CVE-2024-48360

CVE-2024-48360 | Qualitor = v8.24 Unauthenticated SSRF CVE-2024-48360 | Qualitor = v8.24 Unauthenticated SSRF Description Qualitor is a platform for business process management, and this system is present in various companies in Brazil that can be identified simply by using Google dorking. Our te...

linux-smart-enumeration

D'abord, quelques one-liners utiles ; wget "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -O lse.sh;chmod 700 lse.sh curl "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -Lo lse.sh;chmod 700 lse.sh Notez que...

wpUsersScan

wpUsersScan About wpUsersScan Enumerate the users list of the wordpress websites through the REST API / CVE-2017-5487,WordPress 4.7.1 - Username Enumeration Usage $ python wpUsersScan.py URL How to install Clone Clone the repository with: $ git clone https://github.com/R3K1NG/wpUsersScan.git $ cd...

CVE-2024-54772

CVE-2024-54772 MikroTik-RouterOS Username Enum This repo contains the exploit for CVE-2024-54772 which can enumerate valid usernames using a wordlist in Mikrotik routers running RouterOS stable versions v6.43 through v7.17.2. The patch is available in v6.49.18 and v7.18. For long-term release,...

Royal_APT

RoyalAPT Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research Sharepoint tool Among the tools developed by the group for the victim, APT15 created a .net tool to enumerate the victim's sharepoint database. Below is an screen-shot from the decompiled binary...

rbuster

Rbuster un autre dirbuster Options courantes de la ligne de commande -a - spécifie une chaîne user agent à envoyer dans la requête -c - permet de spécifier des cookies simulation d'authentification. en-tête. -f - force le traitement d'un domaine avec des résultats wildcard. -l - affiche la...

Vajra

Vajra - Your Weapon To Cloud About Vajra Vajra is a UI based tool with multiple techniques for attacking and enumerating in target's Azure environment. The term Vajra refers to the Weapon of God Indra in Indian mythology God of Thunder & Storms. Its connection to the cloud makes it a perfect name...

htbenum

htbenum A Linux enumeration script for Hack The Box This script is designed for use in situations where you do not have internet access on a Linux host and would like to run enumeration and exploit suggestion scripts, such as Hack The Box. I find myself running a similar set of scripts when I get...

CVE-2019-3403

CVE-2019-3403 I wanted to easily be able to exploit CVE-2019-3403 to scrape all the users from a JIRA application, so I threw this script together. It isn't the cleanest code ever, and it doesn't handle requests that return over 1000 users it will just truncate them to the first 1000 - but it can...

CVE-2017-7921-EXP

CVE-2017-7921 Exploit An Improper Authentication issue was discovered in Hikvision devices. ​ The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. ​ This may allow a malicious user to escalate his or her privileges on the system...

cloud_enum

cloudenum L'avenir de cloudenum J'ai créé cet outil en 2019 pour un pentest impliquant Azure, car aucun autre outil d'énumération ne le prenait en charge à l'époque. Il s'est développé à partir de là, et j'ai beaucoup appris en ajoutant des fonctionnalités. Créer des outils est amusant, mais les...

nexfil

NExfil est un outil OSINT écrit en Python pour trouver des profils par nom d'utilisateur. Les noms d'utilisateur fournis sont vérifiés sur plus de 350 sites web en quelques secondes. L'objectif de cet outil était d'obtenir des résultats rapidement tout en maintenant un faible taux de faux positif...

XenoScan

XenoScan XenoScan is a memory scanner which can be used to scan the memory of processes to locate the specific locations of important values. These types of tools are typically used when hacking video games, as they allow one to locate the values representing the game's state in memory. XenoScan ...

hackerone

hackerone I have collected all hackerone disclosed reports by brute forcing on their api https://api.hackerone.com/v1/hackers/reports/id from number 1 to 1500000. May be there are more reports, that it's id is more than 1500000. File reports.csv contain more than 10000 disclosed report, every lin...

droopescan

droopescan A plugin-based scanner that aids security researchers in identifying issues with several CMS. Usage of droopescan for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume n...

intelspy

Perform automated network reconnaissance scans to gather network intelligence. IntelSpy is a multi-threaded network intelligence tool which performs automated network services enumeration. It performs live hosts detection scans, port scans, services enumeration scans, web content scans,...

intelspy

Effectuez des scans automatisés de reconnaissance réseau pour collecter des renseignements sur le réseau. IntelSpy est un outil de renseignement réseau multi-threadé qui réalise une énumération automatisée des services réseau. Il effectue des scans de détection d'hôtes actifs, des scans de ports,...

ohmybackup

ohmybackup ohmybackup - Analyse des répertoires de sauvegarde et fichiers de sauvegarde des victimes ohmybackup Analyse les dossiers de sauvegarde sur les sites cibles. Recherche les fichiers archivés dans les dossiers qu'il trouve. Avec le système de numérisation à 2 fichiers, il ajoute des...

Nerv0usR4bbit

ɴᴇʀᴠ0ᴜs ʀ4ʙʙɪᴛ Automated Pᴏsᴛ Exᴘʟᴏɪᴛᴀᴛɪᴏɴ Eɴᴜᴍᴇʀᴀᴛɪᴏɴ ᴛᴏᴏʟ for Windows target Author : @34zY /!\ NEW PORTABLE VERSION AVAILABLE SOON. ---------------------------------------------------------------------------- | .--, \ 🐰 | \ / | \ / | | / ,/ /\ \ 💙 | \ 2.0 Windows ' . ' -. | | . ' " . | | /─-.-...

linkedin2username

linkedin2username Outil OSINT : Générer des listes de noms d'utilisateur à partir d'entreprises sur LinkedIn. Il s'agit d'un pur scraper web, aucune clé API n'est nécessaire. Vous utilisez votre nom d'utilisateur et mot de passe LinkedIn valides pour vous connecter, il créera plusieurs listes de...