awesome-hacking

Awesome Hacking -一个很棒的项目 精选的 Awesome Hacking 列表。灵感来源于 awesome-machine-learning 如果你想为这个列表做出贡献（请务必这样做），请向我发送拉取请求！ 如需可下载的免费黑客书籍列表，请点击此处 目录 系统 教程 工具 Docker 综合 逆向工程 教程 工具 综合 Web 工具 综合 网络 工具 取证 工具 密码学 工具 战争游戏 系统 逆向工程 Web 密码学 漏洞赏金 CTF 竞赛 综合 操作系统 在线资源 后渗透 工具 其他 系统 教程 Roppers Computing Fundamentals...

CyberClass

CyberClass 此仓库包含 Class'Code CyberClass 的教学资源。 文件树 root@kitploit: 📦CyberClass ------------------------------------ Root directory ┣ 📂docs --------------------------------------- Website sources ┃ ┣ 📂assets ----------------------------------- General assets logo, favicon, etc ┃ ┣ 📂Partie1...

Journyx - XML External Entities Injection (XXE)

The "soapcgi.pyc" API handler allows the XML body of SOAP requests to contain references to external entities. This allows an unauthenticated attacker to read local files, perform server-side request forgery, and overwhelm the web server resources. id: CVE-2024-6893 info: name: Journyx - XML...

EspoCRM <= 9.3.3 - Server-Side Request Forgery

EspoCRM = 9.3.3 contains an authenticated server-side request forgery caused by improper internal-host validation using alternative IPv4 formats in HostCheck::isNotInternalHost, letting authenticated users access internal resources via /api/v1/Attachment/fromImageUrl endpoint. id: CVE-2026-33534...

Spring Framework - Path Traversal

Spring Framework MVC applications deployed as WAR or with embedded Servlet containers that do not reject suspicious URI sequences and serve static resources with Spring resource handling contain a path traversal vulnerability, letting attackers access unauthorized files, exploit requires...

WebMvc.fn/WebFlux.fn - Path Traversal

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application...

MeterSphere < 2.5.0 SSRF

MeterSphere is a one-stop open source continuous testing platform, covering test management, interface testing, UI testing and performance testing. Versions prior to 2.5.0 are subject to a Server-Side Request Forgery that leads to Cross-Site Scripting. A Server-Side request forgery in...

XStream <1.4.15 - Server-Side Request Forgery

XStream before 1.4.15 is susceptible to server-side request forgery. An attacker can request data from internal resources that are not publicly available by manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorize...

LyLme spage v1.9.5 - Server-Side Request Forgery

LyLme spage v1.9.5 is vulnerable to server-side request forgery SSRF via the url parameter in apply/index.php. An attacker can force the server to make arbitrary requests, potentially accessing internal resources. id: CVE-2024-36675 info: name: LyLme spage v1.9.5 - Server-Side Request Forgery...

MagicMirror <= 2.35.0 - Server-Side Request Forgery

An unauthenticated Server-Side Request Forgery SSRF vulnerability in the /cors endpoint allows any remote attacker to force the MagicMirror² server to perform arbitrary HTTP requests to internal networks, cloud metadata services, and localhost services. The endpoint also expands environment...

Astro SSR - Server-Side Request Forgery

Astro before 5.17.3 and @astrojs/node before 9.5.4 are vulnerable to full-read SSRF due to improper Host header validation in error page rendering, allowing attackers to redirect requests and access internal resources. id: CVE-2026-25545 info: name: Astro SSR - Server-Side Request Forgery author:...

IBM Maximo Asset Management Information Disclosure - XML External Entity Injection

IBM Maximo Asset Management is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. id: CVE-2020-4463 info: name: IBM Maximo Asset Management Information...

Liferay Portal - Open Redirect

HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.18, and older unsupported versions, and Liferay DXP 7.4 before update 19, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions can be circumvented by using the 'REPLACEMENT CHARACTER' U+FFFD, which allows remote...

Spring Framework Path Traversal in Functional Web Frameworks

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application...

awesome-cybersecurity-resources

awesome-cybersecurity-resources 精选网络安全资源，更多。 目的 本仓库存储了从互联网、仓库文档和精选本地笔记中收集整理的网络安全资源。 规范格式如下： 每个 Markdown 文件对应一项资源 YAML frontmatter 作为唯一事实来源 resources 仅为 URL 字符串数组 结构 data/resources/：结构化资源条目 data/templates/：可复用的 frontmatter 模板 data/automation/：自动化状态 doc/：智能体与工作流文档 doc/ai-agent.md：智能体工作流说明...

CVE-2026-79313

The webpy web.py 0.76 framework is vulnerable to Insufficient Session Expiration . The root cause is that session management relies on periodic cleanup to expire sessions rather than verifying the last-access time when a session is loaded. This allows an attacker who possesses a previously valid ...

CVE-2024-23334

CVE-2024-23334 针对 Aiohttp !IMPORTANT 此脚本仅供教育用途。 任何非法使用均严格禁止。 如何运行？ root@kitploit: $ git clone https://github.com/wizarddos/CVE-2024-23334 $ cd CVE-2024-23334 $ python3 exploit.py -u url -f file -d static directory !Note 记得使 URL 和静态目录中的斜杠匹配——如果你输入 http://127.0.0.1/，那么目录不要带斜杠（例如 static），反之亦然（URL...

cve-2024-38819-lab

CVE-2024-38819 客户文档保险库实验室 这是一个针对 CVE-2024-38819 的 Cloud Foundry 就绪 Spring Boot 演示项目，该漏洞是 Spring Framework 功能式静态资源处理中的路径遍历漏洞。 修复了什么？ CVE-2024-38819 在 Spring Framework 中被修复，而不是直接在 Spring Boot 中。 Spring Boot 在演示中仍然很重要，因为它管理应用程序使用的 Spring Framework 依赖版本。换句话说，Spring Boot 的维护版本可以为你引入修复后的 Framework...

CVE-2026-44578-PoC

CVE-2026-44578 - PoC de SSRF en WebSocket de Next.js Vulnerabilidad: Falsificación de solicitudes del lado del servidor en el manejador de actualización WebSocket de Next.js 13.4.13 → 15.5.15, 16.0.0 → 16.1.6 Uso root@kitploit: Detect vulnerability python3 poc.py target.com:3000 --detect Tunnel t...

CVE-2025-68645

🛡️ CVE-2025-68645 - Zimbra 本地文件包含 LFI 分析 📌 概述 本文档描述了一个影响 Zimbra Collaboration Suite 的本地文件包含 LFI 漏洞。 该问题源于对以下参数的不当处理： root@kitploit: /h/?javax.servlet.include.servletpath= 这允许未经身份验证的用户访问内部应用程序资源。 🔍 漏洞详情 类型： 本地文件包含 LFI 访问权限： 无需身份验证 受影响组件： Webmail（经典界面） 攻击向量： HTTP 请求操纵 🧪 初始验证 测试请求： root@kitploit: cur...