magicRecon

MagicRecon: Rápido, simple y efectivo MagicRecon es un potente script de shell para maximizar el proceso de reconocimiento y recopilación de datos de un objetivo y encontrar vulnerabilidades comunes, todo ello guardando los resultados obtenidos de manera organizada en directorios y con varios...

Cerberus

Cerberus Un potente escáner de vulnerabilidades. El subdominio de fuerza bruta utiliza aioDNS, escaneo asíncrono con asyncio, cubre todos los activos del objetivo para escaneo masivo de vulnerabilidades, recopilación de información de middleware, recopila automáticamente proxies IP, al detectar...

yasuo

YASUO @0xsauby Descripción Yasuo es un script de Ruby que escanea aplicaciones web de terceros vulnerables. Mientras trabajamos en una evaluación de seguridad de red interna, externa, trabajos de redteam, etc., a menudo nos encontramos con aplicaciones web de terceros vulnerables o front-ends web...

recollapse

REcollapse REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications. It can also be helpful to bypass WAFs and weak vulnerability mitigations. For more information, take a look at the REcollapse blog post. The goal of this tool ...

Bug_Bounty_writeups

DEJA DE HACER CAZA-RECOMPENSAS - DEJA DE COPIAR LOS POC DE OTROS ¡HAZ ALGO DIFERENTE!🔴🔴🔴🔴✔ ¿Quieres apoyar mi trabajo? NO INTENTES HACKEAR SIN CONOCIMIENTOS BÁSICOS --- SERÁ PELIGROSO PARA TI Y TU FUTURO! Contenido Cross Site Scripting XSS Cross Site Request Forgery CSRF Clickjacking UI Redressin...

Koppeling

Koppeling Este proyecto es una demostración de técnicas avanzadas de secuestro de DLL. Se publicó junto con la entrada de blog "Adaptive DLL Hijacking". Recomiendo empezar por allí para contextualizar este código. Este proyecto consta de los siguientes elementos: Harness.exe: La aplicación...

Firmware_Slap

Firmware Slap Firmware Slap combina análisis concolico con agrupación de funciones para el descubrimiento de vulnerabilidades y similitud de funciones en firmware. Firmware Slap está construido como una serie de bibliotecas y exporta la mayoría de la información como pickles o JSON para la...

fuxploider

fuxploider Fuxploider è uno strumento di penetration testing open source che automatizza il processo di rilevamento e sfruttamento delle vulnerabilità dei form di upload di file. Questo strumento è in grado di rilevare i tipi di file consentiti per l'upload e di determinare quale tecnica funzione...

fuxploider

fuxploider Fuxploider is an open source penetration testing tool that automates the process of detecting and exploiting file upload forms flaws. This tool is able to detect the file types allowed to be uploaded and is able to detect which technique will work best to upload web shells or any...

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-Exploits Una colección de exploits y documentación para pentesters y red teamers que puede utilizarse para ayudar en la explotación de la vulnerabilidad Dirty Pipe de Linux. Acerca de la vulnerabilidad Dirty Pipe CVE-2022-0847 es una vulnerabilidad de escalada de privilegi...

CVE-2018-11235

CVE-2018-11235...

ETQ Reliance - Authentication Bypass via Trailing Space

An authentication bypass vulnerability exists in ETQ Reliance on the CG legacy platform. The application allowed login as the privileged internal SYSTEM user by manipulating the username field. The SYSTEM account does not require a password, enabling attackers with network access to the login pag...

Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting

Yonyou UFIDA ERP-NC V5.0 is vulnerable to reflected cross-site scripting XSS via the langcode parameter in /help/systop.jsp and /help/top.jsp. Unsanitized user input is reflected in the response, allowing arbitrary JavaScript execution. id: CVE-2025-2712 info: name: Yonyou UFIDA ERP-NC V5.0 -...

SolarWinds Database Performance Analyzer 11.1.457 - Cross-Site Scripting

SolarWinds Database Performance Analyzer 11.1.457 contains a reflected cross-site scripting vulnerability in its idcStateError component, where the page parameter is reflected into the HREF of the 'Try Again' Button on the page, aka a /iwc/idcStateError.iwc?page= URI. id: CVE-2018-19386 info: nam...

Gradio - Server-Side Request Forgery

A Server-Side Request Forgery SSRF vulnerability exists in the gradio-app/gradio version 4.21.0, specifically within the /queue/join endpoint and the saveurltocache function. The vulnerability arises when the path value, obtained from the user and expected to be a URL, is used to make an HTTP...

Gradio - Open Redirect

An open redirect vulnerability exists in the gradio-app/gradio, affecting the latest version. The vulnerability allows an attacker to redirect users to arbitrary websites, which can be exploited for phishing attacks, Cross-site Scripting XSS, Server-Side Request Forgery SSRF, amongst others. This...

Aajoda Testimonials < 2.2.2 - Cross-Site Scripting

The plugin does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. id: CVE-2023-2178 info: name: Aajoda Testimonials...

WordPress wpForo Forum <= 1.4.11 - Cross-Site Scripting

WordPress wpForo Forum plugin before 1.4.12 for WordPress allows unauthenticated reflected cross-site scripting via the URI. id: CVE-2018-11709 info: name: WordPress wpForo Forum = 1.4.11 - Cross-Site Scripting author: daffainfo,s4e-io severity: medium description: WordPress wpForo Forum plugin...

Joomla! Component webERPcustomer - Local File Inclusion

A directory traversal vulnerability in weberpcustomer.php in the webERPcustomer comweberpcustomer component 1.2.1 and 1.x before 1.06.02 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1315 info: name: Joomla!...

Joomla! Component Percha Fields Attach 1.0 - Directory Traversal

A directory traversal vulnerability in the Percha Fields Attach comperchafieldsattach component 1.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-2036 info: name:...