CVE-2021-3773 PoC — netfilter 信息泄露漏洞

Description

This script exploits the "Port Shadow" vulnerability (CVE-2021-3773) in OpenVPN servers using Netfilter for NAT.

介绍

<div align="center">

 #  🇮🇱  **#BringThemHome #NeverAgainIsNow**   🇮🇱

**We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.
https://stories.bringthemhomenow.net/**

</div>

# 🚀 Port Shadow Exploit (CVE-2021-3773) 🚀

### Description
This script exploits the "Port Shadow" vulnerability (CVE-2021-3773) in OpenVPN servers using Netfilter for NAT. The attack involves creating port shadows to deanonymize victims or perform a man-in-the-middle attack.

### Features
- **🎯 Targeted Attacks**: Dynamically detects the victim’s open ports.
- **⚡ Concurrent Threads**: Utilizes threading for efficient scanning.
- **🛡️ Advanced Stealth Techniques**: Randomizes scan intervals to evade detection.
- **📜 Detailed Logging**: Maintains logs of the attack process for monitoring.

### Requirements
- Python 3.x
- Scapy library
- Root or Administrator privileges

### Installation
1. **Clone the Repository**:
    ```sh
    git clone https://github.com/d0rb/CVE-2021-3773.git
    cd port-shadow-exploit
    ```

2. **Install Dependencies**:
    ```sh
    pip install -r requirements.txt
    ```

### Usage
1. **Configuration**:
    - Edit the script to set the appropriate IP addresses and port ranges.

2. **Run the Script**:
    ```sh
    sudo python3 port_shadow_exploit.py
    ```

### Ethical Use ⚖️
This script is for **educational purposes only**. Use it only in controlled environments with explicit permission. Unauthorized use can lead to **legal consequences**.

### Disclaimer
The authors are not responsible for any misuse of this script. Always follow ethical guidelines and ensure you have the proper authorization before conducting any network testing.


### Contributing 🤝
Contributions are welcome! Please submit a pull request or open an issue to discuss your ideas.

---

**Stay ethical, stay safe!** 🚀

---

文件快照

备注