20958 matches found
CVE-2020-10199
CVE-2020-10199 Previously, during a penetration test, I encountered a target environment that had Nexus Repository Manager deployed. After stepping on some pitfalls, I finally managed to get a shell. I'll make a brief record here so it's easier to review later if needed. Target version: Sonatype...
go-zeek-broker-ws
Zeek Broker websocket interface library for Golang This library implements the Zeek Broker websocket interface. Helper functions are provided with reasonable mappings between Zeek and Go types. Usage The library contains two packages: encoding encoding models the recursive JSON-based data structu...
CVE-2026-42533-nginx
CVE-2026-42533 nginx This repository contains a Go-based scanner for identifying nginx configuration patterns associated with the complexvalue two-pass capture-clobbering issue described in CVE-2026-42533. Overview The tool analyzes nginx configuration files and directories to detect risky...
go-mal-pkgs
go-mal-pkgs A security tool to detect malicious Go packages by verifying checksums in go.sum against the original source code, bypassing the Go Module Proxy cache. Overview This tool helps protect against supply chain attacks that exploit the Go Module Proxy cache, as recently demonstrated by the...
go-cpe
go-cpe A Go library for CPEA Common Platform Enumeration 2.3 go-cpe is a implementation of the CPE Naming and Matching algorithms, as described in NIST IRs 7695 and 7696. For the reference Java implementation, see: https://cpe.mitre.org/specification/CPEReferenceImplementationSep2011.zipx...
crtsh
crtsh API client for crt.sh crtsh allows to get the information about a HTTPS website. e.g. Search subdoimains. This tool uses Certificate Transparency logs. For more information, check https://crt.sh/ Example Subdomains Search subdomains of example.com Organization In --query, % can be used as...
Routeglass
Routeglass - High speed Router & Network Appliance Fingerprinting Tool Routeglass is a fast, multi-threaded router fingerprinting tool written in Go. The goal of the project is simple: identify web-exposed routers, firewalls, gateways, and embedded network devices by fingerprinting HTTP responses...
chart-down
chart-down Download and scan Helm charts for secrets using TruffleHog. Given a Helm repository URL, chart-down fetches the repo index, downloads every chart archive, extracts it, and runs TruffleHog against the contents. Requirements Go 1.19+ TruffleHog on PATH brew install trufflehog Install go...
FUCKER
FUCKER Windows-native penetration testing framework written in Go. Modular architecture with AI-driven decision engine OpenAI-compatible API. Build go build -ldflags="-X main.version=$git describe --tags" -o FUCKER.exe ./cmd/fucker/ Cross-compile: GOOS=linux GOARCH=amd64 go build -o...
Fragnesia-go
fragnesia-go One SA. One byte at a time. No race. Go port of fragnesia CVE-2026-46300. Member of the Dirty Frag vulnerability class - separate bug, same surface, own patch. How it works tl;dr The bug is in the Linux XFRM ESP-in-TCP subsystem. When TCPULP espintcp is installed on a socket after da...
cdncheck
cdncheck Features • Installation • Usage • Join Discord cdncheck is a tool for identifying the technology associated with dns / ip network addresses. Features CDN , CLOUD and WAF Detection Easy to use as library Easily extendable providers IP, DNS input support Text, JSONL output Filters on outpu...
hikvision_brute
hikvisionbrute Brute Hikvision CAMS with CVE-2021-36260 Exploit run go run src/main.go -help to get help with running args run example go run src/main.go -infile ../CVE-NEW/hikvisionlist.txt.bak -threads 300 -maxtries 3 -timeout 10 -delay 2000 -good goodout.txt -bad badout.txt -err errout.txt...
CVE-2017-1000117
CVE-2017-1000117 - PoCs git clone --recurse-submodules "https://github.com/Manouchehri/CVE-2017-1000117.git" cat /tmp/pwned.txt Go go get "github.com/Manouchehri/CVE-2017-1000117" cat /tmp/pwned.txt...
html/template: golang: Go html/template: Cross-Site Scripting via pathological input
A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...
encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal
A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...
EP3_Redes
EP3Redes Implementations of HTML servers in GO for analysis of vulnerability CVE-2023-29406...
CVE-2025-66478-github-patcher
Next.js CVE Auto-Patcher Automation tool written in Go to scan GitHub repositories, detect vulnerable Next.js versions CVE-2025-66478, and automatically create Pull Requests with the specific security patch. 📋 Prerequisites Make sure you have the following installed and configured in your...
CVE-2023-23752
CVE-2023-23752 Introduction Open source, Go-based multi-concurrent batch POC detection, high accuracy. Testing 1k entries takes about 40 seconds, with over 90% accuracy. Usage Generate Linux executable set CGOENABLED=0 set GOOS=linux go build cve-2023-23752-PoC.go Generate Windows executable set...
Heartbleed
Heartbleed A checker site and tool for CVE-2014-0160. Public site at https://filippo.io/Heartbleed/ Tool usage: Heartbleed -service="servicename" example.com:443 Heartbleed servicename://example.com:443 Exit codes: 0 - SAFE; 1 - VULNERABLE; 2 - ERROR. recently changed See the online FAQ for an...