410 matches found
raider
Raider logo Quick links Website. OWASP page. Documentation. Installation. FAQ. Getting started. Architecture. Discussions. Issues. Twitter. Fediverse. What is Raider OWASP Raider was developed with the goal to improve web authentication testing. By now it has evolved and can be used for all kinds...
pulsar
PULSAR Protocol Learning, Simulation and Stateful Fuzzer Pulsar is a network fuzzer with automatic protocol learning and simulation capabilites. The tool allows to model a protocol through machine learning techniques, such as clustering, and Markov models. These models can be used to simulate...
sparkplugFuzzer
Sparkplug B MQTT Security Fuzzer A comprehensive security assessment tool for testing Sparkplug B MQTT protocol implementations. The fuzzer systematically tests all protocol fields across all 9 message types, discovers live devices on the network, and produces detailed logs for analysis...
SCTT-2026-33-0004-FortiCloud-SSO-Identity-Singularity
SCTT-2026-33-0004: FortiCloud SSO Identity Singularity This is the full implementation of the SCTT-0004 vector. 📡 Technical Analysis While Fortinet's January 27, 2026 mitigation for CVE-2026-24858 focuses on blocking specific accounts like [email protected], it fails to address the Temporal...
CURL-CVE-2026-92389 TFTP direction confusion
libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening server responses for both reads and writes interchangeably. A malicious TFTP server can respond to a download request in a way that forces the client into transmit mode,...
TFTP direction confusion
libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening server responses for both reads and writes interchangeably. A malicious TFTP server can respond to a download request in a way that forces the client into transmit mode,...
CVE-2026-92389
libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening server responses for both reads and writes interchangeably. A malicious TFTP server can respond to a download request in a way that forces the client into transmit mode,...
CVE-2026-20127-Exploit-Extension
Executive Summary The CVE-2026-20127 Defensive Companion is a premier, enterprise-grade Browser Extension engineered for proactive threat intelligence and defensive analysis. This tool encapsulates authoritative technical research concerning the authentication bypass vulnerability in the Cisco...
Libssh-server-CVE-2018-10933
libssh Authentication Bypass VulnerabilityCVE-2018-10933 中文版本Chinese version libssh is a multiplatform C library implementing the SSHv2 protocol on client and server side. A logic vulnerability was found in libssh's server-side state machine. The attacker can send the MSGUSERAUTHSUCCESS message...
impostor
Impostor SMB1 server for intercepting NTLMv2 Hashes, written in C. The goal of the project is to implement an SMB1 server as a state machine that correctly accepts and responds to client requests in order to deceive it, leading it to complete an NTLM authentication and thus reveal its own NTLMv2...
dtls-fuzzer
dtls-fuzzer is a Java tool which performs protocol state fuzzing of DTLS servers. More concretely, it supports the following functionality: 1. given an alphabet, it can automatically generate a model of a local DTLS server implementation; 2. given a test sequence of inputs and an alphabet, it can...
CVE-2018-10933-POC
CVE-2018-10933-POC libSSH bypass A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4 It is simple POC Here in code replace the and accordingly...
CVE-2018-10933
POC of CVE-2018-10933 A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access. Usage : python3 libssh.py -s SERVERADD -u USERNAME -c...
CVE-2018-10933
CVE-2018-10933 A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access. SOME DETAILS The issue comes from the way libssh doesn't maintain sta...
netzob
Netzob : Ingeniería Inversa, Modelado y Fuzzing de Protocolos .. image:: https://img.shields.io/badge/Python-3-brightgreen.svg :target: https://github.com/netzob/netzob :alt: Python3 Vea la documentación completa aquí: https://netzob.github.io/netzob/ Acerca de Netzob Netzob es una herramienta de...
MGASA-2026-0469 Updated srt package fixes security vulnerabilities
Encryption State Machine Downgrade. CVE-2026-55868 KMREQ/KMRSP Stack-Based Buffer Overflow. CVE-2026-55869...
Updated srt package fixes security vulnerabilities
Encryption State Machine Downgrade. CVE-2026-55868 KMREQ/KMRSP Stack-Based Buffer Overflow. CVE-2026-55869...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: net: phy: It is now possible to allow the MDIO bus’s PM operations to initiate/stop the state machine for the phylink-controlled PHY. There are two types of DSA drivers: 1. Those that call dsaswitchsuspend and dsaswitchresume...
Finite State Machine-Based Traffic Orchestration for Multi-Engine Analysis Platforms
Modern application-security platforms route live traffic from a single proxy into several independent analysis engines -- behavioral anomaly detection, authentication analysis, resource discovery, access-control inspection, among others. Each engine's appetite for traffic changes on its own...
