目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1000

100.0%

CVE-2021-3773 PoC — netfilter 信息泄露漏洞

来源
关联漏洞
标题:netfilter 信息泄露漏洞 (CVE-2021-3773)
Description:netfilter是一款使用在Linux系统中的数据包过滤框架。 netfilter 中存在信息泄露漏洞。目前尚无此漏洞的相关信息,请随时关注CNNVD或厂商公告。
Description
This script exploits the "Port Shadow" vulnerability (CVE-2021-3773) in OpenVPN servers using Netfilter for NAT.
介绍

<div align="center">

 #  🇮🇱  **#BringThemHome #NeverAgainIsNow**   🇮🇱

**We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.
https://stories.bringthemhomenow.net/**

</div>

# 🚀 Port Shadow Exploit (CVE-2021-3773) 🚀

### Description
This script exploits the "Port Shadow" vulnerability (CVE-2021-3773) in OpenVPN servers using Netfilter for NAT. The attack involves creating port shadows to deanonymize victims or perform a man-in-the-middle attack.

### Features
- **🎯 Targeted Attacks**: Dynamically detects the victim’s open ports.
- **⚡ Concurrent Threads**: Utilizes threading for efficient scanning.
- **🛡️ Advanced Stealth Techniques**: Randomizes scan intervals to evade detection.
- **📜 Detailed Logging**: Maintains logs of the attack process for monitoring.

### Requirements
- Python 3.x
- Scapy library
- Root or Administrator privileges

### Installation
1. **Clone the Repository**:
    ```sh
    git clone https://github.com/d0rb/CVE-2021-3773.git
    cd port-shadow-exploit
    ```

2. **Install Dependencies**:
    ```sh
    pip install -r requirements.txt
    ```

### Usage
1. **Configuration**:
    - Edit the script to set the appropriate IP addresses and port ranges.

2. **Run the Script**:
    ```sh
    sudo python3 port_shadow_exploit.py
    ```

### Ethical Use ⚖️
This script is for **educational purposes only**. Use it only in controlled environments with explicit permission. Unauthorized use can lead to **legal consequences**.

### Disclaimer
The authors are not responsible for any misuse of this script. Always follow ethical guidelines and ensure you have the proper authorization before conducting any network testing.


### Contributing 🤝
Contributions are welcome! Please submit a pull request or open an issue to discuss your ideas.

---

**Stay ethical, stay safe!** 🚀

---
文件快照

[4.0K] /data/pocs/742e2920401ba206e0ded9e5965ffda7ef5c0889 ├── [3.1K] PoC.py └── [2.0K] README.md 0 directories, 2 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问,请发送邮件到 f.jinxu#gmail.com 索取本地快照(把 # 换成 @)。
    3. 神龙已为您对 POC 代码进行快照,为了长期维护,请考虑为本地 POC 付费/捐赠,感谢您的支持。