jedisct1/blacknurse

Stars
170
Rank 223,357 (Top 5 %)
Language
C
License
BSD 2-Clause "Sim...
Created almost 8 years ago
Updated over 1 year ago

jedisct1/blacknurse

jedisct1

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

BlackNurse attack PoC

A simple PoC for the Blacknurse attack.

"Blacknurse is a low bandwidth ICMP attack that is capable of doing denial of service to well known firewalls".

Blacknurse apparently makes the CPU hot on:

Cisco ASA 5505, 5506, 5515, 5525 , 5540 (default settings)
Cisco 6500 routers with SUP2T and Netflow v9 on the inbound interface - 100% CPU load
Cisco ASA 5550 (Legacy) and 5515-X (latest generation)
Cisco Router 897 - Can be mitigated
SonicWall - Misconfiguration can be changed and mitigated (Enable Anti-DDOS)
Palo Alto 5050 Firewalls with firmware 7.1.4-h2
Zyxel NWA3560-N (Wireless attack from LAN Side)
Zyxel Zywall USG50
Fortinet v5.4.1 - One CPU consumed
Fortigate units 60c and 100D (even with drop ICMP on)
SonicWall
Maybe more

See blacknurse.dk for the full list and updates.

Vendor responses:

This attack is 20+ years old, but it didn't had a logo.

libsodium

A modern, portable, easy to use crypto library.

dsvpn

A Dead Simple VPN.

piknik

Copy/paste anything over the network.

minisign

A dead simple tool to sign files and verify digital signatures.

libsodium.js

libsodium compiled to Webassembly and pure JavaScript, with convenient wrappers.

libhydrogen

A lightweight, secure, easy-to-use crypto library suitable for constrained environments.

pure-ftpd

Pure FTP server

libsodium-php

The PHP extension for libsodium.

swift-sodium

Safe and easy to use crypto for iOS and macOS

edgedns

A high performance DNS cache designed for Content Delivery Networks

libpuzzle

A library to quickly find visually similar images

iptoasn-webservice

Web service to map IP addresses to AS information, using iptoasn.com

dnsblast

A simple and stupid load testing tool for DNS resolvers

as-wasi

An AssemblyScript API layer for WASI system calls.

rust-jwt-simple

A secure, standard-conformant, easy to use JWT implementation for Rust.

wasm-crypto

A WebAssembly (via AssemblyScript) set of cryptographic primitives for building authentication and key exchange protocols.

rust-bloom-filter

A fast Bloom filter implementation in Rust

encpipe

The dum^H^H^Hsimplest encryption tool in the world.

Pincaster

A fast persistent nosql database with a HTTP/JSON interface, not only for geographical data.

UCarp

UCARP allows a couple of hosts to share common virtual IP addresses in order to provide automatic failover. It is a portable userland implementation of the secure and patent-free Common Address Redundancy Protocol (CARP, OpenBSD's alternative to the patents-bloated VRRP).

libsodium-doc

Gitbook documentation for libsodium

bitbar-dnscrypt-proxy-switcher

BitBar plugin to control dnscrypt-proxy usage

charm

A really tiny crypto library.

witx-codegen

WITX code and documentation generator for AssemblyScript, Zig, Rust and more.

siphash-js

A Javascript implementation of SipHash-2-4

rust-ed25519-compact

Small, wasm-friendly, zero-dependencies Ed25519 and X25519 implementation for Rust.

rsign2

A command-line tool to sign files and verify signatures in pure Rust.

go-minisign

Minisign verification library for Golang.

rust-nats

A simple NATS client library for Rust

zigly

The easiest way to write services for Fastly's Compute@Edge in Zig.

was-not-wasm

A hostile memory allocator to make WebAssembly applications more predictable.

webassembly-benchmarks

Libsodium WebAssembly benchmarks results.

rust-minisign

A pure Rust implementation of the Minisign signature tool.

zig-charm

A Zig version of the Charm crypto library.

rust-ffmpeg-wasi

ffmpeg 7 libraries precompiled for WebAsembly/WASI, as a Rust crate.

openssl-wasm

OpenSSL 3 compiled for WebAssembly/WASI (up-to-date, maintained)

rust-sthash

Very fast cryptographic hashing for large messages.

vtun

A mirror of VTUN, with some changes

iptrap

A simple, but damn fast sinkhole

boringssl-wasm

BoringSSL for WebAssembly/WASI

libsodium-signcryption

Signcryption using libsodium.

