5883 matches found
TJ-OSINT-Notebook
TJ-OSINT-Notebook Lançamento Inicial 18 de novembro de 2022 Propósito Principal: Este Caderno de OSINT fornece uma visão geral das ferramentas, técnicas e recursos que utilizo em diversas situações para realizar operações de reconhecimento e OSINT. Este Caderno me ajudou em muitas situações a...
osint-menace
OSINT Menace Console de Reconhecimento de Código Aberto Construído para Caçadores, Não Navegadores. OSINT Menace é um Projeto de Pensamento Defensivo. OSINT Menace é uma aplicação web Python Dockerizada para triagem passiva de OSINT orientada a casos. Ela oferece aos analistas uma interface simpl...
CVE-2023-25202
CVE-2023-25202: Unsicherer Datei-Upload-Mechanismus Beschreibung CVE-2023-25202 betrifft einen unsicheren Datei-Upload-Mechanismus in der Therefore-Anwendung, der bei den Dateitypen, die Benutzer hochladen können, übermäßig permissiv ist. Die Anwendung blockiert nur Uploads von HTML-, EXE- und...
httpgrep
Description A fast, asynchronous Python tool that scans HTTPS servers and greps for strings or regex patterns in HTTP response bodies and headers. It takes single hosts, URLs, CIDR ranges, IP ranges or files; scans multiple ports per target single, comma-lists or ranges, auto-detecting TLS vs pla...
sniffles
Sniffles – Paketerfassungsgenerator für IDS und reguläre Ausdrucksauswertung Sniffles ist ein Werkzeug zum Erstellen von Paketerfassungen, die IDS testen, die feste Muster oder reguläre Ausdrücke zur Erkennung verdächtigen Verhaltens verwenden. Sniffles funktioniert sehr einfach. Es nimmt eine...
monstra_cms-3.0.4--getshell
monstracms-3.0.4--getshell monstracms-3.0.4-Hochladen von GetShell CVE- 2018-17418 Code-Analyse Code-Analyse: In Zeile 150 von monstra\plugins\box\filesmanager\ filesmanager.admin.php gibt es eine Variable forbiddentypes, die als Blacklist-Einschränkung dient. Verfolgen Sie diese Variable weiter...
CVE-2024-32002-Reverse-Shell
CVE-2024-32002-Reverse-Shell Dieses Skript demonstriert, wie die Schwachstelle CVE-2024-32002 ausgenutzt wird, um eine Reverse-Shell zu erhalten und so Fernzugriff auf das betroffene System zu ermöglichen. Verwenden Sie es mit Vorsicht in kontrollierten Umgebungen und nur zu Bildungs- oder...
Hundred OSINT
h-osint h-osint Um ambiente de trabalho OSINT local-first, orientado por teclado, para o terminal — atalhos estilo Neovim, configuração em Lua, 12 temas e um armazenamento local de casos em SQLite. Sem conta, sem backend na nuvem, sem telemetria. kitty » h-osint Repositório: h-osint · Binário:...
CVE-2026-9086-poc
CVE-2026-9086: Bypass da validação de esquema URI do Keycloak - PoC XSS English version Visão Geral Este repositório é uma Prova de Conceito PoC da vulnerabilidade de Cross-Site Scripting XSS CVE-2026-9086 , existente na validação de URI de cliente do Keycloak. O Keycloak vulnerável validava os...
antisquat
AntiSquat AntiSquat leverages AI techniques such as natural language processing NLP, large language models ChatGPT and more to empower detection of typosquatting and phishing domains. How to use Clone the project via git clone https://github.com/redhuntlabs/antisquat. Install all dependencies by...
OsintCase
OSINTCase Based onOSINTMapper by Geistnigma. This project is a modified and extended version of OSINTMapper with additional features and changes focused on investigation case management, intelligence analysis and evidence handling. A browser-based OSINT investigation and case mapping tool. Organi...
gitls
Enumerate git repository URL from list of URL / User / Org. Friendly to pipeline This tool is available when the repository, such as github, is included in the bugbounty scope. Sometimes specified as an org name or user name rather than a specific repository, you can use this tool to extract url...
CVE-2026-105570
Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively. Untrusted code inside a sandbox could use a case-variant hostname to reach the genuine provider...
CVE-2026-105570 Docker Sandboxes OAuth response masking could be bypassed with a case-variant token host
Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames case-insensitively. Untrusted code inside a sandbox could use a case-variant hostname to reach the genuine provider...
CVE-2026-105570
Docker Sandboxes are vulnerable to a security bypass where OAuth response masking can be circumvented using a case-variant token host . The root cause is a discrepancy in case sensitivity handling: the system compares OAuth token-endpoint hostnames case-sensitvely for masking decisions, but reque...
CVE-2026-107336
The Malcolm front nginx reverse proxy contains an authentication bypass vulnerability. A
CVE-2026-107336 Authentication Bypass by Spoofing in Malcolm
Malcolm's front nginx reverse proxy defines a "Dashboards → Arkime shortcut" location using a case-insensitive regex matcher but a case-sensitive rewrite. A request whose path segment is not exact-lowercase for example /IDDASH2ARK/... enters the location the matcher fires but evades the rewrite n...
CVE-2024-32002
PoC für CVE-2024-32002, das Skript aus dem Testfall des Entwicklers: https://github.com/git/git/commit/97065761333fd62db1912d81b489db938d8c991ddiff-2ba261bbd9de8e881d700e696eebab0df581473ba50b671b2cbe4bbee5ca87b0 Diese Software wurde ausschließlich für akademische Forschungszwecke und zur...
CVE-2024-50379-POC
Exploração do CVE-2024-50379 e POC Este repositório contém uma Prova de Conceito POC para CVE-2024-50379 , uma vulnerabilidade que afeta o Apache Tomcat. O problema envolve uma condição de corrida do tipo Time-of-Check Time-of-Use TOCTOU , que pode levar à Execução Remota de Código RCE ,...
