htb-ctf-walkthroughs

Guías de CTF de HTB Soluciones documentadas para máquinas de HackTheBox. Cada guía cubre enumeración → explotación → escalada de privilegios con comandos, capturas de pantalla y análisis técnico. Estructura htb-ctf-/ ├── index.md Full walkthrough └── media/ Screenshots and supporting files...

meg

meg meg는 많은 URL을 가져오되 서버에 '예의 바르게' 대하는 도구입니다. 여러 호스트에 대해 많은 경로를 가져오는 데 사용할 수 있습니다. 한 경로를 모든 호스트에 대해 가져온 후 다음 경로로 넘어가 반복합니다. 많은 결과를 빠르게 얻을 수 있지만, 개별 호스트가 트래픽에 넘쳐나지는 않습니다. 설치 meg는 Go로 작성되었으며 런타임 종속성이 없습니다. Go 1.9 이상이 설치되고 구성되어 있다면 go install로 meg를 설치할 수 있습니다: ▶ go install...

Security Bulletin:jackson-databind Deserialization Eager DNS Resolution Vulnerability

Summary jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prior to versions 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1 on their respective release lines, the java.net.InetAddress branch of FromStringDeserializer.Std.deserialize calls...

vhosts-sieve

VHosts Sieve 해결 불가능한 도메인 중에서 가상 호스트를 검색합니다. 설치 git clone https://github.com/dariusztytko/vhosts-sieve.git pip3 install -r vhosts-sieve/requirements.txt 사용법 서브도메인 목록을 가져옵니다 예: Amass 사용 $ amass enum -v -passive -o domains.txt -d example.com -d example-related.com vhosts-sieve.py를 사용하여 가상 호스트를 찾습니다 ...

disclo

disclo Buscador de contactos de dominio. Dale un dominio, obtén cada correo electrónico, handle y lead asociado con él, a través de 12 fuentes pasivas, en paralelo. $ python disclo.py gitlab.com disclo - gitlab.com ---------------------------------------------------------------------- hackerone...

CVE-2026-107269

Gophish through 0.12.1 contains a timing discrepancy vulnerability in AdminServer.Login that allows unauthenticated attackers to enumerate valid usernames by measuring login response times. Attackers can submit candidate usernames to POST /login and detect bcrypt comparison delays for existing...

EUVD-2026-94404

Gophish 0.11.0 through 0.12.1 contains a server-side request forgery vulnerability that allows authenticated low-privileged users to reach loopback and private hosts via POST /api/import/site. Attackers can submit internal URLs, which the default dialer deny list does not block, to read service...

CVE-2026-107273 Gophish 0.11.0 through 0.12.1 SSRF via POST /api/import/site

Gophish 0.11.0 through 0.12.1 contains a server-side request forgery vulnerability that allows authenticated low-privileged users to reach loopback and private hosts via POST /api/import/site. Attackers can submit internal URLs, which the default dialer deny list does not block, to read service...

CVE-2026-107273 Gophish 0.11.0 through 0.12.1 SSRF via POST /api/import/site

Gophish 0.11.0 through 0.12.1 contains a server-side request forgery vulnerability that allows authenticated low-privileged users to reach loopback and private hosts via POST /api/import/site. Attackers can submit internal URLs, which the default dialer deny list does not block, to read service...

CVE-2026-107269 Gophish through 0.12.1 Username Enumeration via POST /login Timing Discrepancy

Gophish through 0.12.1 contains a timing discrepancy vulnerability in AdminServer.Login that allows unauthenticated attackers to enumerate valid usernames by measuring login response times. Attackers can submit candidate usernames to POST /login and detect bcrypt comparison delays for existing...

EUVD-2026-94398

Gophish through 0.12.1 contains a timing discrepancy vulnerability in AdminServer.Login that allows unauthenticated attackers to enumerate valid usernames by measuring login response times. Attackers can submit candidate usernames to POST /login and detect bcrypt comparison delays for existing...

CVE-2026-107269

Versions of Gophish through 0.12.1 are vulnerable to a timing discrepancy in the AdminServer.Login function. This flaw allows unauthenticated attackers to perform username enumeration by measuring response times during a POST /login request. Specifically, the application exhibits different delays...

CVE-2026-107269 Gophish through 0.12.1 Username Enumeration via POST /login Timing Discrepancy

Gophish through 0.12.1 contains a timing discrepancy vulnerability in AdminServer.Login that allows unauthenticated attackers to enumerate valid usernames by measuring login response times. Attackers can submit candidate usernames to POST /login and detect bcrypt comparison delays for existing...

ResetSpy

ResetSpy Probe Microsoft's Self-Service Password Reset SSPR endpoint to enumerate registeted verification methods and flag any that lack a strong second factor. Provides user enumeration and an approximation of MFA posture across Entra accounts. !NOTE As of August 2026, Microsoft has removed the...

CVE-2024-44762-webmin-userenum

Este repositorio no tiene un README...

GitLab GraphQL API User Enumeration

An unauthenticated remote attacker can leverage this vulnerability to collect registered GitLab usernames, names, and email addresses. id: CVE-2021-4191 info: name: GitLab GraphQL API User Enumeration author: zsusac severity: medium description: An unauthenticated remote attacker can leverage thi...

Pulse

Hi este es un script para comprobar direcciones IP de shodan que son vulnerables a la explotación de Pulse Secure CVE-2019-11510 Gracias a Rakesh Parchuri por ayudar a escribir el script Después de obtener las IP de la salida, usa el módulo de Metasploit para explotar más...

CVE-2024-55374

CVE-2024-55374 Redcap 14.3.13 es vulnerable a la enumeración de usuarios porque devuelve mensajes de error distintos según si el usuario existe o no. Esto permite a un atacante enviar múltiples solicitudes de autenticación HTTP para realizar ataques de fuerza bruta. Aunque existe un mecanismo de...

PT-2026-107566

Gophish through 0.12.1 contains a timing discrepancy vulnerability in AdminServer.Login that allows unauthenticated attackers to enumerate valid usernames by measuring login response times. Attackers can submit candidate usernames to POST /login and detect bcrypt comparison delays for existing...

CVE-2026-98169

A flaw was found in the Linux kernel's Server Message Block SMB client. This issue leads to information disclosure caused by an out-of-bounds memory read during snapshot enumeration. A malicious SMB server can provide an unexpectedly short response, causing the kernel client to read beyond the...