wasmsign

A tool to add and verify digital signatures to/from WASM binaries

libaegis

Portable C implementations of the AEGIS family of high-performance authenticated encryption algorithms.

blobcrypt

Authenticated encryption for streams and arbitrary large files using libsodium

rust-coarsetime

Time and duration crate optimized for speed

zig-minisign

Minisign reimplemented in Zig.

rust-siphash

SipHash (2-4, 1-3 + 128 bit variant) implementations for Rust

6Jack

A framework for analyzing/testing/fuzzing network applications.

rust-hyperloglog

A HyperLogLog implementation in Rust.

libchloride

Networking layer for libsodium, based on CurveCP

rust-qptrie

A qp-trie implementation in Rust

minicsv

A tiny, fast, simple, single-file, BSD-licensed CSV parsing library in C.

spake2-ee

A SPAKE2+ Elligator Edition implementation for libsodium 1.0.16+

massresolver

Mass DNS resolution tool

cpace

A CPace PAKE implementation using libsodium.

aegis-X

The AEGIS-128X and AEGIS-256X high performance ciphers.

rust-privdrop

A simple Rust crate to drop privileges

PureDB

PureDB is a portable and tiny set of libraries for creating and reading constant databases.

libclang_rt.builtins-wasm32.a

The missing libclang_rt.builtins-wasm32.a file to compile to WebAssembly.

c-ipcrypt

ipcrypt implementation in C

rust-dnsclient

A simple and secure DNS client crate for Rust.

rust-xoodyak

Xoodyak, a lightweight and versatile cryptographic scheme implemented in Rust.

fastly-terrarium-examples

Example code you can run in Fastly Terrarium: https://www.fastlylabs.com/

libsodium-xchacha20-siv

Deterministic/nonce-reuse resistant authenticated encryption scheme using XChaCha20, implemented on libsodium.

rust-geoip

GeoIP bindings for Rust

rust-minisign-verify

A small Rust crate to verify Minisign signatures.

whatsmyresolver

A tiny DNS server that returns the client (resolver) IP

libsodium-sys-stable

Sodiumoxide's libsodium-sys crate, but that installs stable versions of libsodium.

spritz

A C implementation of Spritz, a spongy RC4-like stream cipher and hash function.

metrohash-c

C version of the MetroHash function

rust-hmac-sha256

A small, self-contained SHA256 and HMAC-SHA256 implementation.

rust-cpace

A Rust implementation of CPace, a balanced PAKE.

rust-clockpro-cache

CLOCK-Pro cache replacement algorithm for Rust

rust-blind-rsa-signatures

RSA blind signatures in Rust

PHP-OAuth2-Provider

Skyrock OAuth2 server

rust-aegis

AEGIS high performance ciphers for Rust.

system-tuning-for-crypto

System tuning recommendations for running cryptographic applications

hashseq

A simple proof of work, mainly designed to mitigate DDoS attacks.

dnssector

A DNS library for Rust.

openssl-family-bench

A quick benchmark of {Open,Libre,Boring}SSL

randen-rng

A port of the Google Randen fast backtracking-resistant random generator to the C language.

Blogbench

A filesystem benchmark tool that simulates a realistic load

vue-dnsstamp

DNS Stamp calculator component for VueJS

supercop

Always up-to-date mirror of the SUPERCOP cryptographic benchmark.

yaifo

YAIFO [remote OpenBSD installer] for OpenBSD-current

ratelimit

Plug-and-play IP rate limiter in C

draft-aegis-aead

The AEGIS cipher family - Draft.

go-hpke-compact

A small and easy to use HPKE implementation in Go.

ipgrep

Extract, defang, resolve names and IPs from text

zig-rocca-s

An implementation of the ROCCA-S encryption scheme.

Simple-Comet-Server

HTTP long-polling server and javascript client library.

simpira384

An AES-based 384 bit permutation.

PHP-WebDAV-extension

The PHP WebDAV extension allows easy access to remote resources with PHP through the DAV protocol.

nonce-extension

Make AES-GCM safe to use with random nonces, for any practical number of messages.

rust-sealed_box

Sealed boxes implementation for Rust/WebAssembly.

zig-eddsa-key-blinding

A Zig implementation of EdDSA signatures with blind keys.

c-blind-rsa-signatures

Blind RSA signatures for OpenSSL/BoringSSL.

aes-torture

A software AES implementation to torture code generators.

js-base64-ct

Safe Base64 encoding/decoding in pure JavaScript.

rust-aes-wasm

Fast(er) AES-based constructions for WebAssembly and Rust.