PapayaJackal/ipeeyoupeewepee

PoC

Scanner and attack suite for hosts that forward unauthenticated packets via IPIP and GRE protocols. (CVE-2020-10136 CVE-2024-7595)

view exploit source poc_in_githubauthor PapayaJackalpublished 2025-01-21catalog poc_in_github

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-7595US	medium6.5	1.61% (76th)	Exploit	2025-02-05
GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface…
CVE-2020-10136US	medium5.3	28.5% (98th)	Exploit	2020-06-02
IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and o…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.