35367 matches found
requests-ip-rotator
Proudly sponsored by Swiftproxy High-performance residential proxies with an 80M+ IP pool across 195+ countries — improve request success rates and reduce IP blocks during large-scale data collection and browser automation. Perfect for use with requests-ip-rotator, Playwright, Selenium, and other...
bypass-url-parser
Bypass Url Parser Tool that tests MANY url bypasses to reach a 40X protected page. If you wonder why this code is nothing but a dirty curl wrapper, here's why: Most of the python requests do url/path/parameter encoding/decoding, and I hate this. If I submit raw chars, I want raw chars to be sent...
CVE-2026-47837 Spring Cloud Config Server Monitor Endpoint Does Not Validate Webhook Requests
Missing Authentication for Critical Function vulnerability in Spring Spring Cloud Config allows Webhook requests to Spring Cloud Config Server's /monitor endpoint are not validated. This issue affects Spring Cloud Config: from 5.0.0 through 5.0.4, from 4.3.0 through 4.3.4, from 4.0.0 through 4.2....
scorecard
OpenSSF Scorecard...
beef
=============================================================================== root@kitploit: Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com See the file 'doc/COPYING' for copying permission...
dnstwist
See what sort of trouble users can get in trying to type your domain name. Find lookalike domains that adversaries can use to attack you. Can detect typosquatters, phishing attacks, fraud, and brand impersonation. Useful as an additional source of targeted threat intelligence. DNS fuzzing is an...
w3af
w3af - Web Application Attack and Audit Framework w3af is an open source web application security scanner which helps developers and penetration testers identify and exploit vulnerabilities in their web applications. The scanner is able to identify 200+ vulnerabilities, including Cross-Site...
CVE-2022-1388
CVE-2022-1388 في إصدارات F5 BIG-IP 16.1.x الأقدم من 16.1.2.2، وإصدارات 15.1.x الأقدم من 15.1.5.1، وإصدارات 14.1.x الأقدم من 14.1.4.6، وإصدارات 13.1.x الأقدم من 13.1.5، وجميع إصدارات 12.1.x و11.6.x، قد تتجاوز الطلبات غير المعلنة مصادقة iControl REST. استخدم أمر cURL التالي في سطر واحد لاختبار هذه...
CVE-2022-24112
CVE-2022-24112 CVE-2022-24112: Apache APISIX apisix/batch-requests RCE nuclei-Vorlage: CVE-2022-24112.yaml Die Ausnutzung dieser Schwachstelle ähnelt im Wesentlichen der von CVE-2021-45232; in beiden Fällen wird die Autorisierung umgangen oder ohne Autorisierung vorgegangen, um bösartige filterfu...
burpflow
BurpFlow BurpFlow è un tool CLI Node.js leggero che instrada le richieste HTTP attraverso un proxy Burp Suite, consentendo ai tester di sicurezza di caricare e analizzare rapidamente gli URL di ricognizione all'interno di Burp. 🎯 Cos'è BurpFlow? BurpFlow è un tool CLI di automazione della...
CVE-2026-6992-PoC
CVE-2026-6992-PoC Proof-of-Concept für die Bluetooth-PIN-RCE-Injection CVE-2026-6992, überarbeitet von https://github.com/utmost3/cve/issues/2. Ich nehme keine Anerkennung für die Entdeckung der Sicherheitslücke. Dies dient ausschließlich zu Bildungs- und Portfoliozwecken. Für Geräte, die keine...
CVE-2022-24816
Verwendung des CVE-2022-24816-Skripts Voraussetzungen 1. Repository klonen : root@kitploit: git clone https://github.com/c1ph3rbyt3/CVE-2022-24816.git cd CVE-2022-24816 2. Abhängigkeiten installieren : Stelle sicher, dass Python 3 installiert ist. Installiere dann die erforderlichen Abhängigkeite...
CVE-2022-46364-Poc
CVE-2022-46364 Exploit Apache CXF SSRF tramite MTOM XOP:Include | CVSS 9.8 CRITICO Vulnerabilità Apache CXF -s -d -t, --target - Endpoint SOAP CXF vulnerabile obbligatorio -s, --ssrf-url - URL interno da esfiltrare obbligatorio -d, --domain - Dominio di destinazione predefinito: localhost...
CVE-2022-46364---Apache-CXF-XOP-Include-LFI-PoC
Apache CXF XOP Include LFI CVE-2022-46364 Übersicht Dieses Repository enthält einen Proof-of-Concept PoC-Exploit für CVE-2022-46364 , eine Local File Inclusion LFI-Sicherheitslücke in Apache CXF. Die Sicherheitslücke entsteht durch unsachgemäße Handhabung von XOP XML-binary Optimized Packaging...
sricam-gsoap2.8-dos-exploit
sricam-gsoap2.8-dos-exploit Sricam-gSOAP2.8-DoS-Exploit Proof of Concept Proof-of-Concept-Code: SricamgSOAPPoCexploit.sh CVE-2019-6973 https://vulners.com/cve/CVE-2019-6973 Thanks to the CVE Assignment Team for their help structuring the following: Beschreibung Sricam-IP-Überwachungskameras sind...
CVE-2018-18820
CVE-2018-18820 Checker per server Icecast per CVE-2018-18820 Nessuna necessità di informazioni aggiuntive, tutto il contesto è all'interno del file main.py. Richiede solo requests, che abbiamo già tutti...
CVE-2022-22947
CVE-2022-22947 Exp Questo bug sembra non presentarsi sempre. python3 requests...
POC-CVE-2025-48988-CVE-2025-48976
CVE-2025-48988 & CVE-2025-48976 Informazioni Questo progetto esegue un semplice endpoint di upload file con Tomcat 10.1.41 e un Jakarta Servlet. L'exploit esegue, di default, 1000 richieste multipart parallelizzate con 1000 parti e 50 header per parte, da 50 worker. Eseguire il POC Compila ed...