shortscan

🌀 Shortscan Инструмент для перечисления коротких имен файлов IIS. Функциональность Shortscan предназначен для быстрого определения, какие файлы с короткими именами существуют на веб-сервере IIS. После обнаружения короткого имени файла инструмент попытается автоматически определить полное имя файл...

CVE-2023-39141-LFI-enumerator

CVE-2023-39141을 악용하여 원격 서버 파일 열거 POC 보기: https://gist.github.com/JafarAkhondali/528fe6c548b78f454911fb866b23f66e...

SharePointDumper

SharePointDumper SharePointDumper — это утилита для извлечения и аудита на базе PowerShell, которая перечисляет сайты SharePoint, доступные пользователю через Microsoft Graph, и загружает файлы через SharePoint. Она предназначена для тестирования SOC/DLP, фиолетовых команд и несложных оценок...

SSH-Private-Key-Looting-Wordlists

LFI для перемещения в боковом направлении? Получить доступ по SSH? root@kitploit: ?file=../../../../../../../../home/user/.ssh/idrsa ?file=../../../../../../../../home/user/.ssh/idrsa-cert SSH Private Key Looting Wordlists 🔒🗝️ Этот репозиторий содержит коллекцию словарей для помощи в поиске или...

cve-2020-3452

CVE-2020-3452-Exploit Только в образовательных целях! Простой эксплойт, использующий уязвимость CVE-2020-3452 для перечисления стандартных файлов, доступных в веб-директории устройств CISCO ASA/FTD. Использование: По умолчанию используется список файлов, составленный из примеров вывода...

CVE-2024-23897

CVE-2024-23897 Инструмент для сканирования перебора директорий или файлов с уязвимостью CVE-2024-23897 в Jenkins. Использование root@kitploit: python3 scraping.py -u http://server:8080 -l /path/to/wordlist -o output.txt...

CVE-2015-6668

CVE-2015-6668 - Job Manager IDOR CVE-2015-6668과 관련된 정보 공개 패턴을 재현하는 작은 Rust CLI 도구입니다. 이 도구는 주어진 연도, 월 및 일반적인 파일 확장자에 대해 일반적인 WordPress 업로드 경로를 열거하여 안전하지 않은 직접 객체 참조IDOR / 안전하지 않은 파일 노출을 나타낼 수 있는 공개적으로 접근 가능한 파일을 탐지합니다. 취약점 개요 CVE-2015-6668은 Job Manager//filename.ext. 공격 패턴: 일반적인 연도/월 폴더와 파일명 변형을...

CVE-2020-3452-Exploit

CVE-2020-3452-Exploit Простой эксплойт, использующий уязвимость CVE-2020-3452 для перечисления стандартных файлов, доступных в веб-каталоге устройств CISCO ASA/FTD. Использование: По умолчанию используется список файлов, составленный на основе примеров вывода из CVE-2018-0296 в Metasploit Framewo...

SnaffPoint

SnaffPoint 무엇인가요 SnaffPoint는 이 세상에 약간의 단맛이 필요한 포인트테스터pointester를 위한 도구입니다. 회사또는 고객의 SharePoint Online과 공유 OneDrive 파일에서 민감한 파일을 찾는 데 도움을 줍니다. 어떻게 동작하나요 실제로는 2개의 도구가 있습니다: GetBearerToken은 일반적인 GUI와 MFA 지원을 포함하여 SharePoint에서 인증을 수행합니다 SnaffPoint는 CLI 전용 도구로, 열거 작업을 수행하고 흥미로운 파일을 찾습니다 GetBearerToken...

PT-2026-86316

🚨 CVE-2025-15693 The JCH Optimize WordPress plugin before 5.0.1 does not properly restrict a directory path provided to one of its administrative image-browsing features to within the site, allowing high-privilege users, administrators on single-site and sub-site administrators on multisite, to...

CVE-2026-85671 QAnything 2.0.0 Unauthenticated Cross-User File Disclosure

QAnything 2.0.0 contains an authentication bypass vulnerability in the /api/localdocqa/getfilebase64 and /api/localdocqa/getdoc endpoints that allows unauthenticated attackers to access any uploaded file or document. Attackers can enumerate file identifiers through unauthenticated endpoints and...

CVE-2026-53801

rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that allows attackers to cause the sender to enumerate and transfer files outside the module root's intended subtree. Attackers who can create or manipulate symlinks in a path component of...

CVE-2026-53801 rsync < 3.5.0 Symlink Race Condition Directory Traversal

rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that allows attackers to cause the sender to enumerate and transfer files outside the module root's intended subtree. Attackers who can create or manipulate symlinks in a path component of...

CVE-2026-53801 rsync < 3.5.0 Symlink Race Condition Directory Traversal

rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that allows attackers to cause the sender to enumerate and transfer files outside the module root's intended subtree. Attackers who can create or manipulate symlinks in a path component of...

DEBIAN-CVE-2026-55555

Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Existence Oracle attack through the manipulation of the CSS @font-face directive. By providing malicious HTML that references local files via the file:// protocol repeatedly, an attacker can trigger PHP...

UBUNTU-CVE-2026-55555

Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior are vulnerable to a File Existence Oracle attack through the manipulation of the CSS @font-face directive. By providing malicious HTML that references local files via the file:// protocol repeatedly, an attacker can trigger PHP...

Malicious code in vtranalytic (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897fa80f1d8a55ff480d6c7e7a71200ac31530a9f5d928389545b597c7b45903 The package implements a full remote-administration toolkit controlled through a Telegram bot. It polls the Telegram Bot API at...

PT-2026-65520

Let's Chat 0.3.0 through 0.4.8 contains a broken access control vulnerability that allows authenticated attackers to download file attachments from private and password-protected rooms they are not a member of by exploiting missing room membership checks in the file retrieval route. Attackers can...

GHSA-7X2P-4JVH-6384 Dompdf: File existence oracle via font-face stylesheet declaration

Description Dompdf is vulnerable to a File Existence Oracle attack through the manipulation of the CSS @font-face directive. By providing malicious HTML that references local files via the file:// protocol repeatedly, an attacker can trigger PHP memory exhaustion. The critical point of this flaw ...

Dompdf: File existence oracle via font-face stylesheet declaration

Description Dompdf is vulnerable to a File Existence Oracle attack through the manipulation of the CSS @font-face directive. By providing malicious HTML that references local files via the file:// protocol repeatedly, an attacker can trigger PHP memory exhaustion. The critical point of this flaw ...