Forcer le débranchement d’un périphérique sur votre réseau

Home

KickThemOut – Déconnectez les tous !

Vous êtes sur un réseau saturé ? Besoin de dégager les parasites pour récupérer un peu de bande passante ? Ou même débrancher l’ordinateur de votre adolescent qui est captivé par un émission sur Netflix… Aucun problème avec KickThemOut, un script Python qui fonctionne sous Linux et macOS et qui permet grâce à une technique d’ARP Spoofing, de réduire à néant la connexion des autres appareils présents sur le même réseau local que vous. Cela permet de récupérer de la bande passante pour vous ou de jouer une vilaine blague à un membre de votre famille.

Je vous rassure c’est totalement sécuritaire, simplement arrêter (CTRL+C) le script pour que les machines visées retrouvent leur connectivité. Évidemment, c’est à utiliser à bon escient, dans un cadre local sur vos propres machines. Réfléchissez bien aussi à ce que vous allez couper, car cela pourrait engendrer d’autres problèmes.

Imaginez une personne malicieuse qui utilise cet outil sur votre réseau, plus aucun périphérique n’aurait accès à l’internet pour plusieurs jours, dépendant des idées du » hacker ». Il est donc important de bien sécuriser nos routeurs. Voici une petite démo:

Vous pouvez communiquer avec moi par courriel: tnt@tntsecurite.ca

Home

📂 Différentes attaques

CVE-2024-48007 13 décembre 2024

Medium Severity Description Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability. A Remote unauthenticated attacker could potentially exploit this vulnerability by gaining access to the source code, easily retrieving these secrets and reusing them to access the system leading to gaining access to unauthorized data. Read more at https://www.tenable.com/cve/CVE-2024-48007

CVE-2024-48008 13 décembre 2024

Medium Severity Description Dell RecoverPoint for Virtual Machines 6.0.x contains a OS Command Injection vulnerability. An Low privileged remote attacker could potentially exploit this vulnerability leading to information disclosure ,allowing of unintended actions like reading files that may contain sensitive information Read more at https://www.tenable.com/cve/CVE-2024-48008

CVE-2024-55889 13 décembre 2024

Medium Severity Description phpMyFAQ is an open source FAQ web application. Prior to version 3.2.10, a vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim's machine upon page visit by embedding it in an element without user interaction or explicit consent. Version 3.2.10 fixes the […]

CVE-2024-22461 13 décembre 2024

High Severity Description Dell RecoverPoint for Virtual Machines 6.0.x contains an OS Command injection vulnerability. A low privileged remote attacker could potentially exploit this vulnerability by running any command as root, leading to gaining of root-level access and compromise of complete system. Read more at https://www.tenable.com/cve/CVE-2024-22461

CVE-2024-11986 13 décembre 2024

Critical Severity Description Improper input handling in the 'Host Header' allows an unauthenticated attacker to store a payload in web application logs. When an Administrator views the logs using the application's standard functionality, it enables the execution of the payload, resulting in Stored XSS or 'Cross-Site Scripting'. Read more at https://www.tenable.com/cve/CVE-2024-11986

APPLE-SA-12-11-2024-9 Safari 18.2 12 décembre 2024

Posted by Apple Product Security via Fulldisclosure on Dec 12APPLE-SA-12-11-2024-9 Safari 18.2 Safari 18.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/121846. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Safari Available for: macOS Ventura and macOS Sonoma Impact: On a […]

APPLE-SA-12-11-2024-8 visionOS 2.2 12 décembre 2024

Posted by Apple Product Security via Fulldisclosure on Dec 12APPLE-SA-12-11-2024-8 visionOS 2.2 visionOS 2.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/121845. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Crash Reporter Available for: Apple Vision Pro Impact: An app may […]

APPLE-SA-12-11-2024-7 tvOS 18.2 12 décembre 2024

Posted by Apple Product Security via Fulldisclosure on Dec 12APPLE-SA-12-11-2024-7 tvOS 18.2 tvOS 18.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/121844. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. AppleMobileFileIntegrity Available for: Apple TV HD and Apple TV 4K (all […]

APPLE-SA-12-11-2024-6 watchOS 11.2 12 décembre 2024

Posted by Apple Product Security via Fulldisclosure on Dec 12APPLE-SA-12-11-2024-6 watchOS 11.2 watchOS 11.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/121843. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. AppleMobileFileIntegrity Available for: Apple Watch Series 6 and later Impact: A […]

APPLE-SA-12-11-2024-5 macOS Ventura 13.7.2 12 décembre 2024

Posted by Apple Product Security via Fulldisclosure on Dec 12APPLE-SA-12-11-2024-5 macOS Ventura 13.7.2 macOS Ventura 13.7.2 addresses the following issues. Information about the security content is also available at https://support.apple.com/121842. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Apple Software Restore Available for: macOS Ventura Impact: An […]