at-doom-fortigate

At Doom Fortigate root@kitploit: ================= =============== =============== ======== ======== \ . . . . . . .\ //. . . . . . .\ //. . . . . . .\ \. . .\// . . // ||. . .. . .|| ||. . .. . .|| ||. . .. . .|| || . . ./ . . .|| || . .|| ||. . || || . .|| ||. . || || . .|| ||. . || ||...

CVE-2023-27997-Check

CVE-2023-27997-Check Fofa Query : app="FORTINET-SSLVPN" Installazione root@kitploit: $ git https://github.com/imbas007/CVE-2023-27997-Check.git $ cd CVE-2023-27997-check $ pip3 install -r requirements.txt Utilizzo root@kitploit: usage: CVE-2023-27997.py -h -u URL | -f FILELIST options: -h, --help...

CVE-2021-30357_CheckPoint_SNX_VPN_PoC

CVE-2021-30357CheckPointSNXVPNPoC Proof-of-Concept für privilegiertes Dateilesen über den CheckPoint SNX VPN Linux Client. Betroffene Version CheckPointVPNSNXLinux800007075.sh MD5-Prüfsumme: 4372e9936e2dfb1d1ebcef3ed4dd7787 Exploit Um den Exploit auszuführen, laden Sie einfach eine beliebige Date...

Fortinet FortiOS - Cross-Site Scripting

Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4.0 to 5.4.12, 5.2 and below versions under SSL VPN web portal are vulnerable to cross-site scripting and allows attacker to execute unauthorized malicious script code via the error or message handling parameters. id: CVE-2018-13380 info: name:...

Cisco Secure Firewall ASA & FTD - Authentication Bypass

A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to access restricted URL endpoints that are related to remote access VPN that should...

Check Point IKEv1 Remote-Access VPN - Certificate Authentication Bypass

IKEv1 key exchange contains a broken authentication caused by logic flow weakness in Remote Access and Mobile Access certificate validation, letting unauthenticated remote attackers bypass user authentication and establish VPN connections without valid passwords, exploit requires use of deprecate...

citrix_adc_netscaler_lfi

citrixadcnetscalerlfiscan Dieses Metasploit-Framework-Modul kann verwendet werden, um Unternehmen bei der Überprüfung der letzten Citrix-Sicherheitslücken veröffentlicht am 8. Juli 2020 zu helfen. CVE-2020-8193 CVE-2020-8195 CVE-2020-8196 Öffentliche Berichterstattung am 8. Juli 2020 durch Donny...

CVE-2026-50751

🚨 CVE-2026-50751 - Bypass dell'autenticazione in Check Point VPN IKEv1 📖 Panoramica CVE-2026-50751 è una vulnerabilità critica di bypass dell'autenticazione che colpisce le implementazioni di Check Point Quantum Security Gateway configurate con il protocollo legacy IKEv1 Remote Access VPN. Il...

algo

Algo VPN Algo VPN è un insieme di script Ansible che semplificano la configurazione di una VPN personale WireGuard e IPsec. Utilizza le impostazioni più sicure disponibili e funziona con i comuni provider cloud. Leggi il nostro annuncio di rilascio per maggiori informazioni. Caratteristiche...

algo

Algo VPN Algo VPN is a set of Ansible scripts that simplify the setup of a personal WireGuard and IPsec VPN. It uses the most secure defaults available and works with common cloud providers. See our release announcement for more information. Features Supports only IKEv2 with strong crypto AES-GCM...

hive

Von WikiLeaks: Heute, am 9. November 2017, veröffentlicht WikiLeaks den Quellcode und die Entwicklungsprotokolle von Hive, einer wichtigen Komponente der CIA-Infrastruktur zur Steuerung ihrer Malware. Hive löst ein kritisches Problem für die Malware-Betreiber der CIA. Selbst das ausgefeilteste...

headscale

Un'implementazione open source e auto-ospitata del server di controllo Tailscale. Unisciti al nostro server Discord per una chat. Nota: Seleziona sempre lo stesso tag GitHub della versione rilasciata che usi per assicurarti di avere la corretta configurazione di esempio. Il branch main potrebbe...

openvpn-install

openvpn-install Installatore OpenVPN per Debian, Ubuntu, Fedora, openSUSE, CentOS, Amazon Linux, Arch Linux, Oracle Linux, Rocky Linux e AlmaLinux. Questo script ti permetterà di configurare e gestire il tuo server VPN sicuro in pochi secondi. Cos'è? Questo script è pensato per essere eseguito su...

NachoVPN

NachoVPN 🌮🔒 NachoVPN è una Proof of Concept che dimostra lo sfruttamento dei client SSL-VPN, utilizzando un server VPN rogue. Utilizza un'architettura basata su plugin, così che il supporto per prodotti SSL-VPN aggiuntivi possa essere contribuito dalla community. Attualmente supporta vari popolar...

CVE-2026-13735 WireGuard keepalive transport-data messages accepted without Poly1305 authentication

Zephyr's WireGuard implementation in subsys/net/lib/wireguard/wgcrypto.c mishandled keepalive packets. In wgprocessdatamessage, any type-4 transport-data message whose payload was exactly 16 bytes an empty plaintext plus a bare Poly1305 tag, i.e. a keepalive was accepted and returned immediately,...

CVE-2026-13735

Zephyr RTOS WireGuard implementation in subsys/net/lib/wireguard/wg_crypto.c accepted 16-byte keepalive data messages before verifying the Poly1305 authentication tag, allowing a network attacker with a valid receiver index to forge keepalive packets without possessing the session key. The impact...

CVE-2026-51656

Incorrect access control in the getVpnPassCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain VPN pass-through and WAN ping filter settings via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

ShuckNT

🔐 ShuckNT : Shuck den Hash, bevor du versuchst, ihn zu knacken | Das Skript von Shuck.sh ShuckNT ist das Skript des Online-Dienstes Shuck.sh für den Einsatz vor Ort jetzt online ausprobieren!. Es wurde entwickelt, um Authentifizierungstoken auf Basis des Data Encryption Standard DES herabzustufen...

Project-CVE-2026-50751

CVE-2026-50751 IKEv1 सुरक्षा परीक्षण विवरण यह Python स्क्रिप्ट एक आक्रामक सुरक्षा-परीक्षण फ्रेमवर्क है जिसे CVE-2026-50751 को लक्षित करने के लिए डिज़ाइन किया गया है, जो Check Point IKEv1 VPN प्रमाणीकरण-बायपास भेद्यता है। विशेषताएँ UDP पोर्ट 500 पर IKEv1 VPN सेवाओं के लिए IP पते स्कैन करता है Chec...

CVE-2023-27997-check

Strumento di Valutazione della Vulnerabilità CVE-2023-27997 Rileva in modo sicuro se un'istanza FortiGate SSL VPN è vulnerabile a CVE-2023-27997 basandosi sui tempi di risposta. Vedi il rapporto completo sul blog di Bishop Fox, inclusa una guida completa della metodologia alla base di questo...