AV-Chaos-Monkey

AV Chaos Monkey 分布式混沌工程平台，用于对视频会议系统进行负载测试。模拟超过1500个WebRTC参与者，传输H.264/Opus流，并注入网络混沌尖峰，以验证系统在降级条件下的韧性 架构 1. 媒体处理管道 ： FFmpeg 在启动时将输入视频转换为 H.264 Annex-B 和 Ogg/Opus NAL Reader 解析 H.264 流（SPS/PPS/IDR/Slices） Opus Reader 从 Ogg 容器中提取 20ms 音频帧 帧数据缓存在内存中，所有参与者共享（零拷贝） 相比每个参与者独立编码，CPU 降低约 90% 2. 控制平面 ： HTTP...

CVE-2020-6514

CVE-2020-6514 The exploit When writing the exploit, I originally altered the SCTP packets sent to the target device by altering the source of WebRTC and recompiling it. This wasn’t practical for attacking closed source applications, so I eventually switched to using Frida to hook the binary of th...

neko

n.eko 欢迎使用Neko，一个运行在Docker中并使用WebRTC技术的自托管虚拟浏览器。Neko是一个强大的工具，允许您在虚拟环境中运行完整功能的浏览器 ，让您能够从任何地方安全且私密地访问互联网 。使用Neko，您可以像在常规浏览器上一样浏览网页、运行应用程序 和执行其他任务，所有操作都在一个安全且隔离的环境 中。无论您是希望测试Web应用程序的开发者，是寻求安全浏览体验的注重隐私的用户 ，还是只是想利用虚拟浏览器的便利性和灵活性 的人，Neko都是完美的解决方案。 除了安全和隐私功能外，Neko还提供了多个用户同时访问...

CVE-2024-4367-PoC

CVE-2024-4367-PoC This Proof of Concept PoC demonstrates the exploitation of the CVE-2024-4367 vulnerability, which involves Cross-Site Scripting XSS attacks. Features This PoC collects and displays the following types of information: 1. General Information: Domain Title Current URL Referrer URL...

wave-share

wave-share A proof-of-concept for WebRTC signaling using sound. Works with all devices that have microphone + speakers. Runs in the browser. Nearby devices negotiate the WebRTC connection by exchanging the necessary Session Description Protocol SDP data via a sequence of audio tones. Upon...

wave-share

wave-share 这是一个利用声音进行WebRTC信令的概念验证。适用于所有配备麦克风和扬声器的设备。在浏览器中运行。 附近的设备通过一系列音频音调交换必要的会话描述协议（SDP）数据，从而协商WebRTC连接。协商成功后，浏览器之间建立本地WebRTC连接，允许通过LAN交换数据。 观看演示视频（2分钟）： 亲自尝试：ggerganov.github.io/wave-share 最新消息： 我已将声音数据传输算法提取到独立的库 ggwave 中。 它可以轻松嵌入其他项目。 工作原理 WebRTC...

webscan

webscan webscan 是一款基于浏览器的网络IP扫描器和本地IP检测器。它通过WebRTC监听RTP数据通道并回环到任何活跃IP的端口来检测绑定到用户/受害者的IP，同时通过监测来自 fetch 调用或指向有效子网/IP的隐藏 img 标签的即时超时（返回的TCP RST数据包）来发现有效子网上的所有活跃IP地址。可在所有主流浏览器和操作系统上的移动端和桌面端运行。Beta版本可扩展，允许添加多种技术。...

webrtc-ips

Solicitudes de direcciones IP STUN para WebRTC Demo: https://diafygi.github.io/webrtc-ips/ Qué hace esto Firefox y Chrome han implementado WebRTC, que permite realizar solicitudes a servidores STUN que devuelven las direcciones IP locales y públicas del usuario. Los resultados de estas solicitude...

GHSA-GV8G-6JFV-CJ7X vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2025-14321

CVE-2025-14321 Proof of Concept Description PoC for a Use-After-Free UAF vulnerability in the RTCEncodedFrameBase component of Firefox, exploitable via the WebRTC Encoded Transforms API. CVE-2025-14321 : The destructor of RTCEncodedFrameBase does not call DetachArrayBuffer when releasing the nati...

Linux Distros Unpatched Vulnerability : CVE-2026-84347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

SUSE CVE-2026-84347

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-69740

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-84347

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84347

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84347

A flaw was found in WebRTC, a component of Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code within the browser's sandbox. Exploitation occurs when a user visits a specially crafted HTML page, leading to potential compromise of the affected system...

CVE-2026-84347

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allow...

CVE-2026-84347

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84347

CVE-2026-84347 is a use after free vulnerability in the WebRTC component of Google Chrome prior to 152.0.7977.75 . A remote attacker can exploit it via a crafted HTML page to execute arbitrary code inside the Chrome sandbox . The vulnerability carries a CVSS 3.1 score of 8.8 (High) with user inte...

CVE-2026-84347

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...