Lucene search
+L

47 matches found

Kitploit
Kitploit
added 2026/08/27 4:55 a.m.2 views

ParamFinder

ParamFinder 直接从 Caido 发现隐藏参数! 安装 通过社区商店 推荐 1. 在您的 Caido 中,进入插件页面 2. 导航到社区商店 3. 搜索 ParamFinder 4. 点击安装 5. 完成!🎉 手动安装 1. 前往 Releases 页面 2. 下载最新的 pluginpackage.zip 3. 在您的 Caido 中进入插件页面 4. 点击“安装包”并选择下载的 pluginpackage.zip 文件 5. 完成!🎉 启动方式 快速菜单快捷键 启动 ParamFinder 最快的方式是使用键盘快捷键(可在 Caido 设置 → 快捷键 中自定义)。...

5.3AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/27 4:18 a.m.2 views

strix

Strix La herramienta de pentesting con IA de código abierto. Hackers de IA autónomos que encuentran y corrigen las vulnerabilidades de tu aplicación. !TIP ¡Nuevo! Strix se integra perfectamente con GitHub Actions y pipelines de CI/CD. Escanea automáticamente en busca de vulnerabilidades en cada...

5.5AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/08/27 2:55 a.m.2 views

airecon

AI 驱动的自主渗透测试代理 -orange.svg AIRecon 是一个自主渗透测试代理,它结合了自托管的 Ollama LLM 与 Kali Linux Docker 沙箱 、原生的 Caido 代理集成 、结构化的 RECON → ANALYSIS → EXPLOIT → REPORT 流程,以及实时的 Textual TUI ——完全离线,无需 API 密钥。 为什么选择 AIRecon? 基于商业 API 的模型(OpenAI GPT-4、Claude、Gemini)对于递归、自主的侦察工作流来说成本高昂,每会话可能需要数千次 LLM 调用。 AIRecon...

6.3AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/08/26 6:29 p.m.4 views

caido

Webseite • Dashboard • Dokumentation • Roadmap • Markenauftritt • Discord 👋 Willkommen Willkommen bei Caido! Caido zielt darauf ab, Sicherheitsexperten und Enthusiasten bei der Prüfung von Webanwendungen mit Effizienz und Leichtigkeit zu unterstützen. Hier können Sie sich an der Entwicklung unser...

5.4AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/21 7:11 a.m.2 views

burp2caido

परिचय Burp2Caido एक उपकरण है जो आपको निर्यात की गई Burpsuite HTTP history फ़ाइलों को Caido में स्थानांतरित करने की अनुमति देता है। इसे मूल रूप से Monke द्वारा विकसित किया गया था। !WARNING यह उपकरण HTTP डेटा को सीधे Caido प्रोजेक्ट में सम्मिलित करता है। इसे कई बार चलाने पर हर बार अनुरोध फिर से जुड...

5.3AI score
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/03/26 11:48 a.m.170 views

Caido-Plugin

Github • Documentation &nbsp...

5.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/02/15 1:19 a.m.20 views

CVE-2026-24853

Caido is a web security auditing toolkit. Prior to 0.55.0, Caido blocks non whitelisted domains to reach out through the 8080 port, and shows Host/IP is not allowed to connect to Caido on all endpoints. But this is bypassable by injecting a X-Forwarded-Host: 127.0.0.1:8080 header. This...

9.8CVSS5.5AI score0.00272EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/13 11:16 p.m.15 views

CVE-2026-24853

Caido is a web security auditing toolkit. Prior to 0.55.0, Caido blocks non whitelisted domains to reach out through the 8080 port, and shows Host/IP is not allowed to connect to Caido on all endpoints. But this is bypassable by injecting a X-Forwarded-Host: 127.0.0.1:8080 header. This...

9.8CVSS0.00272EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/13 10:19 p.m.9 views

CVE-2026-24853 Caido has an insufficient patch for DNS rebind leading to RCE

Caido is a web security auditing toolkit. Prior to 0.55.0, Caido blocks non whitelisted domains to reach out through the 8080 port, and shows Host/IP is not allowed to connect to Caido on all endpoints. But this is bypassable by injecting a X-Forwarded-Host: 127.0.0.1:8080 header. This...

