CVE-2026-46331-pedit-cow

CVE-2026-46331-pedit-cow Write-up and exploitation steps for the pedit COW vulnerability CVE-2026-46331. Overview This challenge demonstrates pedit COW, a Linux kernel flaw in the traffic-control subsystem's packet-editing action actpedit. The vulnerability allows an unprivileged user to overwrit...

Red-Team-Infrastructure-Wiki

This wiki is intended to provide a resource for setting up a resilient Red Team infrastructure. It was made to complement Steve Borosh @424f424f and Jeff Dimmock's @bluscreenofjeff BSides NoVa 2017 talk "Doomsday Preppers: Fortifying Your Red Team Infrastructure" slides If you have an addition...

wotop

Web sobre Protocolo WOTOP root@kitploit: ██╗ ██╗ ██████╗ ████████╗ ██████╗ ██████╗ ██║ ██║██╔═══██╗╚══██╔══╝██╔═══██╗██╔══██╗ ██║ █╗ ██║██║ ██║ ██║ ██║ ██║██████╔╝ ██║███╗██║██║ ██║ ██║ ██║ ██║██╔═══╝ ╚███╔███╔╝╚██████╔╝ ██║ ╚██████╔╝██║ ╚══╝╚══╝ ╚═════╝ ╚═╝ ╚═════╝ ╚═╝ Introducción WOTOP es una...

wotop

Web-On-Top-Of-Protocol WOTOP root@kitploit: ██╗ ██╗ ██████╗ ████████╗ ██████╗ ██████╗ ██║ ██║██╔═══██╗╚══██╔══╝██╔═══██╗██╔══██╗ ██║ █╗ ██║██║ ██║ ██║ ██║ ██║██████╔╝ ██║███╗██║██║ ██║ ██║ ██║ ██║██╔═══╝ ╚███╔███╔╝╚██████╔╝ ██║ ╚██████╔╝██║ ╚══╝╚══╝ ╚═════╝ ╚═╝ ╚═════╝ ╚═╝ Introduction WOTOP is a...

CorelightForSentinelOne

Singularity Operations Center용 SentinelOne 대시보드 개요 이 가이드는 네트워크 트래픽을 모니터링하고 분석하기 위한 강력한 데이터 인사이트를 제공하는 SentinelOne 대시보드를 설정하고 활용하는 데 도움을 줍니다. 보안 분석가, 네트워크 관리자 또는 IT 전문가라면 이 대시보드를 통해 네트워크의 보안 상태를 쉽게 시각화하고 추적할 수 있습니다. 설치 및 구성 파서 구성 마켓플레이스를 통한 파서 설치 -- TBD -- GitHub 리포지토리를 통한 파서 설치 참고: 마켓플레이스 대신...

noisy

Noisy Un sencillo script de Python que genera ruido aleatorio de tráfico HTTP/DNS en segundo plano mientras navegas por la web de forma habitual, para que tus datos de tráfico web sean menos valiosos para la venta y proporcionen mayor oscuridad. Probado en MacOS High Sierra, Ubuntu 16.04 y Raspbi...

tsusen

Tsusen 津波センサー is a standalone network sensor made for gathering information from the regular traffic coming from the outside i.e. Internet on a daily basis e.g. mass-scans, service-scanners, etc.. Any disturbances should be closely watched for as those can become a good prediction base of...

tsusen

Tsusen 津波センサー es un sensor de red independiente diseñado para recopilar información del tráfico regular proveniente del exterior es decir, Internet de forma diaria p. ej., escaneos masivos, escáneres de servicios, etc.. Cualquier anomalía debe ser observada de cerca, ya que puede convertirse en u...

pacmap

pacmap PacMap is a graph-first network traffic visualizer for live capture and PCAP replay that helps you see what changed, what's noisy, and what to inspect next. Think of it as Git for network behavior: snapshot, diff, and replay network state visually. Input Modes PacMap supports two workflows...

Spip-Go

Spip - Network Honeypot Sensor Spip is a lightweight, low-interaction network honeypot sensor. It listens for arbitrary incoming TCP traffic plain and TLS, captures what scanners and bots send, and logs each connection as structured JSON ECS-shaped for easy ingestion into your SIEM or data lake...

access-point

Fake Access Point Rogue open Wi-Fi AP for traffic capture in controlled environments. Uses hostapd native nl80211 AP mode + dnsmasq DHCP/DNS + iptables NAT toward an uplink interface. Requirements Linux, root. Wireless card with AP-mode support iw phy → Supported interface modes: ... AP. Packages...

ptcpdump

ptcpdump %20e2e %20e2e English | 中文 ptcpdump is a tcpdump-compatible packet analyzer powered by eBPF, automatically annotating packets with process/container/pod metadata when detectable. Inspired by jschwinger233/skbdump. Table of Contents Features Installation Requirements Usage...

USB Spy

USB SPY usb-spy is a USB Mass Storage traffic analyzer built around a WiFi or Ethernet-enabled microcontroller. The board exposes a disk image FAT or any filesystem as a fake USB Mass Storage device to a target system, while the actual storage data is provided by a remote server over WiFi or...

MasterHttpRelayVPN

MasterHttpRelayVPN La búsqueda segura de Youtube y la transmisión en vivo ahora están bypaseadas y funcionando por defecto. Por lo que no necesitas youtubeviarelay ni exitnode de Cloudflare / VPS para ello. Idioma: English | Persian / فارسی نسخه فارسی با AI ایجاد شده. ترجیحا از نسخه انگلیسی استفا...

SMBRat

SMBRat A Windows Remote Administration Tool in Visual Basic Script Idea Windows Environments like Active Directory Networks, get really bloated with SMB traffic. All hosts get Policies from the SYSVOL , configurations need remote files to work, desktop shortcuts tend to point to...

DrMITM

D̳r̳M̳I̳T̳M̳ DrMITM es un programa diseñado para registrar globalmente todo el tráfico. Diagrama: C̳ó̳m̳o̳ f̳u̳n̳c̳i̳o̳n̳a̳ DrMITM envía una solicitud al sitio web y devuelve la IP del sitio web por si acaso el servidor del sitio web está diseñado para confiar en la IP del sitio para las...

WordPress Visitor Statistics (Real Time Traffic) <4.8 -SQL Injection

WordPress Visitor Statistics Real Time Traffic plugin before 4.8 does not properly sanitize and escape the refUrl in the refDetails AJAX action, which is available to any authenticated user. This could allow users with a role as low as subscriber to perform SQL injection attacks. id: CVE-2021-247...

peetch

peetch peetch es un conjunto de herramientas destinadas a experimentar con diferentes aspectos de eBPF para eludir las protecciones del protocolo TLS. Actualmente, peetch incluye tres subcomandos. El primero llamado dump tiene como objetivo esnifar tráfico de red asociando información del proceso...

aiodnsbrute

非同期DNSブルートフォース Python 3.5+ で動作し、asyncio を使用して非同期にドメイン名をブルートフォースするツールです。 速度 高速です。 小規模なVPSホストでのベンチマークでは、約10万件のDNS解決が1.5～2分でした。Amazon M3インスタンスでは、100万件のリクエストをわずか3分強で処理しました。実際の速度は環境によります。速度だけを重視するなら、Googleのリゾルバーの使用は避けたほうがいいでしょう。 免責事項...

kerneleye

KernelEye Kernel-level traffic intelligence and threat remediation for Linux servers. KernelEye is a self-hosted security monitoring platform for Linux servers. It uses eBPF, TC, and XDP in a Go agent to observe network metadata, score suspicious activity, and apply remediation through kernel-lev...