radmin-vpn-linux

Radmin VPN for Linux Run Radmin VPN on Linux via Wine. Join VPN networks, see peers, play games — all without a Windows VM. I did not build this because it was easier than a VM. I built it because I thought it was easier than a VM. AI-assisted code. Built collaboratively between a human and Claud...

JS-Tap

JS-Tap v3.0.4 This tool is intended to be used on systems you are authorized to attack and for legal and educational purposes. Do not use this tool for illegal purposes, or I will be very angry in your general direction. Changelogs Major changes are documented in the project Announcements:...

rosemary

Rosemary Cross-platform kernel-level pivoting platform over QUIC. No TUN/TAP. No proxychains. No proxy settings. Rosemary transparently intercepts traffic on remote hosts at the kernel level: no proxy settings, no TUN/TAP devices, no proxychains. Agents connect back to the server over QUIC. You...

phantap

PhanTap Phantom Tap PhanTap is an ‘invisible’ network tap aimed at red teams. With limited physical access to a target building, this tap can be installed inline between a network device and the corporate network. PhanTap is silent in the network and does not affect the victim’s traffic, even in...

openocd

Welcome to OpenOCD OpenOCD provides on-chip programming and debugging support with a layered architecture of JTAG interface and TAP support including: XSVF playback to facilitate automated boundary scan and FPGA/CPLD programming; debug target support e.g. ARM, MIPS: single-stepping,...

VPNPivot

VPN Pivot: Sometime we do external penetration testing and when we compromise the remote target we would like to explore the internal network behind and getting such compromise like owning Active directory, accessing shared files, conducting MITM attacks ... etc. There are many techniques around...

CVE-2026-81000

⚡ CVE-2026-81000 - TUNderflow Linux Kernel TUN/TAP Receive Headroom Memory Corruption A Linux kernel memory-corruption vulnerability in the TUN/TAP networking subsystem , caused by insufficient bounds on receive headroom and an integer underflow in the packet allocation path. ⚠️ Disclaimer This...

reposaur

Reposaur Reposaur is the open source compliance tool for development platforms. Audit, verify and report on your data and configurations easily with pre-defined and/or custom policies. Supports GitHub. GitLab, BitBucket and Gitea support soon. ⚠️ before 1.0.0 expect some bugs and API changes ⚠️...

wifitap

wifitap.py --- WiFi injection tool through tun/tap device Cedric Blancher [email protected] http://sid.rstack.org/index.php/Wifitap french http://sid.rstack.org/index.php/WifitapEN english This program is a proof of concept tool allowing WiFi communications using traffic injection. You'll...

Exploit for CVE-2026-99999

CVE-2026-99999 Working PoC — Setup & Usage Guide ⚠️ This...

CVE-2026-111639 bbs-go through 4.4.6 Account Takeover via Google One Tap Login

bbs-go through 4.4.6 contains an authentication bypass vulnerability in the /api/login/googleonetap endpoint that allows remote attackers to log in as other users by submitting Google ID tokens issued to any OAuth client. Attackers operating their own Google OAuth client can capture a victim's...

CVE-2026-111639

The bbs-go application (through version 4.4.6 ) contains an authentication bypass vulnerability in the /api/login/google_one_tap endpoint. The root cause is a failure to verify the aud claim in Google-signed ID tokens, allowing remote attackers to replay tokens issued to any OAuth client. By usin...

CVE-2026-111639 bbs-go through 4.4.6 Account Takeover via Google One Tap Login

bbs-go through 4.4.6 contains an authentication bypass vulnerability in the /api/login/googleonetap endpoint that allows remote attackers to log in as other users by submitting Google ID tokens issued to any OAuth client. Attackers operating their own Google OAuth client can capture a victim's...

PT-2026-116038

bbs-go through 4.4.6 contains an authentication bypass vulnerability in the /api/login/google one tap endpoint that allows remote attackers to log in as other users by submitting Google ID tokens issued to any OAuth client. Attackers operating their own Google OAuth client can capture a victim's...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netfilter: brnetfilter: do not check the confirmed bit in brnflocalin after confirmation. When sending a broadcast packet to a tap device, which is added to a bridge, the brnflocalin function is called to confirm the conntrack. I...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Net: tap: A NULL pointer dereference occurred in devparseheaderprotocol when skb-dev is null. This bug is triggered by the tap driver. When tapgetuser calls virtionethdrtoskb, skb-dev is null since skb-dev is set after the call t...

pipelinewise-tap-snowflake (>=1.1.1, <=2.0.0) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.2)

snowflake-connector-python PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-tap-snowflake =1.1.1, =2.0.0 Source cves: CVE-2026-86597 Source advisory: OSV:PYSEC-2026-4301...

meltanolabs-tap-snowflake (>=0.2.0, <=0.3.0), snowflake-data-exchange-agent (>=0.0.21, <=1.0.1) potentially affected by CVE-2026-86597 via snowflake-connector-python (3.17.4)

snowflake-connector-python PYPI version 3.17.4 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - meltanolabs-tap-snowflake =0.2.0, =0.0.21, =1.0.1 Source cves: CVE-2026-86597 Source advisory:...

pipelinewise-tap-snowflake (2.0.3), pipelinewise-target-snowflake (1.10.1) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.3.7)

snowflake-connector-python PYPI version 2.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-tap-snowflake 2.0.3 - pipelinewise-target-snowflake 1.10.1 - snowmobile =0.2.0b16, =0.2.0b25...

dbt (>=0.15.3rc1, <=0.16.0b1), dbt-snowflake (>=0.15.3rc1, <=0.16.0b1) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.0.4)

snowflake-connector-python PYPI version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt =0.15.3rc1, =0.15.3rc1, =1.0.5, =1.1.0 Source cves: CVE-2026-86597 Source advisory: OSV:PYSEC-2026-4301...