CVE-2020-13935

Exploit für WebSocket-Schwachstelle in Apache Tomcat CVE-2020-13935 Im zugehörigen Blogbeitrag werden die Analyse und die Ausnutzung der Schwachstelle im Detail erklärt. Verwendung Klonen Sie das Repository und bauen Sie dann die tcdos-Binärdatei. Führen Sie das Programm wie folgt aus, um zu...

CVE-2026-55993

camel-atmosphere-websocket - Reproducteur d'injection d'en-tête CVE-2026-55993 Ce projet démontre une injection d'en-tête de message dans le composant camel-atmosphere-websocket d'Apache Camel, référencé sous CVE-2026-55993. Le consommateur WebSocket copie les paramètres de requête de la connexio...

CVE-2026-1731

CVE-2026-1731 BeyondTrust Remote Support Pre-Auth RCE PoC !WARNING This script is intended for educational and research purposes only. Do not use it against systems without explicit permission. Unauthorized access or testing is illegal and unethical. Read the full DISCLAIMER before using this...

thats_no_pipe

Isso não é um pipe Projeto baseado em Frida para interceptar a comunicação de named pipes do Windows Objetivos Este projeto tem como objetivo interceptar comunicações IPC por meio de hooks em funções específicas da WinAPI e encaminhá-las para um proxy HTTP usando um websocket. Arquitetura A leitu...

openclaw-security-monitor

OpenClaw Security Monitor Proaktive Sicherheitsüberwachung, Bedrohungsscans und Echtzeit-Transparenz für OpenClaw-Bereitstellungen. Erkennt Bedrohungen aus der ClawHavoc -Kampagne 824+ bösartige Skills, AMOS-Stealer , Vidar-Infostealer , GhostSocks -Proxy-Malware, ClawJacked -WebSocket-Brute-Forc...

CVE-2024-34312

CVE-2024-34312 Description Virtual Programming Lab for Moodle jusqu'à la version 4.2.3 s'est avéré contenir une vulnérabilité de type Cross-Site Scripting XSS via son composant IDE. Détails supplémentaires Le navigateur se connecte directement à un websocket exécuté sur le serveur jail. Via ce...

CVE-2026-39987

⚠️ CVE-2026-39987 — marimo 0.23.0에서 인증되지 않은 셸 반응형 Python 노트북 도구로 인해 공격자가 단일 WebSocket 요청으로 전체 셸을 얻을 수 있었습니다. 📌 개요 CVE-2026-39987 은 marimo 현대적인 Jupyter 대안에서 발견된 중대한 인증 전 RCE 취약점입니다. 영향을 받는 버전 : 공식 확인된 모든 버전 0.23.0 CVSS 점수 : 9.3 치명적 유형 : /terminal/ws WebSocket 엔드포인트에 대한 인증 부재 영향 : 인증되지 않은 공격자가 전체 대화...

sagemcom-fast-3890-exploit

Exploit del Sagemcom Fast 3890 Este exploit utiliza la vulnerabilidad Cable Haunt para obtener una shell en el módem de cable Sagemcom F@ST 3890 50.10.19 desde el acceso a la red local. La versión de firmware 50.10.21 o superior debería ser segura frente a Cable Haunt. Esta prueba de concepto ha...

CVE-2026-25253

CVE-2026-25253 OpenClaw 1-Click RCE ★ CVE-2026-25253 OpenClaw 1-Click Exécution de Code à Distance PoC ★ https://github.com/user-attachments/assets/e6957c61-7549-4e68-831e-a05436504a3e Description CVE-2026-25253 : Vulnérabilité d'exfiltration de jeton d'authentification OpenClaw description:...

CVE-2026-44578-PoC

CVE-2026-44578 - PoC de SSRF en WebSocket de Next.js Vulnerabilidad: Falsificación de solicitudes del lado del servidor en el manejador de actualización WebSocket de Next.js 13.4.13 → 15.5.15, 16.0.0 → 16.1.6 Uso root@kitploit: Detect vulnerability python3 poc.py target.com:3000 --detect Tunnel t...

