corsair_scan

مرحبًا بك في Corsairscan Corsairscan هي أداة أمنية لاختبار الأخطاء في تكوين مشاركة الموارد عبر الأصل CORS. CORS هي آلية تسمح بطلب موارد مقيدة على صفحة ويب من نطاق آخر خارج النطاق الذي تم تقديم المورد الأول منه. إذا لم يتم تكوين ذلك بشكل صحيح، يمكن للنطاقات غير المصرح لها الوصول إلى تلك الموارد...

theftfuzzer

┌┬┐┬ ┬┌─┐┌─┐┌┬┐┌─┐┬ ┬┌─┐┌─┐┌─┐┬─┐ │ ├─┤├┤ ├┤ │ ├┤ │ │┌─┘┌─┘├┤ ├┬┘ ┴ ┴ ┴└─┘└ ┴ └ └─┘└─┘└─┘└─┘┴└─ root@kitploit: المقدمة: TheftFuzzer هي أداة تقوم بتفجير تطبيقات مشاركة الموارد عبر الأصل CORS بحثاً عن التهيئات الخاطئة الشائعة. الاستخدام: python theftfuzzer.py -d 'http://example.com/api/data'...

CoolerControl 安全漏洞

CoolerControl is an open-source control software for cooling devices developed by CoolerControl. Versions of CoolerControl prior to 4.0.0 contained security vulnerabilities. These vulnerabilities were caused by incorrect CORS configurations, which could allow unverified remote attackers to read...

CORStest - A Simple CORS Misconfiguration Scanner

A simple CORSmisconfiguration scanner Based on theresearch of James Kettle CORStest is a quick & dirty Python 2 tool to find Cross-Origin Resource Sharing CORS misconfigurations. It takes a text file as input which may contain a list of domain names or URLs. Currently, the following potential...

5 Popular Web Hosting Services Found Vulnerable to Multiple Flaws

A security researcher has discovered multiple one-click client-side vulnerabilities in the some of the world's most popular and widely-used web hosting companies that could have put millions of their customers as well as billions of their sites' visitors at risk of hacking. Independent researcher...

meg+ - Automated Reconnaissance Wrapper

This wrapper will automate numerous tasks and help you during your reconnaissance process. The script finds common issues, low hanging fruit, and assists you when approaching a target. meg+ also allows you to scan all your in-scope targets on HackerOne in one go — it simply retrieves them using a...