dfirtriage

dfirtriage Digital forensic acquisition tool for Windows-based incident response. How to Use To run, drop dfirtriage.exe on the target or connected USB drive and execute with admin rights, -h for help. DFIRTriage v6.0 User's Manual Description This document outlines the functionality and proper u...

EUVD-2026-92841

A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This issue affects the function mysqliquery of the file locateus.php of the component Doctor Search Endpoint. The manipulation of the argument doctorname leads to sql...

leakdb

LeakDB LeakDB 是一套工具集，旨在帮助组织构建和部署自己的内部明文“Have I Been Pwned”类服务。LeakDB 工具集能够对多 TB 级别的泄露数据集进行规范化、去重、索引、排序和搜索，无需向单个用户分发大文件。整理后，LeakDB 可以在不到十分之一秒内搜索 TB 级的数据，并且 LeakDB 服务器暴露了一个简单的 JSON API，可以通过命令行客户端或任何 HTTP 客户端进行查询。它可以部署为无服务器配置（使用 BigQuery 后端，无索引），也可以部署为带有索引的离线/传统服务器。 LeakDB...

leakdb

LeakDB LeakDB is a tool set designed to allow organizations to build and deploy their own internal plaintext "Have I Been Pwned"-like service. The LeakDB tool set can normalize, deduplicate, index, sort, and search leaked data sets on the multi-terabyte-scale, without the need to distribute large...

Cisco ASA Permissive List of Allowed Inputs (CVE-2021-34787)

A vulnerability in the identity-based firewall IDFW rule processing feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass security protections. This vulnerability is due to improper...

CVE-2023-36884-MS-Office-HTML-RCE

CVE-2023-36884: RCE en MS Office HTML con documentos manipulados El 11 de julio de 2023, Microsoft publicó un parche destinado a abordar múltiples vulnerabilidades de ejecución remota de código RCE explotadas activamente. Esta acción también sacó a la luz una campaña de phishing orquestada por un...

falla

FAllA 一款针对超过15个搜索引擎的CLI爬虫工具，包括Google、duckduckgo、Bing、Ask等。 注意： 仅用于教育目的，本人不对该工具的滥用负责！ 环境要求 Python（3.x） Docker-CE（并非所有搜索引擎都需要，仅部分搜索需要） 如何安装 你需要安装所有依赖： pip3 install -r requirements.txt 安装geckodriver： For linux users sudo apt install firefox-geckodriver For other OS's users, please check releases on...

CVE-2024-41503

CVE-2024-41503 CVE: CVE-2024-41503 Software: Jetimob Plataforma Imobiliaria CRM/ERP/CMS Versión: 20240627-0 Vulnerabilidad: Cross-Site Scripting XSS Almacenado Descripción: La función "Busca" búsqueda utilizada en toda la aplicación contiene una opción de filtro que se puede guardar; al guardarla...

SMWYG-Show-Me-What-You-Got

SMWYG-Show-Me-What-You-Got Esta herramienta permite realizar OSINT y reconocimiento sobre una organización o un individuo. Permite buscar en 1.4 mil millones de credenciales en texto claro que fueron filtradas como parte de la filtración BreachCompilation. Esta base de datos hace que encontrar...

CVE-2026-105470

A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This issue affects the function mysqliquery of the file locateus.php of the component Doctor Search Endpoint. The manipulation of the argument doctorname leads to sql...

awesome-shodan-queries

Awesome Shodan Search Queries 随着时间的推移，我收集了一系列有趣、搞笑且令人沮丧的搜索查询，用于输入 Shodan——这个（字面意义上的）互联网搜索引擎。有些返回令人捂脸的结果，而另一些则暴露出野外的严重和/或古老漏洞。 大多数搜索过滤器需要 Shodan 帐户。 你可以假设这些查询在可能的情况下只返回未加密/开放的实例。为了你自己的法律利益，如果它们不是开放的，请不要尝试登录（即使使用默认密码）！通过添加过滤器如 country:US 或 org:"Harvard University" 或 hostname:"nasa.gov" 来缩小结果范围。...

nextjs-CVE-2025-29927-hunter

Acerca de Una herramienta simple en Python que automatiza búsquedas en Shodan y filtra IPs/dominios objetivo para identificar activos potencialmente vulnerables a CVE-2025-29927 en despliegues de Next.js. Uso Extraer tanto IPs como dominios python3 nextjs-CVE-2025-29927-hunter.py -t target.com So...

cve-exploit

CVE-EXPLOIT 请仅用于合法目的 使用本软件。 我对您的行为不承担任何责任。 使用 Python 3.11.2 由 Edu0x01 制作 描述 cve-exploit 是一个用于查找 CVE 和漏洞利用集的中心。它基于官方 NIST、ExploitDB 和 Github 数据库。该工具可以快速便捷地搜索 CVE 及其关联的漏洞利用，能够检测漏洞利用的编译选项，还可用于列出最新的高危漏洞。 安装 通过 PIP 安装： apt-get install python3 python3-pip python3-dev git libssl-dev libffi-dev...

jshole

jshole A simple JavaScript components vulnrability scanner, based on RetireJS. Why use JShole instead of RetireJS? By default, RetireJS only searches one page, but JShole tries to crawl all pages. Get Started Requirements requests Install git clone https://github.com/callforpapers-source/jshole.g...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

CVE-2026-105470 girishsaraf Online-Appointment-Booking-System Doctor Search Endpoint locateus.php mysqli_query sql injection

A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This issue affects the function mysqliquery of the file locateus.php of the component Doctor Search Endpoint. The manipulation of the argument doctorname leads to sql...

CVE-2026-105470

The girishsaraf Online-Appointment-Booking-System (up to commit f427b4757128ca253d33d0cc4e87bbb9c999a4d5 ) is vulnerable to a SQL injection in the Doctor Search Endpoint component. The flaw exists within the mysqli_query function of the locateus.php file, where improper handling of the doctorname...

CVE-2024-0197-POC

CVE-2024-0197-POC Thales Sentinel HASP LDK 中本地权限提升的概念验证。 我最初想自己开发一个，但最终发现没有必要。 没有需要争取的竞争条件，从一个已知位置进行简单的 DLL 搜索顺序劫持即可获得 SYSTEM 权限。 我们只需： 1. 将 raw.cpp 编译为 fltlib.dll 并放入 AppData\Local\Temp（它必须是一个正确的代理 DLL，指向 C:\Windows\System32\fltlib.dll）。 2. 然后运行 msiexec.exe /fa PATHTOMSI。...

sshelf

sshelf Fuzzy-search your SSH hosts and connect in two keystrokes. sshelf keeps its own host list, builds the ssh command for you, and then gets out of the way. It hands the terminal to real OpenSSH and never touches /.ssh/config. Install macOS and Linux, x8664 and arm64. The prebuilt packages nee...

CVE-2020-1958

PoC de CVE-2020-1958 CVE-2020-1958 es una vulnerabilidad de inyección LDAP de alta gravedad en Apache Druid 0.17.0. Permite a un atacante omitir el filtro de búsqueda LDAP y recuperar cualquier valor de atributo LDAP de usuarios que existan en el servidor LDAP. Del aviso oficial de Apache Druid:...