Network_Assessment

网络评估 通过 Wireshark 或 TCPdump，您可以判断在您监控的网络上录制的网络流量中是否存在有害活动。 此 Python 脚本分析给定 .pcap 文件中的网络流量，并尝试检测以下可疑网络活动和攻击： 1. DNS 隧道 2. SSH 隧道 3. TCP 会话劫持 4. SMB 攻击 5. SMTP 或 DNS 攻击 6. IPv6 分片攻击 7. TCP RST 攻击 8. SYN 泛洪攻击 9. UDP 泛洪攻击 10. Slowloris 攻击 该脚本还尝试检测包含可疑关键字（例如 "password"、"login"、"admin"...

WarChild

War Child Warchild 是一套拒绝服务测试套件，用于分析你的网站面对不同种类拒绝服务攻击时的强度，这些攻击主要由不法分子组织，旨在对你的网站造成损害。 Alt text 安装 如需安装所需模块，只需在终端中运行以下命令 : pip install -r requirements.txt 使用 python warchild.py 概述 该拒绝服务套件包含以下功能： 1. CloudBust :- Cloudbust（又名 AETHON）是一个 Cloudflare 解析器，用于检查受 Cloudflare 保护的网站是否存在错误的 DNS 配置。 它主要使用...

Dosinator

DoSinator DoSinator es una potente herramienta de prueba de Denegación de Servicio DoS desarrollada en Python. Diseñada para profesionales de seguridad e investigadores, esta herramienta les permite simular varios ataques DoS, proporcionando un entorno realista para evaluar la resistencia de rede...

overload

Overload 一款基于 Python 的网络压力测试工具，提供第 2 层、第 4 层和第 7 层攻击方法，用于授权的安全测试。 !WARNING 该项目已归档，不再积极维护。源代码仍可用，但不会计划新增功能、修复错误或更新。 该项目已不再反映其开发背后的当前目标和兴趣，因此未来开发已中止。 功能特性 第 7 层攻击：HTTP、HTTP 代理、Slowloris 和 Slowloris 代理。 第 4 层 SYN 泛洪攻击，支持 POSIX 系统。 第 2 层 ARP 欺骗和断开攻击。 跨平台支持 Windows、Linux 和 Termux。 自动获取用于代理方法的公共代理。...

sockstress

sockstress Implementación de Sockstress CVE-2008-4609 usando Go Instalación go get github.com/marcelki/sockstress Uso Usage: sockstress options... Options: -p The destination port to attack. -i The network interface to use. -d The delay between SYN packets You can choose your unit of time e.g. 1n...

CVE-2026-20154

A vulnerability in the system rate-limiting process for syslog message 419002 of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause high CPU utilization on an affected device...

EUVD-2026-81128

A vulnerability in the system rate-limiting process for syslog message 419002 of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause high CPU utilization on an affected device...

CVE-2026-20154 Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software Logging Denial of Service

A vulnerability in the system rate-limiting process for syslog message 419002 of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause high CPU utilization on an affected device...

PT-2026-93955

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Adaptive Security Appliance ASA Software affected versions not specified Cisco Secure Firewall Threat Defense FTD Software affected versions not specified Description An issue in the system rate-limiting process for syslo...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

A hash collision flaw was discovered in the IPv6 connection lookup table within the Linux kernel’s IPv6 functionality. This flaw occurs when a user carries out a new type of SYN flood attack. A user located within the local network or with a high-bandwidth connection can cause the CPU usage of th...

EUVD-2026-67342

WatchGuard Dimension is susceptible to a denial-of-service condition when an attacker sends a high volume of TCP SYN packets to the log listening service...

CVE-2026-13108

WatchGuard Dimension is susceptible to a denial-of-service condition when an attacker sends a high volume of TCP SYN packets to the log listening service...

PT-2026-82824

WatchGuard Dimension is susceptible to a denial-of-service condition when an attacker sends a high volume of TCP SYN packets to the log listening service...

Siemens SIMATIC CN 4100 安全漏洞

The Siemens SIMATIC CN 4100 is a communication node developed by the German company Siemens. Versions of the Siemens SIMATIC CN 4100 prior to V5.0 contained security vulnerabilities. These vulnerabilities stemmed from the system’s susceptibility to resource exhaustion when processing large amount...

CVE-2026-20082

A vulnerability in the handling of the embryonic connection limits in Cisco Secure Firewall Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause incoming TCP SYN packets to be dropped incorrectly. This vulnerability is due to improper handling of new,...

CVE-2026-20082: Missing Release of Resource after Effective Lifetime

A vulnerability in the handling of the embryonic connection limits in Cisco Secure Firewall Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause incoming TCP SYN packets to be dropped incorrectly. This vulnerability is due to improper handling of new,...

PT-2026-23011

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Adaptive Security Appliance ASA Software affected versions not specified Description A flaw exists in how the software manages initial TCP connections under a TCP SYN flood attack. This could allow a remote, unauthenticat...

Cisco Secure Firewall Adaptive Security Appliance 安全漏洞

Cisco Secure Firewall Adaptive Security Appliance is an enterprise-level firewall software developed by the American company Cisco. There is a security vulnerability in Cisco Secure Firewall Adaptive Security Appliance. This vulnerability stems from improper handling of new incoming TCP connectio...

SDN-SYN PoW: Intent-Aware Adaptive SDN Defense with PoW against Multi-Domain SYN Floods

The stability of Internet services is persistently challenged by the escalating scale of volumetric TCP SYN floods, as conventional defenses like SYN Cookies fail by exacerbating bandwidth depletion under modern attacks. This paper introduces SDN-SYN PoW, a novel defense architecture that...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001974)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001974 advisory. The tcprcvstateprocess function in net/ipv4/tcpinput.c in the Linux kernel before 3.2.24 allows remote attackers to cause a denial of service kernel resource...