8.1CVSS5.6AI score0.00272EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/13 10:19 p.m.10 views

CVE-2026-24853 Caido has an insufficient patch for DNS rebind leading to RCE

Caido is a web security auditing toolkit. Prior to 0.55.0, Caido blocks non whitelisted domains to reach out through the 8080 port, and shows Host/IP is not allowed to connect to Caido on all endpoints. But this is bypassable by injecting a X-Forwarded-Host: 127.0.0.1:8080 header. This...

8.1CVSS5.5AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/13 10:19 p.m.7 views

CVE-2026-24853

Caido is a web security auditing toolkit. Prior to 0.55.0, Caido blocks non whitelisted domains to reach out through the 8080 port, and shows Host/IP is not allowed to connect to Caido on all endpoints. But this is bypassable by injecting a X-Forwarded-Host: 127.0.0.1:8080 header. This...

8.1CVSS5.5AI score0.00272EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/02/13 10:19 p.m.37 views

CVE-2026-24853 Caido has an insufficient patch for DNS rebind leading to RCE

Caido is a web security auditing toolkit. Prior to 0.55.0, Caido blocks non whitelisted domains to reach out through the 8080 port, and shows Host/IP is not allowed to connect to Caido on all endpoints. But this is bypassable by injecting a X-Forwarded-Host: 127.0.0.1:8080 header. This...

8.1CVSS0.00272EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/13 10:19 p.m.37 views

CVE-2026-24853

CVE-2026-24853 affects Caido before version 0.55.0. The issue allows bypassing domain-based access controls on the 8080 port by injecting an X-Forwarded-Host header (127.0.0.1:8080). Multiple sources confirm the vulnerability exists in Caido up to 0.54.x and was fixed in 0.55.0. Impact details in...

9.8CVSS5.5AI score0.00272EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/13 12:00 a.m.18 views

PT-2026-8042

Name of the Vulnerable Software and Affected Versions Caido versions prior to 0.55.0 Description Caido is a web security auditing toolkit. Before version 0.55.0, the software blocked connections from non-whitelisted domains attempting to reach the 8080 port, displaying a message indicating the...

8.1CVSS5.4AI score0.00272EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/02/13 12:00 a.m.14 views

Caido 安全漏洞

Caido is an open-source application developed by Caido. It aims to help security professionals and enthusiasts efficiently and easily audit web applications. Versions of Caido prior to 0.55.0 contained a security vulnerability that allowed bypassing connection restrictions for domains not on the...

9.8CVSS5.8AI score0.00272EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:17 a.m.14 views

CVE-2025-23039

Caido is a web security auditing toolkit. A Cross-Site Scripting XSS vulnerability was identified in Caido v0.45.0 due to improper sanitization in the URL decoding tooltip of HTTP request and response editors. This issue could allow an attacker to execute arbitrary scripts, potentially leading to...

5.2CVSS6.2AI score0.00235EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/02 12:22 p.m.26 views

CVE-2025-66025

Caido is a web security auditing toolkit. Prior to version 0.53.0, the Markdown renderer used in Caido’s Findings page improperly handled user-supplied Markdown, allowing attacker-controlled links to be rendered without confirmation. When a user opened a finding generated through the scanner, or...

4.3CVSS6.7AI score0.00213EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/26 3:15 a.m.12 views

CVE-2025-66025

Caido is a web security auditing toolkit. Prior to version 0.53.0, the Markdown renderer used in Caido’s Findings page improperly handled user-supplied Markdown, allowing attacker-controlled links to be rendered without confirmation. When a user opened a finding generated through the scanner, or...

4.3CVSS0.00213EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/11/26 1:59 a.m.5 views

CVE-2025-66025 Caido Improperly Handles External Links in Markdown

Caido is a web security auditing toolkit. Prior to version 0.53.0, the Markdown renderer used in Caido’s Findings page improperly handled user-supplied Markdown, allowing attacker-controlled links to be rendered without confirmation. When a user opened a finding generated through the scanner, or...

4.3CVSS6.3AI score0.00213EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/11/26 1:59 a.m.10 views

EUVD-2025-199691

Caido is a web security auditing toolkit. Prior to version 0.53.0, the Markdown renderer used in Caido’s Findings page improperly handled user-supplied Markdown, allowing attacker-controlled links to be rendered without confirmation. When a user opened a finding generated through the scanner, or...

4.3CVSS6.2AI score0.00213EPSS
SaveExploits0References1
Rows per page
Query Builder