CrushFTP-CVE-2024-4040-illdeed

CVE-2024-4040 — CrushFTP Authentication Bypass Exploit This repository contains a stealthy Python proof-of-concept PoC exploit for CVE-2024-4040 , a critical vulnerability in CrushFTP v10 and below that allows an attacker to bypass authentication using a forged CrushAuth cookie and AWS-style...

SysWhispers3

SysWhispers3 SysWhispers ayuda con la evasión generando archivos de cabecera/ASM que los implantes pueden usar para realizar llamadas directas al sistema. Canal oficial de Discord ¡Ven a pasar el rato en Discord! ¿Por qué demonios no creé un PR para SysWhispers2? Las razones para que SysWhispers3...

headerpwn

headerpwn Un fuzzer para analizar cómo responden los servidores a diferentes cabeceras HTTP. 🏗️ Instalación ⛏️ Uso 📡 Proxy de solicitudes HTTP Instalación Para instalar headerpwn, ejecuta el siguiente comando: go install github.com/devanshbatham/[email protected] Uso headerpwn te permite...

d_link_880_bug

Vulnerabilities in D-Link routers CVE-2017-14948 In this little write-up we will see some bugs I found on D-Link products. D-Link offers a wide range of products, including many different router models, mounting different firmware versions. In this document I will address the following firmware...

CVE-2022-30333-PoC

CVE-2022-30333-POC Sample file to test CVE-2022-30333 Sample.rar : if you want to test on Linux. When you extract, it create trav in ../../tmp/traversed. Please be sure that directory ../../tmp/traversed exists before extracting Sample.rar exp.rar : if you want to test on Zimbra Mail server. When...

CVE-2024-24919-Bulk-Scanner

CVE-2024-24919 Bulk Scanner CVE-2024-24919 Check Point Security Gateway Information Disclosure Script based on and the credit goes to: https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/ This Python script scans lisy of URLs for CVE-2024-24919 vulnerability by sending specifi...

CVE-2020-35391

CVE-2020-35391 Tenda f3 Malformed HTTP Request Header Processing Vulnerability. Run python3 CVE-2020-35391.py --help python3 CVE-2020-35391.py python3 CVE-2020-35391.py -i http://127.0.0.1:8080 python3 CVE-2020-35391.py -l ip.txt Tenda F3 Shodan Dork Exploitation...

vulnerable-nextjs-14-CVE-2025-29927

CVE-2025-29927 Authorization Bypass reproduction This repository is a reproduction of the CVE-2025-29927 vulnerability in the next package How to reproduce 1. Follow the steps below to clone, and run the Next.js application 2. Test authorization denies access to the /api/hello endpoint $ curl...

ghost-route

👻 Ghost Route Un script de Python para comprobar sitios Next.js en busca de la vulnerabilidad de middleware corrupto CVE-2025-29927. La vulnerabilidad de middleware corrupto permite a un atacante eludir la autenticación y acceder a rutas protegidas enviando una cabecera personalizada...

static_asm

staticasm Una biblioteca de C++20 header-only para la codificación de instrucciones x86/x86-64 en tiempo de compilación. Este proyecto tiene doble licencia bajo la Boost Software License 1.0 y la MIT License. Puedes elegir cualquiera de las dos licencias. Propósito Aprender la codificación de...

CVE-2025-31161

CrushFTP CVE-2025-31161 Exploit Tool 🔓 Advanced detection and exploitation tool for CVE-2025-31161 vulnerability in vulnerable CrushFTP versions. CVE-2025-31161 is a critical authentication bypass vulnerability in the CrushFTP Web Interface. By manipulating the HTTP Authorization header, an...

crlf-powered-desync-scanner

CRLF-Powered Desync Scanner This is the Burp Extension we used to detect all cases from our research CRLF-Powered Desync Attacks: Beheading HTTP Streams. It's a research-first scanner built using BulkScan similar to HTTP Request Smuggler and others. Implementation Request Header Injection probe...

http2smugl

http2smugl Esta herramienta ayuda a detectar y explotar el contrabando de solicitudes HTTP en aquellos casos en que se puede lograr mediante la conversión HTTP/2 - HTTP/1.1 por parte del servidor frontend. El esquema es el siguiente: 1. Un atacante envía una solicitud HTTP/2 manipulada al servido...

CVE-2026-105782

A flaw was found in Scrapy. A remote attacker controlling a malicious website can cause a Denial of Service DoS by providing a specially crafted Referrer-Policy HTTP response header. When processing the response, the RefererMiddleware treats the header value as a Python import path and executes t...

file-unpumper

file-unpumper file-unpumper es una potente utilidad de línea de comandos diseñada para limpiar y analizar archivos ejecutables portátiles PE. Proporciona una variedad de funciones para ayudar a desarrolladores y profesionales de seguridad a trabajar con archivos PE de manera más efectiva...

cisco-ios-xe-implant-detection

Cisco IOS XE implant scanning & network detection Network detection of CVE-2023-20198 exploitation and fingerprinting of post-exploitation of Cisco IOS XE devices. CVE-2023-20198 Suricata network detection The suricata/ folder contains Suricata detection rules for exploitation of CVE-2023-20198...

FinalRecon

Twitter - Telegram - thewhiteh4t's Blog FinalRecon is an all in one automatic web reconnaissance tool written in python. Goal of FinalRecon is to provide an overview of the target in a short amount of time while maintaining the accuracy of results. Instead of executing several tools one after...

nginx-CVE-2017-7529

Nginx out-of-bounds read cache vulnerability CVE-2017-7529 Vulnerability Principle References: https://cert.360.cn/detailnews.html?id=b879782fbad4a7f773b6c18490d67ac7 http://galaxylab.org/cve-2017-7529-nginx%E6%95%B4%E6%95%B0%E6%BA%A2%E5%87%BA%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/ When Nginx acts ...

email-header-analyzer

Analizador de Cabeceras de Correo Electrónico MHA ¿Qué es el Analizador de Cabeceras de Correo Electrónico MHA? El Analizador de Cabeceras de Correo Electrónico es una herramienta escrita en flask para analizar cabeceras de correo electrónico y convertirlas a un formato legible por humanos, y...

CVE-2025-54309

CVE-2025-54309 CrushFTP Authentication Bypass Overview CVE-2025-54309 is an authentication bypass vulnerability in CrushFTP that allows unauthorized administrative user creation through AS2 header manipulation. Technical Details Vulnerability Location File : crushftp/server/ServerSessionHTTP.java...