GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

GCVE-1988-2026-0114

Vulnerability from gna-1988 – Published: 2026-09-07 13:20 – Updated: 2026-09-07 13:20
VLAI
Title
New Release: UFONet v2.0 - "R3DST4R!"...
Summary
Hi Community, I am glad to present a new release of this tool: - https://ufonet.03c8.net --------- "UFONet is a free software, P2P and cryptographic -disruptive toolkit- that allows to perform DoS and DDoS attacks; on the Layer 7 (APP/HTTP) through the exploitation of Open Redirect vectors on third-party websites to act as a botnet and on the Layer3 (Network) abusing the protocol." "It also works as an encrypted DarkNET to publish and receive content by creating a global client/server network." --------- Main options are: * DDoS (botnet) + DoS * Auto-update * Clean code * Documentation with examples * Web/GUI Interface * Proxy to connect to 'zombies' (ex: tor) * Change HTTP Headers (User-Agent, Referer, Host...) * Configure requests (Timeout, Retries, Delay, Threads...) * Search for 'zombies' on different search engines * Test vulnerabilities on 'zombies' * Download/Upload 'zombies' from/to others * Inspect a target (HTML objects sizes) * Set a place to 'bite' on a target (ex: big file) * Control number of rounds to attack * Apply cache evasion techniques * Advanced queries (ex: Verb tunneling exploitation) * Supports GET/POST * Multithreading * Order 'zombies' to attack you for benchmarking * Geomapping / Visual data * [...] --------- FAQ: - https://ufonet.03c8.net/FAQ.html --------- Packages: * [source]: - https://code.03c8.net/epsylon/ufonet * [mirror]: - https://github.com/epsylon/ufonet * [.zip]: - https://ufonet.03c8.net/ufonet/ufonet-v2.0.zip * [.tar.gz]: - https://ufonet.03c8.net/ufonet/ufonet-v2.0.tar.gz --------- Torrents: * [.zip.torrent]: - https://ufonet.03c8.net/ufonet/ufonet-v2.0.zip.torrent * [.tar.gz.torrent]: - https://ufonet.03c8.net/ufonet/ufonet-v2.0.tar.gz.torrent ------------------------- Happy crashing! ;-) _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: https://seclists.org/fulldisclosure/
Severity
No CVSS data available.
Impacted products
Vendor Product Version CPE status
unknown New Release UFONet Affected: unknown
guessed Create a notification for this product.
Credits

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "New Release UFONet",
          "vendor": "unknown",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "psy"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Hi Community,\n\nI am glad to present a new release of this tool:\n\n  - https://ufonet.03c8.net\n\n---------\n\n\"UFONet is a free software, P2P and cryptographic -disruptive toolkit-\nthat allows to perform DoS and DDoS attacks; on the Layer 7 (APP/HTTP)\nthrough the exploitation of Open Redirect vectors on third-party\nwebsites to act as a botnet and on the Layer3 (Network) abusing the\nprotocol.\"\n\n\"It also works as an encrypted DarkNET to publish and receive content by\ncreating a global client/server network.\"\n\n---------\n\nMain options are:\n\n  * DDoS (botnet) + DoS\n  * Auto-update\n  * Clean code\n  * Documentation with examples\n  * Web/GUI Interface\n  * Proxy to connect to \u0027zombies\u0027 (ex: tor)\n  * Change HTTP Headers (User-Agent, Referer, Host...)\n  * Configure requests (Timeout, Retries, Delay, Threads...)\n  * Search for \u0027zombies\u0027 on different search engines\n  * Test vulnerabilities on \u0027zombies\u0027\n  * Download/Upload \u0027zombies\u0027 from/to others\n  * Inspect a target (HTML objects sizes)\n  * Set a place to \u0027bite\u0027 on a target (ex: big file)\n  * Control number of rounds to attack\n  * Apply cache evasion techniques\n  * Advanced queries (ex: Verb tunneling exploitation)\n  * Supports GET/POST\n  * Multithreading\n  * Order \u0027zombies\u0027 to attack you for benchmarking\n  * Geomapping / Visual data\n  * [...]\n\n---------\n\nFAQ:\n\n  - https://ufonet.03c8.net/FAQ.html\n\n---------\n\nPackages:\n\n  * [source]:\n\n  - https://code.03c8.net/epsylon/ufonet\n\n  * [mirror]:\n\n  - https://github.com/epsylon/ufonet\n\n  * [.zip]:\n\n  - https://ufonet.03c8.net/ufonet/ufonet-v2.0.zip\n\n  * [.tar.gz]:\n\n  - https://ufonet.03c8.net/ufonet/ufonet-v2.0.tar.gz\n\n---------\n\nTorrents:\n\n  * [.zip.torrent]:\n\n  - https://ufonet.03c8.net/ufonet/ufonet-v2.0.zip.torrent\n\n  * [.tar.gz.torrent]:\n\n  - https://ufonet.03c8.net/ufonet/ufonet-v2.0.tar.gz.torrent\n\n-------------------------\n\nHappy crashing! ;-)\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives \u0026 RSS: https://seclists.org/fulldisclosure/"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-07T13:20:22Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Jul/25"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Jul/25"
        },
        {
          "url": "https://code.03c8.net/epsylon/ufonet"
        },
        {
          "url": "https://github.com/epsylon/ufonet"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://ufonet.03c8.net"
        },
        {
          "url": "https://ufonet.03c8.net/FAQ.html"
        },
        {
          "url": "https://ufonet.03c8.net/ufonet/ufonet-v2.0.tar.gz"
        },
        {
          "url": "https://ufonet.03c8.net/ufonet/ufonet-v2.0.tar.gz.torrent"
        },
        {
          "url": "https://ufonet.03c8.net/ufonet/ufonet-v2.0.zip"
        },
        {
          "url": "https://ufonet.03c8.net/ufonet/ufonet-v2.0.zip.torrent"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Jul/25"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "New Release: UFONet v2.0 - \"R3DST4R!\"...",
      "x_gcve": [
        {
          "recordType": "advisory",
          "relationships": [],
          "vulnId": "GCVE-1988-2026-0114",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Jul/25",
            "automated": true,
            "contentSha256": "af8ac220085aed5367490a941b8a28dbc4bf141647e436b2041276168b869143",
            "evidenceScore": 6,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Jul/25",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-07-09T19:05:11Z"
          }
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-09-07T13:20:22Z",
    "dateUpdated": "2026-09-07T13:20:22Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0114"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Loading…