pybatfish

Got questions, feedback, or feature requests? Join our community onSlack! Pybatfish Pybatfish is a Python client for Batfish. What is Batfish? Batfish is a network validation tool that provides correctness guarantees for security, reliability, and compliance by analyzing the configuration of...

Stowaway

Stowaway Stowaway is a multi-hop proxy tool for security researchers and penetration testers. Stowaway lets you proxy external traffic through multiple hops into a target internal network, bypassing access restrictions, building a tree-like node topology, and managing it easily. Thanks for the...

PcapViz

PcapViz PcapViz draws networks as device topologies and as information flows using the packet information in pcap files captured from a network device using tcpcap or other capture software. It filters and optionally displays the captured packets at any one of 3 "layers". These are: device level...

EUVD-2026-69056

An unauthenticated client can query the Security Domain hosts inventory via GET /ca/rest/securityDomain/hosts and receive a structured response enumerating internal PKI/CA hosts and roles security domain topology and participating subsystems, without requiring a principal, client certificate, or...

skydive

Skydive Skydive is an open source real-time network topology and protocols analyzer. It aims to provide a comprehensive way of understanding what is happening in the network infrastructure. Skydive agents collect topology information and flows and forward them to a central agent for further...

pentest-a2p2v-core

README 自动化攻击路径规划与验证（A2P2V）是一款规划与网络攻击工具，能够根据特定攻击者目标，为用户提供一组排序后的攻击序列。该工具旨在简化流程，使非安全专家也能通过尽可能自动化的基本输入，生成清晰、可操作的威胁情报，并产出易于解读的报告。 该系统利用已知网络拓扑和系统漏洞信息，确定所有能够达成攻击者目标的攻击序列，并为所选序列输出所需步骤（以 Metasploit 命令形式）。 系统输入包括： 初始条件 ：对攻击者当前知识与访问权限进行建模 攻击者目标 ：指示状态变化（例如改变 ICS 系统的温度）或远程访问特定目标主机 漏洞信息 ：Nessus 或 Nmap...

pentest-a2p2v-core

README Automated Attack Path Planning and Validation A2P2V is a planning and cyber-attack tool that provides the capability for users to determine a set of ranked attack sequences given a specific attacker goal. The aim of the tool is to simplify process so that non-security experts can generate...

FML-Network

FLNET2023: Realistic Network Intrusion Detection Dataset for Federated Learning Paper: FLNET2023: Realistic Network Intrusion Detection Dataset for Federated Learning Dataset: FLNET2023 Introduction FLNET2023 is a state-of-the-art benchmark dataset for intrusion detection systems, specifically fo...

AgentCyTE

CORE TopoGen Generate reproducible CORE network topologies from scenario XML files using a rich Web GUI or a command-line interface. Table of contents Highlights Screenshots Quick start Prerequisites Install dependencies Launch the Web UI Run the CLI Full Preview workflow Feature deep dive Planni...

safenet-soho-security-framework

SafeNet SOHO Security Framework SafeNet is a production-grade Zero-Trust Network Access ZTNA framework specifically engineered for Small Office/Home Office SOHO environments. By orchestrating a secure, identity-aware VPN overlay utilizing the WireGuard protocol, SafeNet provides granular control...

network-security-snort

Snort IDS/IPS Deployment Lab A full-cycle deployment of Snort 3 as both an Intrusion Detection System passive monitoring and an Intrusion Prevention System active blocking via iptables, validated against four attack vectors across a three-machine virtual network on Kali Linux. The lab proves the...

Security_incident_report

01. Configurazione dell'infrastruttura L'infrastruttura di questo progetto non è gestita tramite codice IaC come Terraform: è stata configurata installando pfSense e Wazuh e modificando direttamente le impostazioni dalla schermata di amministrazione GUI. Qui quindi non c'è "codice", ma uno schema...

CVE-2026-51620

Incorrect access control in the getNetInfoCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain network topology and interface configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-67807

StarRocks through 4.0.13 contains an authentication bypass vulnerability in five REST handler classes that override execute directly instead of implementing executeWithoutPassword. Attackers can access six unauthenticated endpoints on the frontend HTTP port to disclose cluster topology, database...

CVE-2026-80670 perf tools: Use perf_env__get_cpu_topology() in machine__resolve()

In the Linux kernel, the following vulnerability has been resolved: perf tools: Use perfenvgetcputopology in machineresolve machineresolve accesses env-cpual-cpu.socketid after checking al-cpu = 0 and env-cpu != NULL, but without validating al-cpu against env-nrcpusavail. Since al-cpu comes from...

CVE-2026-80670

In the Linux kernel, the following vulnerability has been resolved: perf tools: Use perfenvgetcputopology in machineresolve machineresolve accesses env-cpual-cpu.socketid after checking al-cpu = 0 and env-cpu != NULL, but without validating al-cpu against env-nrcpusavail. Since al-cpu comes from...

CVE-2026-51620

CVE-2026-51620 affects the TOTOLINK T6 router running firmware 4.1.5cu.748_B20211015 . An incorrect access control flaw in the getNetInfoCfg function allows an unauthenticated, remote attacker to disclose network topology and interface configuration by sending a crafted POST request to /cgi-bin/c...

CVE-2026-80525 ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup The ipcconfigdata buffer for copier widgets is built once during ipcprepare called from sofpcmsetupconnectedwidgets and cached for reuse. For host copiers...

Linux Distros Unpatched Vulnerability : CVE-2026-80525

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup The ipcconfigdata buffer for copier widgets is built once during ipcprepare called from...

PT-2026-82141

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASOC SOF ipc4-topology component where the ipc config data buffer for copier widgets is cached and not refreshed during suspend/resume cycles. While the underlying...