19057 matches found
dotdotpwn
DESCRIPTION DotDotPwn - The Directory Traversal Fuzzer It's a very flexible intelligent fuzzer to discover traversal directory vulnerabilities in software such as HTTP/FTP/TFTP servers, Web platforms such as CMSs, ERPs, Blogs, etc. Also, it has a protocol-independent module to send the desired...
Elastix-2.2.0-CVE-2012-4869
Elastix 2.2.0 Local File Inclusion Exploit - CVE-2012-4869 Description This script exploits a Local File Inclusion LFI vulnerability in Elastix 2.2.0 , allowing remote code execution RCE by injecting commands via the callmepage.php endpoint. The exploit is based on CVE-2012-4869. Features Bypasse...
citrix-logchecker
citrix-logchecker Parse citrix netscaler logs to check for signs of CVE-2023-4966 exploitation Written by Otmar Lendl. Usage: root@kitploit: ./citrix-anomaly.pl -d -v -h -p file -a X logfiles This script parse citrix netscale syslog files and looks for session reconnects that might be the result ...
ATSCAN
ATSCAN SCANNER Advanced Mass Search / Dork / Exploitation Scanner | Alisam Technology is not responsible for any misuse, damage caused by this script or attacking targets without prior mutual consent! It is your responsibility to obey laws! ---|--- Codename:| 4n0n4t ---|--- AUTHOR:| Ali MEHDIOUI...
perl-CryptX
NAME CryptX - Cryptographic toolkit SYNOPSIS CryptX is the distribution entry point. In normal code, load one of the concrete modules listed below. root@kitploit: one-shot hashing use Crypt::Digest qwdigestdatahex; my $sha256 = digestdatahex'SHA256', 'hello world'; classic AES-CBC encryption with...
RLSA-2026:67155 Moderate: perl security update
Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl: Incorrect regular expression processing via large regular expressions CVE-2026-13221 For more details about the security issues, including the impac...
Malbait
Malbait TCP/UDP Honeypot program implemented in Perl README for malbait, 2/10/17 btw my bitcoin address is 3A7yuqBcPAcVEM59bNAVQdTCmkxRb5JRgE Here's an alternative, also for BTC, as I've been getting reports of some bitcoin wallets not supporting certain addresses:...
CVE-2020-14179
CVE-2020-14179 Scanner Sample scan ./CVE-2020-14179.pl -u jira.atlassian.com OR ./CVE-2020-14179.pl -u https://jira.atlassian.com List scan ./CVE-2020-14179.pl -l list.txt Show Options ./CVE-2020-14179.pl How to install and use linux git clone https://github.com/c0brabaghdad1/CVE-2020-14179.git c...
Webmin-CVE-2022-0824-Enhanced-Exploit
Webmin-CVE-2022-0824-Enhanced-Exploit !IMPORTANT Webmin CVE-2022-0824 Enhanced Exploit Tool - Supports dual modes: command execution and reverse shell !IMPORTANT An enhanced exploit tool targeting Webmin CVE-2022-0824, supporting both direct command execution and reverse shell modes. 🚀 Features ✅...
PhpMyAdmin
This is an old perl scanner I found for the php my admin exploit that's from 2009. I got bored and figured I would practice perl and learn a bit about an older language and convert it to python. This is for educational purposes mostly because this exploit being well over a decade old I wouldn't...
Webmin-1.580---file-show.cgi-Manual-Remote-Command-Execution-Non-Metasploit-
Markdown Webmin 1.580 RCE Execution Guide Quick reference for executing authenticated Remote Code Execution RCE on Webmin 1.580 via the /file/show.cgi component. 1. Attack Machine Listener Run this command on your local machine to catch the incoming connection before executing the payload:...
SUSE-SU-2026:4182-1 Security update for perl-Protocol-HTTP2
This update for perl-Protocol-HTTP2 fixes the following issue: - CVE-2026-16028: memory exhaustion leading to denial of service due to closed streams never being removed by streamstate from the connection stream table bsc1279629...
filebuster
Filebuster 非常に高速で柔軟なWebファザー これは何ですか？ Filebusterは、多くの機能を備え、使いやすく高速に動作するように設計されたHTTPファザー/コンテンツディスカバリスクリプトです。世界最速のHTTPクラスの一つ（PERL）であるFurl::HTTPを使用しています。また、スレッドモデリングも可能な限り高速に動作するように最適化されています。 特徴 多数の機能が搭載されています： ワードリストでの正規表現パターン HTTP/HTTPS/SOCKSプロキシのサポート ワイルドカードを使用した複数のワードリストの許可 追加のファイル拡張子...
perl security update
An update is available for perl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Perl is a high-level programming language that is commonly used for system...
dnsenum
README - dnsenum.pl バージョン: 1.2.4 マルチスレッドのPerlスクリプトで、ドメインのDNS情報を列挙し、連続しないIPブロックを発見します。 操作: root@kitploit: 1 ホストのアドレス（Aレコード）を取得します。 2 ネームサーバーを取得します（スレッド化）。 3 MXレコードを取得します（スレッド化）。 4 ネームサーバーに対してAXFRクエリを実行し、BINDバージョンを取得します（スレッド化）。 5 Googleスクレイピングにより追加の名前とサブドメインを取得します（Googleクエリ = "allinurl: -www...
Linux_Exploit_Suggester
LinuxExploitSuggester Linux Exploit Suggester; based on operating system release number. This program run without arguments will perform a 'uname -r' to grab the Linux Operating Systems release version, and return a suggestive list of possible exploits. Nothing fancy, so a patched/back-ported pat...
dotdotpwn
描述 DotDotPwn - 目录遍历模糊测试工具 它是一个非常灵活智能的模糊测试器，用于发现软件中的目录遍历漏洞，例如HTTP/FTP/TFTP服务器，以及CMS、ERP、博客等Web平台。 此外，它有一个协议无关的模块，可以将所需的有效载荷发送到指定的主机和端口。另一方面，它也可以使用STDOUT模块以脚本方式使用。 它使用Perl编程语言编写，可以在OS X、NIX或Windows平台上运行。它是首个包含在BackTrack Linux BT4 R2中的墨西哥工具。 此版本支持的模糊测试模块： HTTP HTTP URL FTP TFTP Payload 协议无关 STDOUT 要...
[SECURITY] Fedora 43 Update: perl-DBI-1.653-1.fc43
DBI is a database access Application Programming Interface API for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used...