iox

iox English | 中文 Tool for port forward & intranet proxy, just like lcx/ew, but better Why write? lcx and ew are awesome, but can be improved. When I first used them, I can't remember these complicated parameters for a long time, such as tran, slave, rcsocks, sssocks.... The work mode is clear, wh...

autovpn

!CAUTION This repository is no longer being maintained. No further updates, bug fixes, or support will be provided. Please use the new version https://github.com/ttlequals0/autowire Overview Script that allows the easy creation of OpenVPN endpoints in any AWS region. To create a VPN endpoint is...

pingtunnel

Pingtunnel Pingtunnel is a tool that sends TCP/UDP traffic over ICMP. Note: This tool is only to be used for study and research, do not use it for illegal purposes...

CVE-2015-5374-DoS-PoC

CVE-2015-5374 Siemens SIPROTEC 4 y SIPROTEC Compact Módulo Ethernet EN100 CVE-2015-5374 Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module ... Done, say goodbye! Módulo Metasploit Este módulo envía un paquete especialmente diseñado al puerto 50000/UDP que podría causar una denegación d...

Humax-CLI

Humax-CLI Un cliente de terminal no oficial para Humax IR4000HD con funciones mejoradas. Todo esto surgió de la ingeniería inversa de la aplicación de Android y pronto habrá un artículo 😄 Captura de pantalla Uso : root@kitploit: usage: sendUDP.py -h -i IP -l --try-this --loop -j -b btn btn...

CVE-2021-24086-exp

CVE-2021-24086 Esta es una prueba de concepto para CVE-2021-24086 "Vulnerabilidad de denegación de servicio de TCP/IP de Windows", una desreferencia NULL en tcpip.sys corregida por Microsoft en febrero de 2021. Según este tweet, la vulnerabilidad fue encontrada por @piazzt. Se puede activar...

NetworkSherlock

NetworkSherlock: 使用 Shodan 的强大端口扫描工具 NetworkSherlock 是一款专为网络安全专业人员和渗透测试人员设计的强大且灵活的端口扫描工具。凭借其先进的功能，NetworkSherlock 可以高效地扫描 IP 范围、CIDR 块和多个目标。它在各种协议上的详细横幅抓取能力以及与 Shodan（全球领先的互联网连接设备扫描与分析服务）的集成方面尤为突出。这种 Shodan 集成使 NetworkSherlock 能够提供增强的扫描能力，让用户更深入地了解网络漏洞和潜在威胁。通过将本地端口扫描与 Shodan...

xmap

XMap: The Internet Scanner XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning. XMap is reimplemented and improved thoroughly from ZMap and is fully compatible with ZMap, armed with the "5 minutes" probing speed and novel scanning techniques...

fastnetmon

Community Edition FastNetMon - A high-performance DDoS detector/sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AFPACKET port mirror. What do we do? We detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second...

CVE-2024-3596-Detector

Detector de Vulnerabilidad RADIUS Límites del Código: El código está diseñado directamente para detectar conflictos MD5. Sin embargo, puede ser necesario un análisis más exhaustivo para probar completamente todos los aspectos de CVE-2024-3596. Este código solo puede detectar ataques basados en...

lab-cve-2020-0610

Laboratorio BlueGate CVE-2020-0610 - RCE por UDP/DTLS en Windows RD Gateway PR de Nuclei: https://github.com/projectdiscovery/nuclei-templates/pull/13076 Un entorno de laboratorio completo y reproducible para CVE-2020-0610 BlueGate, una vulnerabilidad crítica de ejecución remota de código sin...

Arcserve Unified Data Protection - Unauthenticated DoS in ASNative.dll

A denial of service vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in ASNative.dll. id: CVE-2024-0801 info: name: Arcserve Unified Data Protection - Unauthenticated DoS in ASNative.dll author: daffainfo severity: high description: | A denial of service vulnerability exists i...

Arcserve UDP <= 9.0.6034 - Authentication Bypass

Arcserve UDP through 9.0.6034 allows authentication bypass. The method getVersionInfo at WebServiceImpl/services/FlashServiceImpl leaks the AuthUUID token. This token can be used at /WebServiceImpl/services/VirtualStandbyServiceImpl to obtain a valid session. This session can be used to execute a...

slipstream

NAT Slipstreaming NAT Slipstreaming allows an attacker to remotely access any TCP/UDP service bound to any system behind a victim's NAT, bypassing the victim's NAT/firewall remote arbitrary firewall pinhole control, just by the victim visiting a website. v1 developed by : @SamyKamkar //...

GO-RPCBOMB

Descripción: CVE-2017-8779 rpcbind hasta 0.2.4, LIBTIRPC hasta 1.0.1 y 1.0.2-rc hasta 1.0.2-rc3, y NTIRPC hasta 1.4.3 no consideran el tamaño máximo de datos RPC durante la asignación de memoria para cadenas XDR, lo que permite a atacantes remotos causar una denegación de servicio consumo de...

hyenae-ng

Hyenae NG Hyenae NG Next Generation is a re-write of the original Hyenae tool which was originally published back in the year 2010. Besides switching from C to C++, using modern design concepts, Hyenae NG was just like the original Hyenae written with maximum portability in mind. Since the origin...

USSH

USSH USSH es un protocolo de shell y un par cliente/servidor construido sobre USTP-Secure. No es un túnel TCP y no envuelve SSH dentro de TCP. Estado: Beta Licencia: MIT Nombres de cifrados AEAD chacha20 = CHACHA20POLY1305 aes-256-gcm = AES256GCM aes-128-gcm = AES128GCM Cifrado AEAD predeterminad...

janusec

Janusec Application Gateway / JANUSEC应用网关 English Readme 提供快速、安全的应用交付 介绍PPT： https://www.janusec.com/download/Janusec-Application-Gateway-CN.pdf 主要功能 JANUSEC应用网关的主要功能有： 向Web应用提供统一的安全接入，包括HTTPS、身份认证、安全防御（WAF/CC）等。如Web应用是通过K8S Pods部署的，该网关也可以作为K8S Ingress Controller使用，向Pods提供跟普通Web应用同样的接入和安全特性。...

CVE-2004-0558

这是针对CVE-2004-0558的概念验证利用程序 特定版本的CUPs（1.1.x）在接收到零长度UDP数据包时存在拒绝服务漏洞 https://www.exploit-db.com/exploits/24599/ 值得注意的是，使用nmap也可以实现此攻击，该利用程序仅用于研究和教育目的。 用法： python kill-cups.py -t 192.168.1.91 附加的命令行标志仅用于研究目的。UDP要求数据包头部使用任意源端口。在利用程序中，我默认将其设置为4321，但如有必要可以更改。 python kill-cups.py -t 192.168.1.91...

PacketSender

简介 https://packetsender.com 阅读其他语言版本：English, Español, Deutsch, Français, italiano, 简体中文. Packet Sender 是一款开源工具，可用于发送和接收 TCP、UDP 以及 SSL（加密 TCP）数据包，同时支持 HTTP/HTTPS 请求和面板生成。主分支正式支持 Windows、Mac 和桌面 Linux（基于 Qt）。其他平台可能会重新编译并重新分发 Packet Sender。Packet Sender 完全免费，采用 GPL v2...