98265 matches found
pastokrapacefleciks
pastokrapacefleciks, el analizador WireShark - PRO Uso: Coloca tu archivo .pcapng en el directorio de pastokrapacefleciks root@kitploit: python .\pastokrapacefleciks.py python3 .\pastokrapacefleciks.py Revisa tu informe HTML...
lazyrecon
/ \ / / \ /// ///Y / \ /| | | | / | / / \ / | /|| \ | / | / || |\ || | | /| |-||/ / / / | /| / | | /|| | || // |/// /\ | // | Uso ./lazyrecon.sh target.com Acerca de Este script está diseñado para automatizar tu proceso de reconocimiento de forma organizada, realizando lo siguiente: Crear una...
CVE-2018-5146
CVE-2018-5146 's exp and poc poc.ogg :self-constructed poc file cve-test2.html :exploit file crctest.exe:calculate the crc32 of the ogg file...
CVE-2022-30190
CVE-2022-30190 IMPORTANTE Parcheado a partir de: Actualizaciones de seguridad del 14 de junio de 2022 Informe CVE El archivo HTML debe servirse al objetivo, por ejemplo exploit.html Una forma sencilla de ejecutar el ataque es ejecutando server.py...
PhantomCrawler
.png PhantomCrawler is a security testing and research tool that simulates website interactions from different proxy IP addresses to analyze how websites behave under varied network and geolocation conditions. Features: Utilizes a list of proxy IP addresses from a specified file. Supports both HT...
wordreaper
About the Project This tool is designed to scrape and generate smart, focused wordlists for powerful password cracking, utilizing CSS selectors with surgical precision. Features Overview HTML scraping Extracts text using precise CSS selectors Supports targeted scraping from any HTML source...
jquery-cve-2022-31160
es-define-property Object.defineProperty, but not IE 8's broken one...
html-poc
Código de prueba de concepto para vulnerabilidades del lado del cliente Pruebas de concepto básicas en HTML para problemas como: Clickjacking Configuración insegura de CORS CSRF Tabnapping XSSI Problemas con postMessage La mayoría de estas son bastante básicas, pero tenerlas todas en un solo luga...
CVE-2025-53693
CVE-2025-53693: HTML Cache Poisoning The XAML handler, located at /-/xaml/, exposes several controls that can be accessed without authentication. The AjaxScriptManager within these controls allows for the execution of methods via reflection. The AddToCache method can be abused to inject arbitrary...
engine
Droidefense Engine Advance Android Malware Analysis Framework Latest release Download What Droidefense is Droidefense originally named atom: a nalysis t hrough o bservation m achine is the codename for android apps/malware analysis/reversing tool. It was built focused on security issues and trick...
Mailphish
Mailphish Coded By Pro MCracker Mailphish Will Help You To Create Professional Phishing Emails Fast And Easy Visit Our Websites For Learn Hacking Methods https://crackcodes.xyz And https://crackcodes.in If You Copy The Code And Make Your Own, Don't forget To Give Me Some Credit Kid! You Don't Get...
CVE-2026-11645-Out-of-bounds-Read-Write
CVE-2026-11645 - Chrome V8 Out-of-Bounds Read/Write Exploit ⚠️ ADVERTENCIA Este código es SOLO para fines educativos y pruebas autorizadas. 📋 Descripción CVE-2026-11645 es una vulnerabilidad de lectura y escritura fuera de límites OOB en el motor V8 de Google Chrome. Un atacante remoto puede...
versionscan
versionscan Versionscan is a tool for evaluating your currently installed PHP version and checking it against known CVEs and the versions they were fixed in to report back potential issues. PLEASE NOTE: Work is still in progress to adapt the tool to linux distributions that backport security fixe...
dalfox
Looking for the Go v2.x version? Dalfox v3 is a complete rewrite in Rust. The Go codebase is preserved on the v2 branch and continues to receive security backports. See SECURITY.md for the support policy, and the migration guide for what changed in v3. Dalfox is a powerful open-source tool that...
CVE-2022-42097
Backdrop CMS version 1.23.0 Vulnerability Explanation: Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Comment . Attack Vectors: The attacker must post something on the "comment" and insert the XSS payload at the "comment" input, and...
EUVD-2026-72757
XenForo before 2.3.13 contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to retrieve private unfurl records by supplying predictable auto-increment primary key IDs to the unfurl endpoint. Attackers can enumerate or predict result IDs and query t...
CVE-2026-73320 XenForo < 2.3.13 Unauthenticated Information Disclosure via Unfurl Endpoint
XenForo before 2.3.13 contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to retrieve private unfurl records by supplying predictable auto-increment primary key IDs to the unfurl endpoint. Attackers can enumerate or predict result IDs and query t...
CVE-2023-49052
CVE-2023-49052 - Microweber CMS v2.0.4 - Uploading Malicious Files Description In version 2.0.4 of Microweber CMS where the file upload option is active in created forms, it is possible to send malicious HTML files, even when certain types of validations are applied in this field. This...
html/template: golang: Go html/template: Cross-Site Scripting via pathological input
A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...
html/template: golang: Go html/template: Cross-Site Scripting via pathological input
A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...