nomore403

NoMore403 nomore403 is a command-line tool for testing HTTP access-control bypasses and parser inconsistencies around 401, 403, and related responses. The tool is designed for practical web security work: bug bounty, penetration testing, security reviews, and regression testing of access-control...

evil-ssdp

Overview This tool responds to SSDP multicast discover requests, posing as a generic UPNP device. Your spoofed device will magically appear in Windows Explorer on machines in your local network. Users who are tempted to open the device are shown a configurable phishing page. This page can load a...

CVE-2026-41940

CVE-2026-41940: Обход аутентификации cPanel/WHM одиночная и множественная цель Дисклеймер: Этот документ и связанный с ним скрипт exploit.py предоставлены строго в образовательных целях, для исследований в области безопасности и авторизованного тестирования на проникновение. Не используйте это...

fierce

Fierce Fierce is a DNS reconnaissance tool for locating non-contiguous IP space. Useful links: Domain Name System DNS Domain Names - Concepts and Facilities Domain Names - Implementation and Specification Threat Analysis of the Domain Name System DNS Name Servers NS State of Authority Record SOA...

CVE-2026-41940

CVE-2026-41940: Contournement d'authentification cPanel/WHM Cible unique & Multi-cibles Avertissement : Ce document et le script associé exploit.py sont fournis strictement à des fins éducatives, de recherche en sécurité et de tests d'intrusion autorisés. N'utilisez pas ce logiciel contre des...

CVE-2021-2109

CVE-2021-2109 CVE-2021-2109 scanner de base Utilisez-le avec python3 cve-2021-2109.py URL...

inquisitor

Inquisitor Notice This project is only partially complete and I have yet to implement many of the features described in the following blog post I made: https://penafieljlm.com/2017/07/14/inquisitor/. Inquisitor is a simple tool for gathering information on companies and organizations through the...

Azure-APIM-Cross-Tenant-Signup-Bypass

Contournement de l'inscription inter-locataire Azure APIM Statut 01.12.2025 : Cette vulnérabilité est toujours active et exploitable. Microsoft n'a pas corrigé ce problème et le considère comme « by design ». Avis de sécurité GHSA-vcwf-73jp-r7mv CVE-2025-66390 Résumé Une vulnérabilité de sécurité...

certbot

.. This file contains a series of comments that are used to include sections of this README in other files. Do not modify these comments unless you know what you are doing. tag:intro-begin |build-status| .. |build-status| image::...

VMProtect-devirtualization

Виртуализация VMProtect Экспериментальный динамический подход к девиртуализации чистых функций, защищённых VMProtect 3.x TL;DR Введение Подход Пример 1: Простая битовая операция под защитой Пример 2: MBA-операция под защитой Пример 3: Более одного базового блока Заключение и ограничения Ссылки...

TOTOLINK/Realtek Routers - CAPTCHA Bypass

On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via a POST request to the boafrm/formLogin URI with the JSON payload "topicurl":"setting/getSanvas". This allows an unauthenticated attacker to bypass CAPTCHA verification, gaining unauthorized access to restricted...

MLflow < 3.10.0 - Authentication Bypass on FastAPI Routes

A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes when the server is started with authentication enabled --app-name basic-auth and served via uvicorn ASGI. The FastAPI permission middleware only enforces authentication on /gateway/...

MLflow Job API - Authentication Bypass

MLflow latest version contains an authentication bypass caused by unprotected FastAPI job endpoints under /ajax-api/3.0/jobs/ when basic-auth is enabled, letting unauthenticated network clients submit and manage jobs, exploit requires job execution enabled and allowlisted job functions. id:...

shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...

Swego

Swego Швейцарский армейский нож веб-сервер на Golang. Простота как у python SimpleHTTPServer, но с множеством функций. Использование Запуск бинарного файла Если вы не хотите собирать его, бинарные файлы доступны на https://github.com/nodauf/Swego/releases В противном случае должны быть установлен...

EUVD-2026-52744

@a2ui/webcore: openUrl permits javascript: URI execution via agent-supplied button actions...

GHSA-72QQ-P3R5-F7WQ @a2ui/web_core: `openUrl` permits `javascript:` URI execution via agent-supplied button actions

Summary The openUrl function in @a2ui/webcore passes an agent-controlled URL directly to window.open without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button, arbitra...

galer

galer /' '/'' | | /'' ' | || | | | '\ ','\ | /' @dwisiswant0 A fast tool to fetch URLs from HTML attributes by crawl-in. Inspired by the @omespino Tweet, which is possible to extract src, href, url and action values by evaluating JavaScript through Chrome DevTools Protocol. Resources...

phishery

phishery Phishery — это простой HTTP-сервер с поддержкой SSL, основное назначение которого — фишинг учётных данных через базовую аутентификацию Basic Authentication. Phishery также позволяет легко внедрять URL в документ .docx Word. Мощь phishery лучше всего демонстрируется при установке шаблона...

cansina

Cansina Cansina is a Web Content Discovery Application. It is well known Web applications don't publish all their resources or public links, so the only way to discover these resources is requesting for them and check the response. Cansina duty is to help you making requests and filtering and...