stunner

STUNNER Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers. TURN is a protocol mostly used in videoconferencing and audio chats WebRTC. If you find a misconfigured server you can use this tool to open a local socks proxy that relays all traffic via the TURN protocol into t...

stunner

STUNNER Stunner 是一个用于测试和利用 STUN、TURN 以及基于 TCP 的 TURN 服务器的工具。 TURN 是一种主要用于视频会议和音频聊天（WebRTC）的协议。 如果你发现一个配置错误的服务器，你可以使用此工具打开一个本地 SOCKS 代理，该代理通过 TURN 协议将所有流量中继到服务器背后的内部网络中。 我在测试 Cisco Expressway 期间开发了这个工具，并发现了一些漏洞：https://firefart.at/post/multiplevulnerabilitiesciscoexpressway/...

resiprocate

Descripción general El repositorio reSIProcate contiene las siguientes bibliotecas y aplicaciones C++: Biblioteca resip: pila SIP completa RFC3261 Biblioteca dum Dialog Usage Manager: biblioteca SIP de alto nivel para crear agentes de usuario SIP sin pila de medios Biblioteca recon: biblioteca SI...

inspect_petri

Inspect Petri 欢迎使用 Inspect Petri，一个审计代理，能够实现语言模型的自动监控与交互，以检测潜在的对齐问题、奖励破解及其他令人担忧的行为。 Petri 帮助你快速端到端地测试具体的对齐假设。它能够： 生成逼真的审计场景（通过你的种子指令） 使用审计模型和目标模型编排多轮审计 模拟工具和回滚以测试行为 使用一致评分标准的评判模型对对话记录进行打分 了解更多关于 Petri 的使用方法，请访问 https://meridianlabs-ai.github.io/inspectpetri。 !NOTE 这是 Petri 3.0 版本。虽然大多数 CLI 命令与...

socbench

socbench 将前沿推理LLM作为SOC分析师 在原始NetFlow数据上进行基准测试。 socbench 将前沿推理模型作为SOC分析师进行基准测试： 每个模型运行一个有界的多轮代理循环，针对确定性的、预索引的NetFlow语料库， 使用角色限定的只读工具、每次调查的固定美元上限， 以及严格的最终答案JSON契约。四种角色（SOC分析师、威胁分析师、对手猎手、检测工程师） 和三种提供商（OpenAI、Anthropic、Google）共享相同的评估单元、评分 视角和消融表面，使得总体数字和 toolsoff / playbooksoff 差值可直接比较。 该仓库是本地优先...

PE-CoA

PE-CoA Implementación en código de "Pattern Enhanced Multi-Turn Jailbreaking: Exploiting Structural Vulnerabilities in Large Language Models" El artículo completo está disponible en: https://arxiv.org/pdf/2510.08859 Instrucciones de configuración de Chain of Attack Instalación 1. Instalar...

Linux Distros Unpatched Vulnerability : CVE-2026-68555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Coturn is a free open source implementation of TURN and STUN Server. In 4.15.0, an authenticated TURN user can repeatedly resume one allocation from fresh UDP...

DEBIAN-CVE-2026-68555

Coturn is a free open source implementation of TURN and STUN Server. In 4.15.0, an authenticated TURN user can repeatedly resume one allocation from fresh UDP 5-tuples without completing a handoff when the server enables --mobility. mobilebegintransition in src/server/nsturnserver.c disarms each...

DEBIAN-CVE-2026-68554

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an on-path attacker can append attributes after MESSAGE-INTEGRITY to an authenticated STUN request on plain UDP or TCP, adjust the STUN header length, and recompute the unkeyed FINGERPRINT while the original HMA...

CVE-2026-68554

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an on-path attacker can append attributes after MESSAGE-INTEGRITY to an authenticated STUN request on plain UDP or TCP, adjust the STUN header length, and recompute the unkeyed FINGERPRINT while the original HMA...

UBUNTU-CVE-2026-68555

Coturn is a free open source implementation of TURN and STUN Server. In 4.15.0, an authenticated TURN user can repeatedly resume one allocation from fresh UDP 5-tuples without completing a handoff when the server enables --mobility. mobilebegintransition in src/server/nsturnserver.c disarms each...

CVE-2026-68555

Coturn is a free open source implementation of TURN and STUN Server. In 4.15.0, an authenticated TURN user can repeatedly resume one allocation from fresh UDP 5-tuples without completing a handoff when the server enables --mobility. mobilebegintransition in src/server/nsturnserver.c disarms each...

UBUNTU-CVE-2026-68554

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an on-path attacker can append attributes after MESSAGE-INTEGRITY to an authenticated STUN request on plain UDP or TCP, adjust the STUN header length, and recompute the unkeyed FINGERPRINT while the original HMA...

CVE-2026-68555

Coturn is a free open source implementation of TURN and STUN Server. In 4.15.0, an authenticated TURN user can repeatedly resume one allocation from fresh UDP 5-tuples without completing a handoff when the server enables --mobility. mobilebegintransition in src/server/nsturnserver.c disarms each...

CVE-2026-68554 Coturn: STUN attributes after MESSAGE-INTEGRITY are processed, letting on-path attackers modify authenticated TURN requests

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an on-path attacker can append attributes after MESSAGE-INTEGRITY to an authenticated STUN request on plain UDP or TCP, adjust the STUN header length, and recompute the unkeyed FINGERPRINT while the original HMA...

CVE-2026-68554 Coturn: STUN attributes after MESSAGE-INTEGRITY are processed, letting on-path attackers modify authenticated TURN requests

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an on-path attacker can append attributes after MESSAGE-INTEGRITY to an authenticated STUN request on plain UDP or TCP, adjust the STUN header length, and recompute the unkeyed FINGERPRINT while the original HMA...

CVE-2026-68554 Coturn: STUN attributes after MESSAGE-INTEGRITY are processed, letting on-path attackers modify authenticated TURN requests

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an on-path attacker can append attributes after MESSAGE-INTEGRITY to an authenticated STUN request on plain UDP or TCP, adjust the STUN header length, and recompute the unkeyed FINGERPRINT while the original HMA...

CVE-2026-68554

Coturn (open-source TURN/STUN server) prior to 4.15.0 is vulnerable to an on-path STUN message truncation attack. The root cause is that the server-side parser in src/server/ns_turn_server.c continues processing attributes after the MESSAGE-INTEGRITY field. Since the HMAC covers only the message ...

CVE-2026-68554

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an on-path attacker can append attributes after MESSAGE-INTEGRITY to an authenticated STUN request on plain UDP or TCP, adjust the STUN header length, and recompute the unkeyed FINGERPRINT while the original HMA...

CVE-2026-68553

Coturn (open-source TURN/STUN server) prior to 4.13.0 is affected by a format string vulnerability in its Redis integration. An authenticated TURN user can inject printf-style format specifiers into the STUN USERNAME or REALM attribute. These values pass is_secure_string() validation and are embe...