6.1.1 prior or equal to 9.6.1.13 or 9.7.2.1 prior or equal to 9.7.2.11. It is, therefore, affected by multiple vulnerabilities as referenced in the 7279145 advisory. - IBM...

Important: Red Hat Security Advisory: mod_http2 security update

An update for modhttp2 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

CVE-2024-25039

IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 do not limit the length of a connection which could allow for a Slowloris HTTP denial of service attack to take place. This can cause the web server to become unresponsive...

EUVD-2024-55705

IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 do not limit the length of a connection which could allow for a Slowloris HTTP denial of service attack to take place. This can cause the web server to become unresponsive...

CVE-2024-25039 IBM Engineering Requirements Management DOORS and DOORS Web Access is affected by multiple vulnerabilities

IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 do not limit the length of a connection which could allow for a Slowloris HTTP denial of service attack to take place. This can cause the web server to become unresponsive...

CVE-2024-25039

IBM Engineering Requirements Management DOORS and DOORS Web Access versions 9.7.2.1–9.7.2.11 and 9.6.1.1–9.6.1.13 do not limit the length of a connection, enabling a Slowloris HTTP denial-of-service attack that can render the web server unresponsive. The CVE details this as a network-access vulne...

PT-2026-66553

Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Management DOORS and DOORS Web Access versions 9.7.2.1 through 9.7.2.11 IBM Engineering Requirements Management DOORS and DOORS Web Access versions 9.6.1.1 through 9.6.1.13 Description Failure to limit connection...

GHSA-JVXP-QMX7-GJPX Smithy-RS: Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service

Summary Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy interface definitions, powering the AWS SDK for Rust and custom service implementations. An issue exists where, under certain circumstances, allocation of resources without limits...

Smithy-RS: Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service

Summary Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy interface definitions, powering the AWS SDK for Rust and custom service implementations. An issue exists where, under certain circumstances, allocation of resources without limits...

CVE-2026-16756 Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service

Missing connection and header-read timeouts and the absence of a concurrent-connection cap in the default serve path of Amazon aws-smithy-http-server might allow remote attackers to cause a denial of service by opening many connections and sending partial requests that are never completed,...

CVE-2026-16756 Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service

Missing connection and header-read timeouts and the absence of a concurrent-connection cap in the default serve path of Amazon aws-smithy-http-server might allow remote attackers to cause a denial of service by opening many connections and sending partial requests that are never completed,...