Lucene search
+L

99 matches found

EUVD
EUVD
added 2026/09/16 1:30 a.m.4 views

EUVD-2026-80073

A vulnerability has been found in a2ui-project a2ui up to 0.10.7. Affected by this vulnerability is the function httpx.get of the file agentsdks/python/a2uiagent/src/a2ui/extensions/fileresolve/fileresolver.py of the component FileResolver. The manipulation leads to server-side request forgery. I...

7.5CVSS5.2AI score
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/15 7:27 p.m.60 views

uro

uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 2:21 p.m.119 views

lazyrecon

root@kitploit: | | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and...

5.6AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/15 12:03 p.m.9 views

undetected-httpx

undetected-httpx undetected-httpx は、httpx にインスパイアされた多目的HTTPプロービングツールキットです。実際のブラウザシグネチャを模倣することで、最新のアンチボットインフラを回避するために特別に設計されています。 従来のHTTPクライアントは容易にフィンガープリントされ、WAFによってブロックされます。このツールはブラウザグレードのTLS とHTTPフィンガープリンティング (JA3/H2)を活用し、正当なユーザーとして振る舞うことで、偵察を影で行えるようにします。 📦 インストール root@kitploit: pip install...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 10:16 a.m.11 views

EagleEye

EagleEye: 随着 Project Discovery 在 HTTPX 中添加了 -ss 选项,现在可以使用 gf xss 和 qsreplace 配合 XSS payload(例如 alerthacked)来创建可能易受攻击的 URL 列表。然后 HTTPX 会访问所有 URL 并截取屏幕截图,这些截图存储在 output/screenshot/indexscreenshot.txt 中。 要从截图中过滤出真正存在漏洞的 URL,可以使用 ee.sh 脚本。只需运行 ./ee.sh -f "path/to/indexscreenshot.txt" -k...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 10:01 a.m.5 views

httpx-action

httpx Action facilita la orquestación de httpx con GitHub Action. Ejemplo de uso GitHub Action ejecutando httpx en una lista de hosts root@kitploit: - name: 💥 httpx - HTTP Web Server probing uses: projectdiscovery/httpx-action@main with: list: hosts.txt Ejemplo de flujo de trabajo :...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/15 9:39 a.m.6 views

httpx

• • • • •...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/15 4:50 a.m.6 views

CVE-2020-13942

CVE-2020-13942 在使用脚本之前,对目标运行 httpx 或 httprob。 用法 ./CVE-2020-13942.sh target.txt 致谢 该脚本源自 Rohit Gautam 的仓库...

9.8CVSS8.3AI score0.68398EPSS
SaveExploits9References1
Kitploit
Kitploit
added 2026/09/15 2:40 a.m.8 views

CVE-2020-13942

CVE-2020-13942 スクリプトを使用する前に、ターゲットに対してhttpxまたはhttprobを実行してください。 使い方 ./CVE-2020-13942.sh target.txt クレジット このスクリプトはRohit Gautamのリポジトリから作成されました。...

9.8CVSS8.2AI score0.68398EPSS
SaveExploits9References1
Kitploit
Kitploit
added 2026/09/13 5:17 p.m.5 views

Oneliner-Bugbounty

Oneliner-Bugbounty 用于漏洞赏金的单行脚本合集 工具列表 Subfinder Naabu httpx Nuclei Waybackurls DNSProbe gf sqlmap qsreplace hakrawler Puredns GauPlus uro 自动扫描器 root@kitploit: subfinder -d site.com -all | naabu | httpx | nuclei -t nuclei-templates 查找文件(例如 .json 文件)...

6AI score
SaveExploits0References13
Kitploit
Kitploit
added 2026/09/13 12:20 p.m.135 views

unfurl

unfurl Pull out bits of URLs provided on stdin Install If you have Go installed and configured: root@kitploit: ▶ go install github.com/tomnomnom/unfurl@latest Otherwise download the latest binary for your platform, extract it and move it to somewhere in your $PATH e.g. /usr/bin/: root@kitploit: ▶...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 5:56 p.m.8 views

CVE-2019-9053

CVE-2019-9053 元の投稿はこちら Python 3.11でテスト済み このスクリプトの誤用や不正使用については一切責任を負いません。 このスクリプトの詳細についてはブログ記事をご覧ください。 必要条件 pip3 install httpx...

