CVE-2024-28000

CVE-2024-28000 - LiteSpeed Cache Privilege Escalation PoC !WARNING This repository is intended for educational and research purposes only. Use the provided PoC exclusively on systems you own or have explicit permission to test. Unauthorized access , exploitation, or misuse of any material in this...

CVE-2026-82286

gpt-crawler through 1.5.1 fails to validate the outputFileName parameter in the POST /crawl endpoint, allowing unauthenticated attackers to write arbitrary files to any filesystem path. Attackers can supply absolute paths or parent-directory segments to overwrite existing files with content sourc...

EUVD-2026-67817

gpt-crawler through 1.5.1 fails to validate the outputFileName parameter in the POST /crawl endpoint, allowing unauthenticated attackers to write arbitrary files to any filesystem path. Attackers can supply absolute paths or parent-directory segments to overwrite existing files with content sourc...

CVE-2026-82286

gpt-crawler through version 1.5.1 (BuilderIO) is vulnerable to an arbitrary file write via the outputFileName parameter in the POST /crawl endpoint. The root cause is a failure to validate this parameter, allowing unauthenticated attackers to supply absolute paths or parent-directory segments and...

CVE-2026-82286 gpt-crawler Arbitrary File Write via outputFileName Parameter

gpt-crawler through 1.5.1 fails to validate the outputFileName parameter in the POST /crawl endpoint, allowing unauthenticated attackers to write arbitrary files to any filesystem path. Attackers can supply absolute paths or parent-directory segments to overwrite existing files with content sourc...

CVE-2026-82286 gpt-crawler Arbitrary File Write via outputFileName Parameter

gpt-crawler through 1.5.1 fails to validate the outputFileName parameter in the POST /crawl endpoint, allowing unauthenticated attackers to write arbitrary files to any filesystem path. Attackers can supply absolute paths or parent-directory segments to overwrite existing files with content sourc...

Lurkstrain

Lurkstrain Un crawler all-in-one per pannelli di amministrazione per pentester...

goop

goop Google-Suche-Scraper Hinweis: Es funktioniert nicht mehr. Google hat mir mitgeteilt, dass es kein legitimes Problem sei, als ich es meldete, aber jetzt haben sie es stillschweigend behoben. Inhalt Einleitung Wie funktioniert es? Verwendung Installation Beispiel Rechtliches & Haftungsausschlu...

telegram_bbbot

telegrambbbot Bot Telegram Bug Bounty https://telegram.me/bugbountychannel Historique Ce bot a été adapté spécialement pour le déploiement sur Heroku Objectifs généraux de ce bot - « Être utile à la communauté infosec ! » Le bot utilise https://github.com/maddevsio/bbcrawler pour récupérer les...

gryffin

ARCHIVED Gryffin beta Gryffin is a large scale web security scanning platform. It is not yet another scanner. It was written to solve two specific problems with existing scanners: coverage and scale. Better coverage translates to fewer false negatives. Inherent scalability translates to capabilit...

Bashter

Bashter 4.1 Web-Crawler-, Scanner- und Analyzer-Framework Bash-Skript-basiert...

creep-web-app-scanner

creep-web-app-scanner Uno scanner per siti web molto primitivo attualmente in sviluppo da un dipendente di NCC Group, laureato universitario, con il 20% di tempo dedicato alla ricerca. creep attualmente esegue il crawling di un sito e cerca informazioni potenzialmente interessanti all'interno di...

CVE-2014-6271_Test

CVE-2014-6271Test CVE-2014-6271Test Ovviamente, questo progetto viene utilizzato per verificare se un server con cgi abilitato è affetto da CVE-2014-6271ovvero shellshock. Dipendenza Serve GoogleSearchCrawler. Utilizzo es.: root@kitploit: python exp.py -g www.google.com Questo testerà gli URL...

sql-global-injector

Ultimate-Dork web crawler e scansione della vulnerabilità SQL injection Utilizzo e Installazione root@kitploit: - Installation apt-get install python python3 git git clone https://github.com/nu11secur1ty/sql-global-injector.git python3 -m pip install requests mechanicalsoup cd sql-global-injector...

vexhub-crawler

VEX Hub Crawler vexhub-crawler è un componente del VEX Hub che recupera automaticamente i documenti VEX dai repository sorgente. Panoramica Il crawler identifica i repository sorgente a partire dai PURL Package URL registrati e copia i documenti VEX in VEX Hub. Questo processo garantisce che VEX...

webpwn3r

webpwn3r This project is not maintained for years, and was written when I started learning Python, but still people likes it :D. it only supports python2.7 WebPwn3r - Web Applications Security Scanner. By Ebrahim Hegazy - @Zigoo0 Thanks: @lnxg33k, @dia2diab @Aelhemily, @okamalo Please send all yo...

xcrawl3r

xcrawl3r xcrawl3r è un'utilità da riga di comando progettata per esplorare ricorsivamente pagine web alla ricerca di URL. Funziona attraversando attivamente i siti web - seguendo i collegamenti incorporati nelle pagine web e analizzando file inclusi sitemap e robots.txt - per scoprire ogni URL. A...

INtrack

INtrack - Rastreador de Internet e Scanner de Segurança O INtrack é um poderoso scanner de segurança e rastreador de internet multithread, projetado para reconhecimento de rede, detecção de vulnerabilidades e avaliação de segurança. Ele pode verificar uma grande variedade de instâncias,...

evine

Evine Interaktiver CLI-Webcrawler. Evine ist ein einfacher, schneller und interaktiver Webcrawler und Web-Scraper, geschrieben in Golang. Evine ist für eine Vielzahl von Zwecken nützlich, wie z. B. Metadaten- und Datenextraktion, Data Mining, Aufklärung und Tests. Wenn dir das Projekt gefällt, gi...

CVE-2026-76164

AIL Framework contains a server-side request forgery SSRF vulnerability in its crawler submission functionality. A low-privileged authenticated user with access to the crawler interface can submit an arbitrary URL for crawling without adequate validation of the destination host. The crawler can...