Platypus

Platypus 适用于 Linux 机器集群的主机管理枢纽。在你拥有的每台主机上安装 Platypus 代理；代理通过 TLS + protobuf 回连到你的 Platypus 服务器；通过服务器，你可以在所有托管主机上获得交互式 Shell、文件管理和网络隧道——全部通过一个中央控制平面。 截图 一个 Vercel 风格的扁平导航 UI，包含项目仪表盘、主机/监听器/会话浏览器、多主机调度控制台和管理员用户管理器。完整图库见 docs/screenshots/。重新运行 make screenshots 可从实时应用重新生成它们。 架构 Platypus...

vc5

VC5 Este README se está actualizando actualmente para reflejar cambios recientes; es posible que alguna información no refleje el código base actual. Esta iteración del código aún no está lista para producción; use una versión v0.2 para entornos de producción. Un balanceador de carga de capa 4 L4...

sshimpanzee

Sshimpanzee Sshimpanzee 允许你构建一个静态的 反向 SSH服务器。它不是监听端口等待连接，而是SSH服务器会主动发起反向连接到攻击者的IP，就像常规的反向shell一样。Sshimpanzee 让你能够利用常规SSH连接的所有功能，比如端口转发、动态SOCKS代理或FTP服务器。 更重要的是，如果从受害机器到攻击者服务器的直接连接不可行，它提供了不同的隧道机制，例如DNS隧道、ICMP隧道或HTTP封装。它还支持HTTP和SOCKS5代理。可在lexfo的博客上获取一篇技术论文。 DOCKER构建 - 推荐 root@kitploit: sudo docker...

XFLTReaT

XFLTReaT 这只是互联网上缺失的众多东西之一。如果你厌倦了对每个协议都尝试不同的隧道工具，那么这一定是你的工具 ^W框架。如果你对细节感兴趣，请阅读Wiki。 可用模块 TCP UDP ICMP SOCKS v4, 4a, 5 HTTP CONNECT SCTP（作者：Darren Martyn @infodox） WebSocket DNS A/CNAME, PRIVATE, NULL - 概念验证 RDP（仅限 Windows） TL;DR 如果你想要： 从受限网络获取不受限制的互联网访问 通过嘈杂的侧信道泄露数据 使用自定义协议进行隧道传输 等等 那么这可能是你的终极工具。...

reGeorg

reGeorg root@kitploit: | | | | | || | || |/ | | | | | \ | || | | || || || \ | | | ||\|||| |||/||\|| || ... every office needs a tool like Georg [email protected] / @wm [email protected] / @trowalts [email protected] / @kampstaaldraad 版本 1.0 依赖 reGeorg 需要 Python 2.7 以及以下模块：...

vc5 v0.3.4

VC5 This README is currently being updated to reflect recent changes - some information may not reflect the current codebase. This iteration of code is not yet battle ready - use a v0.2 release for production A horizontally scalable Direct Server Return DSR layer 4 load balancer L4LB for Linux...

CVE-2026-21914

An Improper Locking vulnerability in the GTP plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service Dos. If an SRX Series device receives a specifically malformed GPRS Tunnelling Protocol GTP Modify Bearer Request message, ...

CVE-2026-21914

An Improper Locking vulnerability in the GTP plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service Dos. If an SRX Series device receives a specifically malformed GPRS Tunnelling Protocol GTP Modify Bearer Request message, ...

CVE-2026-21914

An Improper Locking vulnerability in the GTP plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service Dos. If an SRX Series device receives a specifically malformed GPRS Tunnelling Protocol GTP Modify Bearer Request message, ...

EUVD-2026-2683

An Improper Locking vulnerability in the GTP plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service Dos. If an SRX Series device receives a specifically malformed GPRS Tunnelling Protocol GTP Modify Bearer Request message, ...

CVE-2026-21914 Junos OS: SRX Series: A specifically malformed GTP message will cause an FPC crash

An Improper Locking vulnerability in the GTP plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service Dos. If an SRX Series device receives a specifically malformed GPRS Tunnelling Protocol GTP Modify Bearer Request message, ...

CVE-2026-21914

CVE-2026-21914 describes an Improper Locking vulnerability in the GTP plugin of Juniper Networks Junos OS on SRX Series. A specially crafted GTP Modify Bearer Request can cause a lock to be acquired and never released, preventing other threads from acquiring it, triggering a watchdog timeout and ...

CVE-2026-21914 Junos OS: SRX Series: A specifically malformed GTP message will cause an FPC crash

An Improper Locking vulnerability in the GTP plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service Dos. If an SRX Series device receives a specifically malformed GPRS Tunnelling Protocol GTP Modify Bearer Request message, ...

PT-2026-3128

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on SRX Series versions prior to 22.4R3-S8 Juniper Networks Junos OS on SRX Series versions 23.2 before 23.2R2-S5 Juniper Networks Junos OS on SRX Series versions 23.4 before 23.4R2-S6 Juniper Networks Junos OS on SRX...

Living off the land with native SSH and split tunnelling

TL;DR Attackers can use Microsoft native SSH client to forward out internal network traffic Windows native SSH is common The attack only needs minimal set-up and commands Quicker and more cost effective for an attacker than using C2 infrastructure Reduces likelihood of Blue team detection...

Debian: Security Advisory (DSA-1230-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Open5GS GTP library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Open5GS GTP library is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures during the analysis of extension headers in GPRS tunneling protocol messages GPTv1-U...

How the Saitama backdoor uses DNS tunnelling

Thanks to the Malwarebytes Threat Intelligence Team for the information they provided for this article. Understandably, a lot of cybersecurity research and commentary focuses on the act of breaking into computers undetected. But threat actors are often just as concerned with the act of breaking o...

Linux Systems Under Attack By New RedXOR Malware

Researchers have discovered a new backdoor targeting Linux systems, which they link back to the Winnti threat group. The backdoor is called RedXOR – in part because its network data-encoding scheme is based on the XOR encryption algorithm, and in part because its samples were found on an old...

Debian DLA-2414-1 : fastd security update

In fastd, a fast and secure tunnelling daemon, a receive buffer handling problem was discovered which allows a denial of service memory exhaustion when receiving packets with an invalid type code. For Debian 9 stretch, this problem has been fixed in version 18-2+deb9u1. We recommend that you...