CVE-2022-26134

CVE-2022-26134 1. Primeiro execute os scripts do shodan para capturar todos os IPs python3 shodanscript.py -API yourapi -L limit -D "http.favicon.hash:-305179312 200" log.txt exemplo: python3 shodanscript.py -API xxxxxxx -L 10 -D "http.favicon.hash:-305179312 200" log.txt 2. Para todos os IPs...

MurMurHash

MurMurHash यह छोटा उपकरण Shodan प्लेटफॉर्म पर फिशिंग वेबसाइटों का शिकार करने के लिए एक फेविकॉन के MurmurHash मान की गणना करने के लिए है। MurMurHash क्या है? MurmurHash एक गैर-क्रिप्टोग्राफिक हैश फ़ंक्शन है जो सामान्य हैश-आधारित लुकअप के लिए उपयुक्त है। यह नाम अपने आंतरिक लूप में उपयोग किए जाने वा...

FavFreak

FavFreak - Armando favicon.ico para Bug Bounties , OSINT e muito mais Descrição detalhada pode ser encontrada aqui : Leia o blog aqui : https://medium.com/@Asm0d3us/weaponizing-favicon-ico-for-bugbounties-osint-and-what-not-ace3c214e139 Introdução Eu criei esta ferramenta para facilitar meu...

CVE-2020-5902

CVE-2020-5902 Shodan root@kitploit: http.favicon.hash:-335242539 "3992"...

SPIP BigUp Plugin - Remote Code Execution

SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HTTP request. id: CVE-2024-8517 info: name: SPIP BigUp Plugin - Remote Code Execution...

vajra

An automated web hacking framework for web applications Table of Content About Vajra What is Vajra Key Feaures What Vajra does Installation Running with docker-compose Tools Used by Vajra...

JetBrains TeamCity 2023.05.3 - Remote Code Execution Exploit

Exploit Title: JetBrains TeamCity 2023.05.3 - Remote Code Execution RCE - Shodan Dork: http.title:TeamCity , http.favicon.hash:-1944119648 - Exploit Author: ByteHunter - Vendor: JetBrains - Email: email protected - vendor: JetBrains - Version: versions before 2023.05.4 - Tested on: 2023.05.3 -...

Tenda N300 F3 12.01.01.48 - Malformed HTTP Request Header Processing

!/usr/bin/python3 Exploit Title: Tenda N300 F3 12.01.01.48 - Malformed HTTP Request Header Processing Shodan Dork: http.favicon.hash:-2145085239 http.title:"Tenda | LOGIN" Date: 09/03/2023 Exploit Author: @h454nsec Github: https://github.com/H454NSec/CVE-2020-35391 Vendor Homepage:...

Embedthis GoAhead Detection (HTTP)

HTTP based detection of the Embedthis GoAhead embedded web server. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...