eviltree

EvilTree A standalone python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highlighting those that contain matches. Created for two main reasons: While searching for secrets in files of nested directory structures, being...

git-wild-hunt

git-wild-hunt 一个用于在GitHub荒野中搜寻凭证的工具，又名 githunt 快速开始 1. 安装 该工具 2. 配置 你的 GitHub token 3. 搜索 凭证 4. 查看结果：cat results.json | jq 📺 演示 安装 依赖：virtualenv, python3 1. git clone https://github.com/d1vious/git-wild-hunt && cd git-wild-hunt 克隆项目并进入项目目录 2. pip install virtualenv && virtualenv -p python3 venv &...

struts1filter

struts1filter Una solución de filtro de parámetros de solicitud para Apache Struts 1 CVE-2014-0114 basada en el trabajo de Alvaro Munoz y el equipo de HP Fortify. Para usar este filtro, añade la siguiente declaración de filtro junto con el mapeo apropiado al descriptor web.xml de la aplicación...

filtron

Filtron Reverse HTTP proxy to filter requests by different rules. Can be used between production webserver and the application server to prevent abuse of the application backend. The original purpose of this program was to defend searx, but it can be used to guard any web application. Installatio...

CVE-2026-78122-POC

CVE-2026-78122 — Prueba de concepto Tecnativadocker-socket-proxy ≤ 0.5.0 — Granularidad insuficiente del control de acceso CWE-1220 CVSS 4.0: 8.3 Alta — CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N El vector de ataque es Adyacente AV:A: el atacante necesita acceso de red...

CVE-2022-22978-demo

CVE-2022-22978-demo CVE-2022-22978漏洞示例代码 利用条件 虽然定为高危，但是利用条件还是比较苛刻的，个人感觉这个漏洞比较鸡肋。 1. 首先肯定是spring-security在漏洞影响范围内 2. 其次需要使用spring-security的正则匹配器regexMatchers或者直接使用RegexRequestMatcher，并且使用了. 匹配路径，类似这样： regexMatcher"/api/." // 允许/api下的所有子路径 regexMatcher"/files/.\.jpg" // 匹配所有.jpg结尾的文件请求...

CVE-2026-42533-Config-Scanner

nginx capture-clobber scanner A read-only static scanner that flags nginx configurations vulnerable to the complexvalue two-pass capture-clobbering bug class F5/nginx SIRT advisory, July 2026. It parses your config and reports the vulnerable pattern with the reason and location. It does not explo...

pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function

A flaw was found in the pacote component. A remote attacker can exploit this denial of service DoS vulnerability by providing a specially crafted input to the addGitSha function. This malicious input triggers excessive CPU consumption due to regex replacement and string manipulation, which can le...

nginx-map-risk-audit

CVE-2026-42533: Revisión del riesgo de regex en map de NGINX Nota de investigación defensiva sobre CVE-2026-42533, un desbordamiento de búfer en el montón en el procesamiento de solicitudes de NGINX relacionado con directivas map con capturas de regex y ciertos patrones de evaluación de variables...

git-vuln-finder

git-vuln-finder Encontrando posibles vulnerabilidades de software a partir de mensajes de confirmación de git. El formato de salida es un JSON con la confirmación asociada que podría contener una corrección relacionada con una vulnerabilidad de software. La búsqueda se basa en un conjunto de...

zap-scripts

zap-scripts Zed Attack Proxy Scripts for finding CVEs and Secrets. Building This project uses Gradle to build the ZAP add-on, simply run: root@kitploit: ./gradlew build in the main directory of the project, the add-on will be placed in the directory build/zapAddOn/bin/. Usage The easiest way to u...

webshell

webshell 简体中文 This is a webshell collection project Give someone a rose, there is a fragrance in your hand if you download this project, please also submit a shell This project covers various common scripts Such as: asp, aspx, php, jsp, pl, py If you submit a webshell, please do not change the na...

CVE-2023-31606

CVE-2023-31606 Vulnerabilidad Se descubrió un problema de Denegación de Servicio por Expresión Regular ReDoS en la función sanitizehtml de la gema redcloth = v4.0.0. Esta vulnerabilidad permite a los atacantes causar una Denegación de Servicio DoS mediante el suministro de una carga útil...

modoboa 2.0.4 - Admin TakeOver

Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4. id: CVE-2023-0777 info: name: modoboa 2.0.4 - Admin TakeOver author: r3Y3r53 severity: critical description: | Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to...

Loytec LGATE-902 <6.4.2 - Local File Inclusion

Loytec LGATE-902 versions prior to 6.4.2 suffers from a local file inclusion vulnerability. id: CVE-2018-14916 info: name: Loytec LGATE-902 6.4.2 - Local File Inclusion author: 0xAkoko severity: critical description: Loytec LGATE-902 versions prior to 6.4.2 suffers from a local file inclusion...

Gotenberg <= 8.30.1 - Server Side Request Forgery

Gotenberg is an API-based document conversion tool. In versions 8.30.1 and earlier, the default private-IP deny-lists for the --webhook-deny-list and --api-download-from-deny-list flags use a case-sensitive regular expression ^https?:// to match URL schemes. Because Go's net/url.Parse normalizes...

vBulletin 6.x - Remote Code Execution

vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contain an eval injection vulnerability caused by insufficiently restrictive regex filtering in vB5TemplateRuntime::runMaths, letting unauthenticated remote attackers execute arbitrary PHP code via the pagenavpagenumber parameter in ajax/render...

Budibase - Authentication Bypass

Budibase = 3.31.4 contains an authentication bypass caused by unanchored regex in authorized middleware matching webhook path patterns in query strings, letting unauthenticated remote attackers access any server-side API endpoint, exploit requires crafted request with webhook pattern in URL. id:...

CVE-2019-19203

CVE-2019-19203 Se descubrió un problema en Oniguruma 6.x anterior a 6.9.4rc2. En la función gb18030mbcenclen del archivo gb18030.c, se desreferencia un puntero UChar sin comprobar si pasó el final de la cadena coincidente. Esto conduce a una sobrelectura de búfer basada en montón. Investigador:...

secret-regex-list

Lista de expresiones regulares para secretos Lista de regex para extraer claves de API secretas e información jugosa. Puedes copiarla directamente y ponerla en tu código de Python; algunas regex pueden requerir tres comillas o se romperá el código. "Cloudinary" : "cloudinary://.", "Firebase URL":...