2681 matches found
webscan
webscan webscan is a browser-based network IP scanner and local IP detector. It detects IPs bound to the user/victim by listening on an RTP data channel via WebRTC and looping back to the port across any live IPs, as well as discovering all live IP addresses on valid subnets by monitoring for...
webscan
webscan webscan è uno scanner di rete basato su browser e un rilevatore IP locale. Rileva gli IP associati all'utente/vittima ascoltando su un canale dati RTP tramite WebRTC e rimandando indietro alla porta attraverso qualsiasi IP attivo, oltre a scoprire tutti gli indirizzi IP attivi su sottoret...
wave-share
wave-share A proof-of-concept for WebRTC signaling using sound. Works with all devices that have microphone + speakers. Runs in the browser. Nearby devices negotiate the WebRTC connection by exchanging the necessary Session Description Protocol SDP data via a sequence of audio tones. Upon...
wave-share
wave-share Una prova di concetto per la segnalazione WebRTC tramite suono. Funziona con tutti i dispositivi che hanno microfono + altoparlanti. Viene eseguito nel browser. I dispositivi vicini negoziano la connessione WebRTC scambiando i dati necessari del Session Description Protocol SDP tramite...
sonar.js
sonar.js Un framework per identificare e lanciare exploit contro host di rete interni. Funziona tramite enumerazione IP WebRTC, scansione host WebSocket e fingerprinting di risorse esterne. Come funziona? Quando il payload sonar.js viene caricato in un browser web moderno, accade quanto segue:...
sonar.js
sonar.js A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration, WebSocket host scanning, and external resource fingerprinting. How does it work? Upon loading the sonar.js payload in a modern web browser the following will happen: sonar....
slipstream
NAT Slipstreaming NAT Slipstreaming allows an attacker to remotely access any TCP/UDP service bound to any system behind a victim's NAT, bypassing the victim's NAT/firewall remote arbitrary firewall pinhole control, just by the victim visiting a website. v1 developed by : @SamyKamkar //...
CVE-2024-4367-PoC
CVE-2024-4367-PoC Esta Prova de Conceito PoC demonstra a exploração da vulnerabilidade CVE-2024-4367, que envolve ataques de Cross-Site Scripting XSS. Funcionalidades Esta PoC coleta e exibe os seguintes tipos de informações: 1. Informações Gerais: Domínio Título URL atual URL de referência...
CVE-2020-6514
CVE-2020-6514 Der Exploit Als ich den Exploit schrieb, habe ich ursprünglich die SCTP-Pakete verändert, die an das Zielgerät gesendet wurden, indem ich die Quelle von WebRTC änderte und sie neu kompilierte. Dies war für Angriffe auf Closed-Source-Anwendungen nicht praktikabel, also wechselte ich...
neko
n.eko Welcome to Neko, a self-hosted virtual browser that runs in Docker and uses WebRTC technology. Neko is a powerful tool that allows you to run a fully-functional browser in a virtual environment , giving you the ability to access the internet securely and privately from anywhere. With Neko,...
neko
n.eko Benvenuto in Neko, un browser virtuale self-hosted che gira in Docker e utilizza la tecnologia WebRTC. Neko è un potente strumento che ti permette di eseguire un browser completamente funzionante in un ambiente virtuale , dandoti la possibilità di accedere a Internet in modo sicuro e privat...
Chromium: CVE-2026-79255 Improper input validation in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-79187 Use after free in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-78950 Integer overflow in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-79027 Use after free in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-78891 Buffer overflow in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
webrtc-ips
STUN IP Address requests for WebRTC Demo: https://diafygi.github.io/webrtc-ips/ What this does Firefox and Chrome have implemented WebRTC that allow requests to STUN servers be made that will return the local and public IP addresses for the user. These request results are available to javascript,...
webrtc-ips
STUN-IP-Adressanfragen für WebRTC Demo: https://diafygi.github.io/webrtc-ips/ Was das macht Firefox und Chrome haben WebRTC implementiert, das Anfragen an STUN-Server ermöglicht, die die lokalen und öffentlichen IP-Adressen des Benutzers zurückgeben. Diese Anforderungsergebnisse stehen JavaScript...
CVE-2025-14321
CVE-2025-14321 Proof of Concept Descrizione PoC per una vulnerabilità Use-After-Free UAF nel componente RTCEncodedFrameBase di Firefox, sfruttabile tramite l’API WebRTC Encoded Transforms. CVE-2025-14321 : Il distruttore di RTCEncodedFrameBase non chiama DetachArrayBuffer quando libera la memoria...
leakish
Leakish Browser-Datenschutzleck-Detektor — acht Erkennungsmodule, Risikobewertung und Kontoverlauf, alles in Ihrem Browser. Erstellt mitVerdent — einem agentischen Programmierassistenten. Jedes Erkennungsmodul, das Analyse-Dashboard, der API-Key-Authentifizierungsablauf, die zweisprachige...