snallygaster

snallygaster Finds file leaks and other security problems on HTTP servers. what? snallygaster is a tool that looks for files accessible on web servers that shouldn't be public and can pose a security risk. Typical examples include publicly accessible git repositories, backup files potentially...

snallygaster

snallygaster 查找 HTTP 服务器上的文件泄露和其他安全问题。 这是什么？ snallygaster 是一个工具，用于查找 Web 服务器上不应公开且可能构成安全风险的可访问文件。 典型的例子包括可公开访问的 git 仓库、可能包含密码或数据库转储的备份文件。此外，它还包含一些针对其他安全漏洞的检查。 作为这些问题的入门介绍，你可以观看以下演讲： 通过 HTTP 请求进行攻击 请参阅 TESTS.md 文件以了解所有测试的概述以及关于这些问题的进一步信息链接。 安装 snallygaster 可通过 pypi 获取： root@kitploit: pip3 install...

fuzzuli

fuzzuli 动机 • 背景 • 安装 • 用法 • 运行 fuzzuli • 工具页面 fuzzuli 是一个 URL 模糊测试工具，旨在通过基于域名创建动态字典来发现关键备份文件。 动机 在我多年来进行应用安全测试的过程中，我发现大量关键备份文件被保存在外部可访问的目录中。在命名这些文件时，通常使用了一些常见词汇（如 backup.zip、db.rar、conf.tar.gz 等）。然而，大多数文件是根据应用程序所在的域名来命名的。假设我们有一个域名地址 fuzzuli.musana.net，如果开发者将关键备份文件保存在可访问目录中，可能的文件名会是这样。raw...

CVE-2025-33141

IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment...

CVE-2025-33141

IBM QRadar SIEM versions 7.5.0 through 7.5.0 UP15 Interim Fix 006 are affected by an incorrect permissions assignment issue (CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere). An authenticated user with low privileges can obtain sensitive information from backup...

EUVD-2025-210954

IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment...

ohmybackup

ohmybackup ohmybackup - Scan Victim's Backup Directories & Backup Files ohmybackup Scans backup folders on target sites. Searches archived files in the folders it finds. With the 2-file scanning system, it adds extensions and filenames in different ways, making it more likely to be found. 1 -...

bfac

BFAC 针对Web应用的高级备份文件工件测试 BFAC（备份文件工件检查器）是一种自动化工具，用于检查可能泄露Web应用源代码的备份工件。这些工件还可能导致敏感信息泄露，例如密码、目录结构等。 BFAC的目标是成为备份文件工件黑盒测试的 一体化工具 。 特性 多线程扫描。 包含请求速率限制。 HTTP代理支持。 使用多种算法自动检测有效和无效页面。 HTTP代理支持。 用户代理随机化。 批量处理。 既可作命令行工具，也可作Python模块。 支持Windows、macOS和Linux操作系统。 报告：简单、详细、CSV、JSON。 用法 描述| 命令 ---|--- 帮助| bfac...

everest-backup-cve-2025-11380

CVE-2025-11380 CVE-2025-11380的概念验证代码 - Everest Backup WordPress 插件中存在未经身份验证的备份访问漏洞。 博客文章链接即将发布。...

ZKTeco BioTime <= 9.0.1 - Privilege Escalation

BioTime default employee credentials password 123456 allow login. Sessions are not role-validated, enabling privilege escalation to perform admin actions and enumerate backup files. id: CVE-2023-38952 info: name: ZKTeco BioTime = 9.0.1 - Privilege Escalation author: riteshs4hu severity: high...

JetBackup <= 2.0.9.7 - Sensitive Information Exposure via Directory Listing

JetBackup WordPress plugin = 2.0.9.9 does not use index files to prevent directory listing in certain configurations, letting malicious actors leak backup files, exploit requires access to the web server. id: CVE-2023-7165 info: name: JetBackup = 2.0.9.7 - Sensitive Information Exposure via...

Security Bulletin: IBM QRadar SIEM could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment.

Summary IBM QRadar SIEM could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment. Vulnerability Details CVEID:CVE-2025-33141 DESCRIPTION: IBM QRadar SIEM could allow an authenticated user to obtain sensitive information from backu...

Astra Linux – Vulnerability in targetcli-fb

The Open-iSCSI TargetCLI-fb version up to 2.1.52 has weak permissions for the /etc/target directory as well as for the backup directory and backup files...

CVE-2026-48120

A flaw was found in Kakoune, a code editor. A local attacker could exploit a vulnerability in the bundled autorestore.kak script by crafting malicious backup files. When a user simply opens a file, these malicious backup files can lead to the execution of arbitrary Kakoune and shell commands. Thi...

PT-2026-69157

Name of the Vulnerable Software and Affected Versions Kakoune versions prior to 2026.05.21 Description The bundled autorestore.kak script, which is enabled by default, allows the execution of arbitrary shell and editor commands when a user opens a file if malicious backup files are present...

CVE-2026-60114

Sustainable Irrigation Platform SIP through version 5.2.16 contains a path traversal vulnerability that allows attackers with access to the restore functionality to write files to arbitrary locations by uploading crafted JSON backup files with unvalidated keys used to construct file paths...

Missed incidents, persistent threats, and response gaps: Insights from compromise assessment projects

The following analysis presents the key findings from Kaspersky Compromise Assessment engagements performed in 2025. A compromise assessment is an independent, expert-driven service that examines whether a target network has been compromised. The service combines threat intelligence analysis...

EUVD-2026-40011

A weakness has been identified in Chess Play and Learn App up to 4.9.42 on Android. This issue affects some unknown processing of the file AndroidManifest.xml of the component com.chess. This manipulation causes exposure of backup file to an unauthorized control sphere. It is feasible to perform...

CVE-2018-25437

WordPress CherryFramework Themes 3.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to download sensitive backup files by accessing the downloadbackup.php endpoint. Attackers can directly access the downloadbackup.php script in the admin/datamanagement...

CVE-2016-20076

WordPress Simple-Backup 2.7.11 contains multiple vulnerabilities that allow unauthenticated attackers to delete arbitrary files and download sensitive files by manipulating the deletebackupfile and downloadbackupfile parameters in tools.php. Attackers can exploit insufficient input validation usi...