CVE-2019-9580

CVE-2019-9580 - StackStorm exploiting CORS null origin to gain RCE Prior to 2.10.3/2.9.3, if the origin of the request was unknown, we would return null. null can result in a successful request from an unknown origin in some clients. Allowing the possibility of XSS style attacks against the...

uBlockOrigin-HUGE-AI-Blocklist

uBlockOrigin & uBlacklist Huge AI Blocklist A huge blocklist of manually curated sites 1000+ that contain AI generated content, for the purposes of cleaning image search engines Google Search, DuckDuckGo, and Bing with uBlock Origin or uBlacklist. Also works on mobile iOS, iPadOS, Android via...

toxssin

toxssin Purpose toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting XSS vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool...

cloudbunny

CloudBunny CloudBunny is a tool to capture the origin server that uses a WAF as a proxy or protection. You can read more about the tool here: https://tinyurl.com/y8p48wb3 How works In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye. To use the tools...

CORStest

CORStest 一个简单的 CORS 配置错误扫描器 基于James Kettle 的研究 CORStest 是一个用于发现跨源资源共享（CORS）配置错误的 快速 工具，使用 Python 3 编写。它接受一个文本文件作为输入，该文件可以包含域名或 URL 列表。目前，通过发送特定的 Origin 请求头并检查 Access-Control-Allow-Origin 响应头，可以检测到以下潜在漏洞： 开发后门： 不安全的开发源（如 JSFiddle 或 CodePen）被允许访问此资源 Origin 反射： 来源被简单回显在 ACAO 头中，任何站点都被允许访问此资源 Null...

dref

DNS Rebinding Exploitation Framework This project is no longer maintained. dref does the heavy-lifting for DNS rebinding. The following snippet from one of its built-in payloads shows the framework being used to scan a local subnet from a hooked browser; after identifying live web services it...

CloudFlair

CloudFlair Important note: As of late 2024, Censys does not provide API access to free accounts anymore. This means CloudFlair does not work with free Censys accounts anymore. CloudFlair is a tool to find origin servers of websites protected by CloudFlare or CloudFront which are publicly exposed...

CVE-2026-43700

CVE-2026-43700 WebKit WebGPU importExternalTexture Fuga de información entre orígenes. Safari rojo/verde/azul/blanco Versión corregida = 26.5.2: PATCHED importExternalTexture bloqueado: SecurityError Principio GPUDevice.importExternalTexturesource: HTMLVideoElement importa un video como muestreab...

CVE-2023-45857-Demo

Demo to verify the behavior of axios vulnerability CVE-2023-45857 1. Start with dev container 2. Run npm run dev on the app container 3. Access http://app.localhost 4. Verify that XSRF-TOKEN is set in the Cookie using the browser's developer tools The value is CREDENTIALTOKEN HttpOnly is false...

bypass-firewalls-by-DNS-history

Bypass firewalls by abusing DNS history This script will try to find: the direct IP address of a server behind a firewall like Cloudflare, Incapsula, SUCURI ... an old server which still running the same inactive and unmaintained website, not receiving active traffic because the A DNS record is n...

Langflow AI <= 1.6.9 - CORS Misconfiguration

Langflow AI versions 1.6.9 and earlier are vulnerable to a CORS misconfiguration that allows any origin to make credentialed requests. Combined with SameSite=None cookies, this enables cross-origin token theft and subsequent remote code execution via the /api/v1/validate/code endpoint. id:...

CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS

CVE-2023-47014-Sticky-Notes-App-Using-PHP-with-Source-Code-v1.0-CSRF-to-CORS Exploit Author: emirhanerdogu Vendor Homepage https://www.sourcecodester.com/php/16928/sticky-notes-app-using-php-source-code.html Software Link...

WebKit-NavigationAPI-SOP-Bypass

WebKit-NavigationAPI-SOP-Bypass WebKit Navigation API — Same-Origin Policy bypass via cross-port interception CVE-2026-20643...

CVE-2025-55462

CVE-2025-55462 Resumen de la vulnerabilidad Se identificó una mala configuración de Cross-Origin Resource Sharing CORS en Eramba Community y Enterprise Editions v3.26.0. La aplicación refleja los encabezados Origin controlados por el atacante en el encabezado de respuesta...

Cloudflare-Bypass

Cloudflare-Bypass Cloudflare Bypass tools | PentestCore Is a tool for bypassing Cloudflare that you can use to get the master IP of site server. How to use Linux : Enter the below command in the terminal : git clone https://github.com/pentestcore/Cloudflare-Bypass.git cd Cloudflare-Bypass Install...

dns-rebind-toolkit

DNS Rebind Toolkit Demo | Security Advisory | Included Payloads | FAQ DISCLAIMER: This software is for educational purposes only. This software should not be used for illegal activity. The author is not responsible for its use. Don't be a dick. DNS Rebind Toolkit is a frontend JavaScript framewor...

CF-Hero

CF-Hero CF-Hero What's it? • Features • Background • Installation • Usage • Running cf-hero • ZoomEye Sponsor • To Do What's it? CF-Hero is a comprehensive reconnaissance tool developed to discover the real IP addresses of web applications protected by Cloudflare. It performs multi-source...

chaos

chaos chaos es un escáner de IP de 'origen' desarrollado por RST en colaboración con ChatGPT. Es una utilidad de nicho con una audiencia prevista de probadores de penetración y cazadores de bugs principalmente. Una IP de origen es una expresión técnica que describe la dirección IP pública final...

chaos

chaos chaos is an 'origin' IP scanner developed by RST in collaboration with ChatGPT. It is a niche utility with an intended audience of mostly penetration testers and bug hunters. An origin-IP is a term-of-art expression describing the final public IP destination for websites that are publicly...

hakoriginfinder

hakoriginfinder 用于发现反向代理背后的原始主机的工具。可用于绕过 WAF 及其他反向代理。 工作原理 此工具首先向您提供的主机名/URL 发起 HTTP 请求并存储响应，然后向您提供的每个 IP 地址通过 HTTP（80）和 HTTPS（443）默认发起请求（更多端口可通过选项指定），并将 Host 头设置为原始主机:port。随后使用 Levenshtein 算法将每个响应与原始响应进行比较，以确定相似度。如果响应相似，则视为匹配。 用法 通过 stdin 提供 IP 地址列表，并通过 -h 选项提供原始主机名。例如： root@kitploit: prips...