malicious-pdf

Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...

log4j-detect

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...

Collabfiltrator

Collabfiltrator 通过 Burp Collaborator 经 DNS 外带盲式远程代码执行（RCE）与 SQL 注入的输出。 版本：4.0.1 作者： Adam Logue Jared McLaren Frank Scarpella Ryan Griffin AI 作者： Claude 3.5 Sonnet ChatGPT 4o 环境要求： Burp Suite Professional 2024.12.1 或更高版本 支持： 从源码构建 在 Burp Suite Professional 中安装 原始博客文章 支持的 RCE 目标： Windows（Powershell...

Log4j-RCE-Exploiter

Log4j-RCE-Exploiter 针对 Log4j RCE CVE-2021-44228 的扫描器 安装 安装时，请以超级用户（ROOT）身份运行以下命令： ▶ cd Log4j-RCE-Exploiter ▶ chmod 777 installer.sh ▶ ./installer.sh 使用 ▶ log4jExploiter -d tesla.com -b 6nuulng8dd2sivtd3kht31s9e0kq8f.burpcollaborator.net -h, --help Display help -l, --url-list List of...

collaborator

collaborator BurpSuite 标准/私有 Collaborator 库...

BlackThrone

BlackThrone PHP BlackThrone Script は、Burp Collaborator のオープンソース代替ツールです。 BlackThrone は、メインウェブサイト内の WebSocket および HTTP トラフィックを検出し、いくつかのサーバーヘッダーとクライアント情報を提供するために作成されました。 BlackThrone は PHP を使用して Web サーバー上で実行する Web ベースのツールです。訪問者の IP、国、ヘッダーなどを検出します。 Blind SSRF/XSS、CORS などのスキャンに役立ちます。...

CollaboratorPlusPlus

CollaboratorPlusPlus 由 NCC Group Plc 以开源形式发布 - http://www.nccgroup.com/ 开发者：Corey Arthur，[email protected] http://www.github.com/nccgroup/CollaboratorPlusPlus 本项目根据 AGPL 许可证发布，更多信息请参阅 LICENSE。 从发布版下载。 背景 该工具旨在扩展 Burp Suite 现有的 Collaborator 功能，提供许多提升使用体验的功能，并实现一种身份验证机制来保护私有 collaborator...

log4j

log4j-detect 简单的 Python 3 脚本，用于通过多线程检测 URL 列表中的 "Log4j" Java 库漏洞（CVE-2021-44228） 该脚本基于 takito1812/log4j-detect 作者：ExodataCyberdefense 脚本 "log4j-detect.py" 使用 Python 3 开发，用于检测指定 URL 列表是否易受 CVE-2021-44228 漏洞影响。 为此，它使用线程（更高性能）向指定列表中的每个 URL 发送 GET 请求。该 GET 请求包含一个有效载荷，成功时会将 DNS 请求发送到 Burp Collaborator...

marshalsec

Java Unmarshaller Security - Turning your data into code execution If you came here for Log4Shell/CVE-2021-44228, you may want to read about the exploitation vectors and affected Java runtime versions: https://mbechler.github.io/2021/12/10/PSALog4ShellJNDIInjection/ Paper It's been more than two...

CVE-2026-105267

A flaw was found in Gitea. The web endpoint used for deleting repository tags shares request handling logic with release deletion without verifying if the target is an ordinary tag. An authenticated collaborator with code write permissions can exploit this flaw to bypass release access controls a...

CVE-2026-105267 Gitea tag delete route deletes releases without release permission

The Gitea web route for deleting tags POST /owner/repo/tags/delete requires only write access to the Code unit, but shares its handler with release deletion and did not check that the target was a plain tag. A collaborator with Code write access and without Releases write access could permanently...

CVE-2026-103620 Missing authorization in GitHub Enterprise Server allowed repository writers to replace default branches via GraphQL

A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository collaborator with write access to delete the current default branch through the GraphQL API and cause an attacker-controlled branch to become the new default. In repositories that required...

Burp-Log4j-HammerTime

Log4j-HammerTime Esta extensión de Burp Suite Active Scanner valida la explotación de las vulnerabilidades CVE-2021-44228 y CVE-2021-45046 de Apache Log4j. Esta extensión utiliza Burp Collaborator para verificar el problema. Uso Habilita esta extensión Lanza un escaneo activo sobre un objetivo...

CVE-2026-100859

Heym before 0.0.106 contains a credential exfiltration vulnerability in the POST /api/credentials/test endpoint that allows collaborators with shared credential access to exfiltrate the credential owner's secret. Attackers can override the destination URL in the config parameter to cause the serv...

CVE-2026-100859

The Heym application (versions before 0.0.106 ) is vulnerable to a credential exfiltration flaw in the POST /api/credentials/test endpoint. The root cause is an URL override vulnerability where collaborators with shared credential access can manipulate the config parameter. By overriding the dest...

CVE-2026-100859 Heym before 0.0.106 Credential Exfiltration via URL Override

Heym before 0.0.106 contains a credential exfiltration vulnerability in the POST /api/credentials/test endpoint that allows collaborators with shared credential access to exfiltrate the credential owner's secret. Attackers can override the destination URL in the config parameter to cause the serv...

EUVD-2026-87824

Heym before 0.0.106 contains a credential exfiltration vulnerability in the POST /api/credentials/test endpoint that allows collaborators with shared credential access to exfiltrate the credential owner's secret. Attackers can override the destination URL in the config parameter to cause the serv...

CVE-2026-100859 Heym before 0.0.106 Credential Exfiltration via URL Override

Heym before 0.0.106 contains a credential exfiltration vulnerability in the POST /api/credentials/test endpoint that allows collaborators with shared credential access to exfiltrate the credential owner's secret. Attackers can override the destination URL in the config parameter to cause the serv...

MAL-2026-16359 Malicious code in @uh-platform/domain-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa27cef146dec157eaf78519d56ff2ef696f32e99746cdabea9e30be7c03b96 Package @uh-platform/[email protected] is a scoped placeholder with an empty author, generic description, and no real functionality. Its...

MAL-2026-16323 Malicious code in action-slack-message-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d5f3deb6623e5340770d4e8866adc3d7239938e5adefc4b699c897287d84eba package.json declares scripts.preinstall = 'node index.js', which runs automatically on npm install. index.js collects host reconnaissance —...