8.1CVSS7.7AI score0.68581EPSS
SaveExploits38
Kitploit
Kitploit
added 2026/09/11 10:02 p.m.9 views

recon-ninja

recon-ninja 该工具是一个 GitHub 仓库,提供一款侦察(recon)工具,让你可以通过上传选项上传你的域名发现结果。该工具使用 HTTPX——一款用于扫描存活域名的工具。它还集成了 MongoDB Atlas 数据库,这是一个基于云的数据库,可让该工具存储侦察数据。 用户可以通过用户界面(UI)与该工具交互,该界面提供已上传子域名的可搜索视图。UI 也会区分 title、cname,并提供搜索选项,方便浏览已上传的子域名数据。 此外,该工具还支持通过 UI 在后端运行 Nuclei。Nuclei 是一款用于漏洞扫描的工具,通常与其他侦察工具配合使用。Nuclei...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/09 2:21 p.m.5 views

CVE-2025-24893_Shell

2025-24893Shell requirements: httpx use: python exploit.py victim.com...

9.8CVSS8AI score0.99864EPSS
SaveExploits52
Kitploit
Kitploit
added 2026/09/09 3:18 a.m.9 views

CVE-2023-21887

CVE-2023-21887 漏洞利用工具 该脚本扫描URL列表以检测CVE-2023-46805漏洞并对其进行利用 使用方法 1. 安装所需依赖: root@kitploit: pip install httpx...

4.9CVSS6.8AI score0.43403EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 12:08 a.m.9 views

CVE-2023-23752

CVE-2023-23752 用于 CVE-2023-23752 Joomla CMS 的简单 bash 脚本 你可以使用 -u 选项指定单个 URL,或使用 -l 选项提供一个包含要测试脆弱端点的 URL 列表的文件。 此脚本保存所有 HTTP 响应数据并显示敏感信息。 依赖:httpx 使用此脚本前请安装 httpx 工具 示例: root@kitploit: ./cve-2023-23752-PoC.sh -u https://vuln-site-example.com ./cve-2023-23752-PoC.sh -l list.txt CVE...

5.3CVSS7.1AI score0.99827EPSS
SaveExploits43References1
Kitploit
Kitploit
added 2026/08/31 9:02 a.m.8 views

httpx v1.11.0

Features • Installation • Usage • Documentation • Notes • Join Discord httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library. It is designed to maintain result reliability with an increased number of threads. Features Simple and modular...

5.9AI score
SaveExploits0References7
NVD
NVD
added 2026/08/25 2:16 p.m.20 views

CVE-2026-55525

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the webcrawl function validates only the initial URL before crawlwithhttpx uses httpx.Clientfollowredirects=True. Redirect targets are not revalidated, so an attacker who influences a crawl target can redirect a public URL ...

7.5CVSS0.00291EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/08/25 2:05 p.m.12 views

praisonaiagents web_crawl vulnerable to SSRF via redirect-following

Summary webcrawl an exported, model-callable tool validates only the INITIAL URL's resolved IP against a private/loopback blocklist, then fetches with httpx.Clientfollowredirects=True and never re-validates redirect targets. An attacker who controls the agent's crawl target a malicious task, or...

7.5CVSS5.6AI score0.00291EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/08/25 2:05 p.m.5 views

GHSA-5R34-2G38-6569 praisonaiagents web_crawl vulnerable to SSRF via redirect-following

Summary webcrawl an exported, model-callable tool validates only the INITIAL URL's resolved IP against a private/loopback blocklist, then fetches with httpx.Clientfollowredirects=True and never re-validates redirect targets. An attacker who controls the agent's crawl target a malicious task, or...

7.5CVSS5.5AI score0.00291EPSS
SaveExploits0References4
Rows per page
Query Builder