GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
Search

Find a vulnerability

Search criteria

    1 vulnerability found for New Release UFONet by unknown

    GCVE-1988-2026-0114

    Vulnerability from gna-1988 – Published: 2026-09-07 13:20 – Updated: 2026-09-07 13:20
    VLAI
    Title
    New Release: UFONet v2.0 - "R3DST4R!"...
    Summary
    Hi Community, I am glad to present a new release of this tool: - https://ufonet.03c8.net --------- "UFONet is a free software, P2P and cryptographic -disruptive toolkit- that allows to perform DoS and DDoS attacks; on the Layer 7 (APP/HTTP) through the exploitation of Open Redirect vectors on third-party websites to act as a botnet and on the Layer3 (Network) abusing the protocol." "It also works as an encrypted DarkNET to publish and receive content by creating a global client/server network." --------- Main options are: * DDoS (botnet) + DoS * Auto-update * Clean code * Documentation with examples * Web/GUI Interface * Proxy to connect to 'zombies' (ex: tor) * Change HTTP Headers (User-Agent, Referer, Host...) * Configure requests (Timeout, Retries, Delay, Threads...) * Search for 'zombies' on different search engines * Test vulnerabilities on 'zombies' * Download/Upload 'zombies' from/to others * Inspect a target (HTML objects sizes) * Set a place to 'bite' on a target (ex: big file) * Control number of rounds to attack * Apply cache evasion techniques * Advanced queries (ex: Verb tunneling exploitation) * Supports GET/POST * Multithreading * Order 'zombies' to attack you for benchmarking * Geomapping / Visual data * [...] --------- FAQ: - https://ufonet.03c8.net/FAQ.html --------- Packages: * [source]: - https://code.03c8.net/epsylon/ufonet * [mirror]: - https://github.com/epsylon/ufonet * [.zip]: - https://ufonet.03c8.net/ufonet/ufonet-v2.0.zip * [.tar.gz]: - https://ufonet.03c8.net/ufonet/ufonet-v2.0.tar.gz --------- Torrents: * [.zip.torrent]: - https://ufonet.03c8.net/ufonet/ufonet-v2.0.zip.torrent * [.tar.gz.torrent]: - https://ufonet.03c8.net/ufonet/ufonet-v2.0.tar.gz.torrent ------------------------- Happy crashing! ;-) _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: https://seclists.org/fulldisclosure/
    Severity
    No CVSS data available.
    Impacted products
    Credits

    {
      "containers": {
        "cna": {
          "affected": [
            {
              "product": "New Release UFONet",
              "vendor": "unknown",
              "versions": [
                {
                  "status": "affected",
                  "version": "unknown"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "psy"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Hi Community,\n\nI am glad to present a new release of this tool:\n\n  - https://ufonet.03c8.net\n\n---------\n\n\"UFONet is a free software, P2P and cryptographic -disruptive toolkit-\nthat allows to perform DoS and DDoS attacks; on the Layer 7 (APP/HTTP)\nthrough the exploitation of Open Redirect vectors on third-party\nwebsites to act as a botnet and on the Layer3 (Network) abusing the\nprotocol.\"\n\n\"It also works as an encrypted DarkNET to publish and receive content by\ncreating a global client/server network.\"\n\n---------\n\nMain options are:\n\n  * DDoS (botnet) + DoS\n  * Auto-update\n  * Clean code\n  * Documentation with examples\n  * Web/GUI Interface\n  * Proxy to connect to \u0027zombies\u0027 (ex: tor)\n  * Change HTTP Headers (User-Agent, Referer, Host...)\n  * Configure requests (Timeout, Retries, Delay, Threads...)\n  * Search for \u0027zombies\u0027 on different search engines\n  * Test vulnerabilities on \u0027zombies\u0027\n  * Download/Upload \u0027zombies\u0027 from/to others\n  * Inspect a target (HTML objects sizes)\n  * Set a place to \u0027bite\u0027 on a target (ex: big file)\n  * Control number of rounds to attack\n  * Apply cache evasion techniques\n  * Advanced queries (ex: Verb tunneling exploitation)\n  * Supports GET/POST\n  * Multithreading\n  * Order \u0027zombies\u0027 to attack you for benchmarking\n  * Geomapping / Visual data\n  * [...]\n\n---------\n\nFAQ:\n\n  - https://ufonet.03c8.net/FAQ.html\n\n---------\n\nPackages:\n\n  * [source]:\n\n  - https://code.03c8.net/epsylon/ufonet\n\n  * [mirror]:\n\n  - https://github.com/epsylon/ufonet\n\n  * [.zip]:\n\n  - https://ufonet.03c8.net/ufonet/ufonet-v2.0.zip\n\n  * [.tar.gz]:\n\n  - https://ufonet.03c8.net/ufonet/ufonet-v2.0.tar.gz\n\n---------\n\nTorrents:\n\n  * [.zip.torrent]:\n\n  - https://ufonet.03c8.net/ufonet/ufonet-v2.0.zip.torrent\n\n  * [.tar.gz.torrent]:\n\n  - https://ufonet.03c8.net/ufonet/ufonet-v2.0.tar.gz.torrent\n\n-------------------------\n\nHappy crashing! ;-)\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives \u0026 RSS: https://seclists.org/fulldisclosure/"
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-07T13:20:22Z",
            "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
            "shortName": "VULNARCHIVE"
          },
          "references": [
            {
              "tags": [
                "technical-description"
              ],
              "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Jul/25"
            },
            {
              "tags": [
                "technical-description"
              ],
              "url": "https://seclists.org/fulldisclosure/2026/Jul/25"
            },
            {
              "url": "https://code.03c8.net/epsylon/ufonet"
            },
            {
              "url": "https://github.com/epsylon/ufonet"
            },
            {
              "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
            },
            {
              "url": "https://seclists.org/fulldisclosure/"
            },
            {
              "url": "https://ufonet.03c8.net"
            },
            {
              "url": "https://ufonet.03c8.net/FAQ.html"
            },
            {
              "url": "https://ufonet.03c8.net/ufonet/ufonet-v2.0.tar.gz"
            },
            {
              "url": "https://ufonet.03c8.net/ufonet/ufonet-v2.0.tar.gz.torrent"
            },
            {
              "url": "https://ufonet.03c8.net/ufonet/ufonet-v2.0.zip"
            },
            {
              "url": "https://ufonet.03c8.net/ufonet/ufonet-v2.0.zip.torrent"
            }
          ],
          "source": {
            "defect": [
              "https://seclists.org/fulldisclosure/2026/Jul/25"
            ],
            "discovery": "EXTERNAL"
          },
          "title": "New Release: UFONet v2.0 - \"R3DST4R!\"...",
          "x_gcve": [
            {
              "recordType": "advisory",
              "relationships": [],
              "vulnId": "GCVE-1988-2026-0114",
              "x_vulnarchive": {
                "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Jul/25",
                "automated": true,
                "contentSha256": "af8ac220085aed5367490a941b8a28dbc4bf141647e436b2041276168b869143",
                "evidenceScore": 6,
                "messageId": "",
                "originalUrl": "https://seclists.org/fulldisclosure/2026/Jul/25",
                "policy": "vulnarchive-1",
                "sourceFormat": "text/html",
                "sourcePublishedAt": "2026-07-09T19:05:11Z"
              }
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "assignerShortName": "VULNARCHIVE",
        "datePublished": "2026-09-07T13:20:22Z",
        "dateUpdated": "2026-09-07T13:20:22Z",
        "state": "PUBLISHED",
        "vulnId": "GCVE-1988-2026-0114"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }