temcrypt

The Next-gen Encryption Try temcrypt on the Web → temcrypt SDK Focused on protecting highly sensitive data, temcrypt is an advanced multi-layer data evolutionary encryption mechanism that offers scalable complexity over time, and is resistant to common brute force attacks. You can create your own...

subdomain3

Subdomain3 README.md inChinese 中文 Description Subdomain3 is a new generation of tool , It helps penetration testers to discover more information in a shorter time than other tools.The information includes subdomains, IP, CDN, and so on. Please enjoy it. Screenshot medium pattern for speed Feature...

Vxscan

Vxscan 2.0 English | 简体中文 Python3 comprehensive scanning tool, mainly used for sensitive file detection directory scanning and js leak interface, WAF/CDN identification, port scanning, fingerprint/service identification, operating system identification, weak password detection, POC scanning, SQL...

CVE-2023-30533

POC - CVE-2023-30533 A POC for CVE-2023-30533 Copied as per: https://cdn.sheetjs.com/advisories/CVE-2023-30533: All releases of SheetJS Community Edition up to version 0.19.2 are affected. This includes: - scripts and modules on the SheetJS CDN through version 0.19.2 2 - modules published with th...

AntiCropalypse

March 31st, 2023 Update As of today, Discord's CDN now strips trailing data from PNGs in-flight, meaning that even old uploads are now safe from the aCropalypse vulnerability. As such, this bot is no longer necessary, but it will remain online to allow users to download their archived images. The...

cdncheck

cdncheck Features • Installation • Usage • Join Discord cdncheck is a tool for identifying the technology associated with dns / ip network addresses. Features CDN , CLOUD and WAF Detection Easy to use as library Easily extendable providers IP, DNS input support Text, JSONL output Filters on outpu...

CloudFlair

CloudFlair Important note: As of late 2024, Censys does not provide API access to free accounts anymore. This means CloudFlair does not work with free Censys accounts anymore. CloudFlair is a tool to find origin servers of websites protected by CloudFlare or CloudFront which are publicly exposed...

nali

Nali An offline tool for querying IP geographic information and CDN provider. 中文文档 Feature Multi database support Chunzhen qqip database ZX ipv6 database Geoip2 city database IPIP free database ip2region database DB-IP database IP2Location DB3 LITE database CDN provider query Pipeline support...

CVE-2025-27415-PoC

CVE-2025-27415 PoC Nuxt3 cache poisoning A repository for setting up the cache poisoning vulnerability environment that occurs in nuxt3 =3.0.0 3.16.0 Vulnerability Summary When a CDN is placed in front of a Nuxt server, and the CDN only stores the path excluding URL queries as the cache key, a...

tf-mythic-azure

Terraforming Mythic This project allows operators to set up multiple Mythic C2 servers in Azure. Optionally, Azure CDN redirectors can be created as well. The idea is that you are able to create multiple "projects" that you can manage from this Terraform code. This way, operators can manage the...

CVE-2024-26144-test

CVE-2024-26144-test Requirement: Docker compose Deno $ deno run --allow-run --allow-net check.ts If you want to test CDN, please set the URL in argument. Make sure all caches are purged before run! $ deno run --allow-run --allow-net check.ts https://example.com/ Results If HTTP response contains...

Abused-Legitimate-Services

Abused Legitimate Services Legitimate third-party Platform-as-a-Service PaaS providers are becoming increasingly leveraged by threat actors for phishing and malware deployment. PaaS providers such as cloud instances, marketing platforms, content delivery networks CDN, and dynamic DNS servers have...

CVE-2026-109985 xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'post_content' Parameter

The xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-109985 xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'post_content' Parameter

The xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-109985

The xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 1.4.2 . The root cause is insufficient input sanitization and output escaping involving the 'content' parameter . This a...

WordPress xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN plugin <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN versions = 1.4.2...

findcdn

findcdn findcdn, is a tool that can scan and detect the kind of Content Distribution Network CDN a domain uses. findcdn can save results to a file, be used as a module, or just output to stdout. findcdn helps users of the tool accurately determine what CDN a domain is using. The list of supported...

FUCK-CDN

FUCK-CDN Exhaust every possible means, strip the CDN down to its underwear, and find the real IP. An automated CDN origin server tracing skill built for Claude Code. Input a target domain, and it automatically executes 40+ OSINT methods in priority order, builds an evidence chain, and outputs a...

cdn-ip-scanner

CDN IP Scanner V3.0 High Accuracy • Ultra Fast • Real-Time 🌐 Language: English | فارسی Install • Features • Usage • What's new • Developers • Donate 📚 Table of Contents 1. Overview 2. Features 3. Installation npm app Windows / macOS / Linux — step by step Android app Linux server Release files &...

waf-detector

WAF Detector CLI tool for detecting, testing, and profiling Web Application Firewalls WAFs and Content Delivery Networks CDNs. Important: Only test systems you own or have explicit authorization to test. For AI coding agents: See AGENTS.md for skill mapping and workflow pointers. Use...