CVE-2025-23167

CVE-2025-23167 – Exploit de contrabando de solicitudes HTTP en Node.js Exploit funcional para CVE-2025-23167, una vulnerabilidad de contrabando de solicitudes que afecta a las versiones de Node.js 20.x anteriores a v20.19.2. Este error permite una terminación incorrecta de cabeceras HTTP, lo que...

http-stalling-detector

HTTP Stalling Detector HTTP stalling DoS attacks take advantage of an inability for webservers to determine if a remote client is just connected over a slow link or if the remote client is deliberately sending data very slowly to avoid the webserver doing a timeout and shutting down the connectio...

EUVD-2026-91120

Langflow: Title Authenticated Remote Code Execution in validatecode via Malicious Decorators Description...

cve-2021-44228

CVE-2021-44228 https://nvd.nist.gov/vuln/detail/CVE-2021-44228 log4j.java - modification of this PoC https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce to run a bunch of payloads from JNDIExploit. jndi.pcap - a PCAP of each of these payloads being ran. snort.rules - Snort rules to...

POC-CVE-2021-41773

POC-CVE-2021-41773 On the 5th of October 2021, a CVE detailing a path traversal attack on Apache HTTP Server v2.4.49 was released. Assigned the number CVE-2021-41773, it was released with the following description: A flaw was found in a change made to path normalization in Apache HTTP Server...

patoolkit

.. image:: https://user-images.githubusercontent.com/743886/43845704-6dbd2558-9ae1-11e8-9f77-239210fe7b6a.png PA Toolkit Pentester Academy Wireshark Toolkit PA Toolkit is a collection of traffic analysis plugins to extend the functionality of Wireshark from a micro-analysis tool and protocol...

SharpWebServer

SharpWebServer Un servidor simple HTTP & WebDAV orientado a Red Team, escrito en C, con funcionalidad para capturar hashes Net-NTLM. Se utiliza para servir payloads en máquinas comprometidas con fines de movimiento lateral. Requiere .NET Framework 4.5 y las referencias System.Net y...

cowitness

CoWitness CoWitness is a tool designed to function as an HTTP, HTTPS, and DNS server. It allows you to serve web pages, log HTTP requests, and customize DNS responses. This README provides an overview of the features and instructions on how to compile and use the CoWitness tool. Features HTTP...

CVE-2026-77262

CVE-2026-77262 — Arbitrary File Read in mcp-atlassian via confluenceuploadattachment Severity : High CVSS 8.6 CWE : CWE-22 — Path Traversal Affected : sooperset/mcp-atlassian 0.22.0 Fixed in : 0.22.0 Advisory : GHSA-p6hp-93wp-fh6p NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-77262 Credit :...

EXPLOIT-CVE-2026-42559

CVE-2026-42559 — DNS rebinding in the rmcp Streamable HTTP server transport A self-contained Docker lab and Python proof of concept for CVE-2026-42559 GHSA-89vp-x53w-74fx / RUSTSEC-2026-0189. | ---|--- Affected| rmcp — the official Rust SDK for the Model Context Protocol — 1.4.0 Fixed in| 1.4.0...

zeek-netsupport-detector

NetSupport Background https://unit42.paloaltonetworks.com/cortex-xdr-detects-netsupport-manager-rat-campaign/ Testing PCAP: https://app.any.run/tasks/b5d9853f-0dca-45ef-9532-83feeedcbf42 Example: $ zeek -Cr b5d9853f-0dca-45ef-9532-83feeedcbf42.pcap $ cat notice.log separator \x09 setseparator ,...

burp-exporter

Extensión Exporter para Burp Suite Community y Pro Síguenos para conocer más consejos y otras extensiones Descripción Exporter es una extensión de Burp Suite para copiar una solicitud a un archivo o al portapapeles como funciones de múltiples lenguajes de programación. También añade una pestaña...

hfinger

Hfinger - fingerprinting de peticiones HTTP de malware Herramienta para fingerprinting de peticiones HTTP de malware. Basada en Tshark y escrita en Python3. ¡Prototipo funcional! :- Su objetivo principal es proporcionar representaciones únicas huellas digitales de las peticiones de malware, que...

CVE-2021-44228-log4jVulnScanner-metasploit

CVE-2021-44228-log4jVulnScanner-metasploit herramienta de detección y escaneo abierta para descubrir y realizar fuzzing de la vulnerabilidad Log4J RCE CVE-2021-44228 preparación POC git clone https://github.com/TaroballzChen/CVE-2021-44228-log4jVulnScanner-metasploit cd...

Forbidden-Buster

Forbidden Buster es una herramienta diseñada para automatizar varias técnicas con el fin de evadir códigos de respuesta HTTP 401 y 403 y obtener acceso a áreas no autorizadas del sistema. Este código está hecho solo para entusiastas y profesionales de la seguridad. Úsalo bajo tu propio riesgo...

domhttpx

domhttpx es un buscador de Google Dork con un conjunto de herramientas HTTP construido con Python, que puede facilitarle la búsqueda de muchas URL/IP a la vez con rapidez. Lista Instalación Uso Banderas Uso básico Una palabra clave Múltiples palabras clave Extraer título de página Extraer título ...

domhttpx

domhttpx is a google search engine dorker with HTTP toolkit built with python, can make it easier for you to find many URLs/IPs at once with fast time. List Install Usage Flags Basic Usage One Keyword Multiple Keyword Extract Title Page Extract Title Page from Real Path Extract Status Code Extrac...

h2csmuggler

h2cSmuggler Descripción h2cSmuggler introduce tráfico HTTP en configuraciones inseguras de proxypass de servidores periféricos estableciendo comunicaciones HTTP/2 en texto claro h2c con servidores back-end compatibles con h2c, lo que permite eludir reglas de proxy y controles de acceso. Consulte ...

CVE-2026-46453

camel-elasticsearch-rest-client Unprefixed-Header Injection Reproducer CVE-2026-46453 This project demonstrates a message-header injection / authorization bypass in Apache Camel's camel-elasticsearch-rest-client component, tracked as CVE-2026-46453. The component reads several Exchange headers to...

raider

Raider logo Quick links Website. OWASP page. Documentation. Installation. FAQ. Getting started. Architecture. Discussions. Issues. Twitter. Fediverse. What is Raider OWASP Raider was developed with the goal to improve web authentication testing. By now it has evolved and can be used for all kinds...