CVE-2020-13942

CVE-2020-13942 Esegui httpx o httprob sui target prima di usare lo script. UTILIZZO ./CVE-2020-13942.sh target.txt Crediti Questo script è stato creato dal repository di Rohit Gautam...

Oneliner-Bugbounty

Oneliner-Bugbounty Eine Sammlung von Einzeiler-Skripten für Bug Bounty Liste der Tools Subfinder Naabu httpx Nuclei Waybackurls DNSProbe gf sqlmap qsreplace hakrawler Puredns GauPlus uro Auto-Scanner root@kitploit: subfinder -d site.com -all | naabu | httpx | nuclei -t nuclei-templates Dateien...

CVE-2023-23752

CVE-2023-23752 Einfaches Bash-Skript für CVE-2023-23752 Joomla CMS Sie können die Option -u verwenden, um eine einzelne URL anzugeben, oder die Option -l, um eine Datei mit einer Liste von URLs bereitzustellen, um den anfälligen Endpunkt zu testen. Dieses Skript speichert alle HTTP-Antwortdaten u...

EagleEye

EagleEye: Con l'aggiunta dell'opzione -ss in HTTPX di Project Discovery, è ora possibile creare un elenco di URL potenzialmente vulnerabili con gf xss e qsreplace con il payload XSS, come ad esempio alerthacked. HTTPX visiterà quindi tutti gli URL e ne catturerà degli screenshot, che vengono...

httpx-action

httpx Action facilita a orquestração do httpx com GitHub Action. Exemplo de Uso GitHub Action executando httpx em uma lista de hosts root@kitploit: - name: 💥 httpx - HTTP Web Server probing uses: projectdiscovery/httpx-action@main with: list: hosts.txt Exemplo de fluxo de trabalho :...

recon-ninja

recon-ninja यह टूल एक GitHub रिपॉजिटरी है जो एक recon टूल प्रदान करता है जिससे आप अपनी डोमेन डिस्कवरी को अपलोड विकल्प के माध्यम से अपलोड कर सकते हैं। यह टूल HTTPX का उपयोग करता है, जो जीवित alive डोमेन स्कैन करने के लिए एक टूल है। इस टूल में एक एकीकृत MongoDB Atlas डेटाबेस भी है, जो एक...

httpx

...

uro

uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...

CVE-2026-55525

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the webcrawl function validates only the initial URL before crawlwithhttpx uses httpx.Clientfollowredirects=True. Redirect targets are not revalidated, so an attacker who influences a crawl target can redirect a public URL ...

praisonaiagents web_crawl vulnerable to SSRF via redirect-following

Summary webcrawl an exported, model-callable tool validates only the INITIAL URL's resolved IP against a private/loopback blocklist, then fetches with httpx.Clientfollowredirects=True and never re-validates redirect targets. An attacker who controls the agent's crawl target a malicious task, or...

CVE-2020-13942

CVE-2020-13942 स्क्रिप्ट का उपयोग करने से पहले लक्ष्यों पर httpx या httprob चलाएँ। उपयोग ./CVE-2020-13942.sh target.txt श्रेय यह स्क्रिप्ट रोहित गौतम के रेपो से बनाई गई है।...

CVE-2025-24893_Shell

2025-24893Shell requisiti: httpx uso: python exploit.py victim.com...

CVE-2019-9053

CVE-2019-9053 मूल पोस्ट यहाँ पाई जा सकती है Python 3.11 पर परीक्षण किया गया मैं इस स्क्रिप्ट के दुरुपयोग या अनधिकृत उपयोग के लिए कोई जिम्मेदारी नहीं लेता। इस स्क्रिप्ट के बारे में अधिक जानकारी के लिए ब्लॉग पोस्ट देखें आवश्यकताएँ pip3 install httpx...

undetected-httpx

undetected-httpx undetected-httpx ist ein multifunktionales HTTP-Probier-Toolkit, inspiriert von httpx. Es wurde speziell entwickelt, um moderne Anti-Bot-Infrastrukturen zu umgehen, indem es reale Browser-Signaturen nachahmt. Traditionelle HTTP-Clients sind leicht zu identifizieren und werden von...

lazyrecon

root@kitploit: | | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and...

unfurl

unfurl Pull out bits of URLs provided on stdin Install If you have Go installed and configured: root@kitploit: ▶ go install github.com/tomnomnom/unfurl@latest Otherwise download the latest binary for your platform, extract it and move it to somewhere in your $PATH e.g. /usr/bin/: root@kitploit: ▶...

GHSA-9HGC-G3W5-67CM ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (`/admin/gateways/test`)

Summary The /admin/gateways/test endpoint validates submitted URLs by resolving the hostname at validation time and blocking private address ranges. The HTTP client independently re-resolves DNS at connection time with no IP binding between the two operations, creating a TOCTOU window exploitable...

CVE-2026-55523

PraisonAI is a multi-agent teams system. In versions 1.5.128 through 1.6.57, the praisonaiagents.tools.webcrawltools.webcrawl function is vulnerable to server-side request forgery. While it validates the initially supplied URL and blocks direct loopback and private destinations, its default httpx...

PYSEC-2026-2951 PraisonAIAgents: SSRF via unvalidated URL in `web_crawl` httpx fallback

| Field | Value | |---|---| | Severity | High | | Type | SSRF -- unvalidated URL in webcrawl httpx fallback allows internal network access | | Affected | src/praisonai-agents/praisonaiagents/tools/webcrawltools.py:133-180 | Summary webcrawl's httpx fallback path passes user-supplied URLs directly...

PYSEC-2026-2940 PraisonAI Has SSRF in FileTools.download_file() via Unvalidated URL

Summary FileTools.downloadfile in praisonaiagents validates the destination path but performs no validation on the url parameter, passing it directly to httpx.stream with followredirects=True. An attacker who controls the URL can reach any host accessible from the server including cloud metadata...