CVE-2020-7693

CVE-2020-7693 Poc Hinweis: Ich bestätige, dass der Payload für CVE-2020-7693 in Bug Bounty Programmen ausgeführt werden kann. Beschreibung: Falsche Behandlung des Upgrade-Headers mit dem Wert 'websocket' führt zum Absturz von Containern, die sockjs-Apps hosten. Dies betrifft das Paket sockjs vor...

CVE-2026-5173

🦊 CVE-2026-5173: GitLab WebSocket Unauthorized Method Execution PoC 🛠️ Overview CVE-2026-5173 allows a low-privileged authenticated attacker to call restricted backend methods through GitLab's WebSocket /-/cable endpoint, specifically via the GraphqlChannel. This can lead to sensitive data exposur...

gohide

gohide Tunnel port to port traffic via an obfuscated channel with AES-GCM encryption. Obfuscation Modes Session Cookie HTTP GET http-client Set-Cookie Session Cookie HTTP/2 200 OK http-server WebSocket Handshake "Sec-WebSocket-Key" websocket-client WebSocket Handshake "Sec-WebSocket-Accept"...

chisel-ng

| | | | /| ' | / |/ \ | | ' \ / | | | | | | \ / || | | | | | || | ||/ || | | || , | |/ root@kitploit: chisel-ng Eine Rust-Implementierung von chisel für Penetrationstests und Red-Team-Operationen. Stellt reverse Tunnels über SSH-over-WebSocket-over-TLS her, sodass Operatoren durch kompromittierte...

nextssrf

root@kitploit: ╔══════════════════════════════════════════════════════════════╗ ║ NextSSRF — CVE-2026-44578 Scanner & Exploit ║ ║ Next.js WebSocket Upgrade Handler SSRF ║ ║ Affected: 13.4.13 → 15.5.15, 16.0.0 → 16.2.4 ║ ║ @mitsec / ynsmroztas — Bug Bounty Tooling ║...

nextssrf

root@kitploit: ╔══════════════════════════════════════════════════════════════╗ ║ NextSSRF — CVE-2026-44578 Scanner & Exploit ║ ║ Next.js WebSocket Upgrade Handler SSRF ║ ║ Affected: 13.4.13 → 15.5.15, 16.0.0 → 16.2.4 ║ ║ @mitsec / ynsmroztas — Bug Bounty Tooling ║...

CVE-2026-39987-marimo-rce

CVE-2026-39987 - Marimo Pre-Auth RCE Marimo में WebSocket टर्मिनल के माध्यम से बिना प्रमाणीकरण के रिमोट कोड निष्पादन 📌 अवलोकन CVE-2026-39987 Marimo संस्करण 0.23.0 से पहले के संस्करणों को प्रभावित करने वाली एक गंभीर प्री-ऑथेंटिकेशन रिमोट कोड निष्पादन Pre-Auth RCE कमजोरी है। /terminal/ws WebSocket...

CVE-2026-39636-vulnerability-exp

1. यहाँ चलाने से पहले burp suite खोलना अनिवार्य है !! और डिफ़ॉल्ट burp suite पोर्ट 8080 होना चाहिए, यदि कोई अन्य है तो आप स्वयं बदल सकते हैं 2. आवश्यक लाइब्रेरी डाउनलोड करें root@kitploit: pip install websockets==16.0 -i https://pypi.tuna.tsinghua.edu.cn/simple 3. सीधे चलाएँ CVE-2026-39363 एकल...

CVE-2025-68930

🔍 Analisi del CVE-2025-68930: Vulnerabilità di Hijacking dei WebSocket in Traccar Il CVE-2025-68930 espone una vulnerabilità critica di Cross-Site WebSocket Hijacking CSWSH in Traccar , il sistema di tracciamento GPS open source. Di seguito, i dettagli chiave: 🛡️ Dettagli della Vulnerabilità...

atlantis-android

Atlantis Android Cattura il traffico HTTP/HTTPS dalle app Android e invialo a Proxyman per il debug. Panoramica Atlantis Android è una libreria companion per Proxyman che ti permette di catturare e ispezionare il traffico di rete delle tue applicazioni Android senza configurare un proxy o...