wifitap

wifitap.py --- tun/tap 장치를 통한 WiFi 인젝션 도구 Cedric Blancher [email protected] http://sid.rstack.org/index.php/Wifitap 프랑스어 http://sid.rstack.org/index.php/WifitapEN 영어 이 프로그램은 트래픽 인젝션을 사용하여 WiFi 통신을 가능하게 하는 개념 증명PoC 도구입니다. 다음이 필요합니다: . Python = 2.2 . Psyco Python 최적화 도구선택 사항 . Philippe Biondi의...

ligolo-ng

Ligolo-ng : Туннелирование как VPN Продвинутый, но в то же время простой инструмент туннелирования, использующий TUN-интерфейсы. 📑 Документация Ligolo-ng установка/быстрый старт !TIP В Ligolo-ng 0.8 появилось множество новых функций, включая: 🌐 API и красивый веб-интерфейс благодаря L'ami du...

CVE-2026-81000

⚡ CVE-2026-81000 - TUNderflow Linux Kernel TUN/TAP Receive Headroom Memory Corruption A Linux kernel memory-corruption vulnerability in the TUN/TAP networking subsystem , caused by insufficient bounds on receive headroom and an integer underflow in the packet allocation path. ⚠️ Disclaimer This...

rosemary

Rosemary QUIC 기반 크로스플랫폼 커널 수준 피보팅 플랫폼. TUN/TAP 불필요. proxychains 불필요. 프록시 설정 불필요. Rosemary는 커널 수준에서 원격 호스트의 트래픽을 투명하게 가로챕니다. 프록시 설정, TUN/TAP 장치, proxychains가 필요 없습니다. 에이전트는 QUIC을 통해 서버로 다시 연결되며, 마치 해당 네트워크에 직접 연결된 것처럼 원격 네트워크 전체에 접근할 수 있습니다. 목차 작동 방식 기능 지원 플랫폼 스크린샷 빠른 시작 PowerShell 에이전트 릴리스 노트 CLI...

ligolo-mp

Ligolo-MP: пивотинг как VPN, теперь с друзьями! Ligolo-MP — это продвинутая версия Ligolo-ng с архитектурой клиент-сервер, позволяющая пентестерам работать с несколькими одновременными туннелями совместно. Он автоматически управляет всеми вашими TUN и предоставляет чистый графический интерфейс дл...

DEBIAN-CVE-2026-98382

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject dev-bound-only programs on other devices bpfoffloaddevmatch falls back to comparing offdev pointers after an exact netdev mismatch. Bound-only programs normally have NULL offdevs, so unrelated netdevs compare equal. A...

AZL-106902 CVE-2026-98382 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject dev-bound-only programs on other devices bpfoffloaddevmatch falls back to comparing offdev pointers after an exact netdev mismatch. Bound-only programs normally have NULL offdevs, so unrelated netdevs compare equal. A...

EUVD-2026-95537

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject dev-bound-only programs on other devices bpfoffloaddevmatch falls back to comparing offdev pointers after an exact netdev mismatch. Bound-only programs normally have NULL offdevs, so unrelated netdevs compare equal. A...

TUNderflow

TUNderflow CVE-2026-81000 Writeup !WARNING 이 PoC는 방어자, 유지보수자, 그리고 권한을 부여받은 보안 팀이 자신이 소유하거나 명시적으로 테스트 권한을 부여받은 시스템에서 패치, 완화 조치, 탐지, 노출 여부를 검증할 수 있도록 돕기 위한 목적으로만 제공됩니다. 이 자료의 사용이 합법적이고, 권한을 부여받았으며, 통제된 환경에서, 격리된 테스트 환경에서 이루어지도록 보장하는 것은 전적으로 사용자의 책임입니다. !WARNING 이 PoC는 파괴적입니다. 이 PoC는 /etc/pam.d/su를...

PT-2026-108763

In the Linux kernel, the following vulnerability has been resolved: vlan: require the MAC header to be present in vlan insert inner tag vlan insert inner tag only guarantees head room via skb cow head, never that mac len bytes of MAC header are present. Its ETH HLEN wrappers - vlan insert tag und...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.50 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.50 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-500375)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500375 advisory. - net: tun: bound receive headroom Asim Viladi Oglu Manizada Orabug: 40020673 CVE-2026-81000 - xfrm: ah6: validate routing header segmentsleft As...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.41 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.41 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.36 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.36 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

Unbreakable Enterprise kernel security update

5.4.17-2136.360.3 - IB/mlx4: delete allocated idmapentry while sending REJ Praveen Kumar Kannoju Orabug: 39999072 - net: tun: bound receive headroom Asim Viladi Oglu Manizada Orabug: 40020673 CVE-2026-81000 - xfrm: ah6: validate routing header segmentsleft Asim Viladi Oglu Manizada Orabug: 399821...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Net: tun: Unlinking the NAPI from the device upon destruction. Syzbot identified a race condition between the tun file and the device destruction process. NAPIs reside in the structtunfile structure, and this structure may be...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: llc: A test for maclen should be performed before reading the MAC header. The LLC layer reads the MAC header using ethhdr, without verifying that the skb contains an Ethernet header. Syzbot was able to access the llcrcv functi...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: net: tun: Fix use-after-free in tundetach Syzbot reported a use-after-free in tundetach. This causes a call trace like the following: ================================================================== BUG: KASAN: use-after-free i...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: tun: avoided double-free in tunfreenetdev Avoid double-free in tunfreenetdev by moving the dev-tstats and tun-security allocations to a new ndoinit routine tunnetinit, which will be called by registernetdevice. ndoinit is paired...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: tun: limits the printing rate when an illegal packet is received by the tun device. vhostworker calls tun callbacks to receive packets. If too many illegal packets arrive, tundoread continues to dump the packet contents. When...