x8-Burp

此应用不再受支持 该工具帮助发现隐藏参数，这些参数可能存在漏洞或能揭示其他扫描者遗漏的有趣功能。通过逐行比较页面、比较响应码和反射，实现了更高的准确性。 功能 从代理或重放器选项卡中选择多个请求。 每个选定的请求在单独的线程中执行。 发现隐藏参数时自动创建问题。 支持 HTTP/2。 检测到参数的请求在代理选项卡中可见。 检测到 WAF 时，以“信息”严重级别添加问题。 自动检测注入点。如果存在请求体，则忽略 URL 查询中的参数。 可以使用 %s 或 &%s 定义自定义注入点。 使用说明 提供四种搜索选择： 小字典（推荐，25000 个单词，5 个线程） 大字典（63000 个单词，1...

x8

x8 Suite de descubrimiento de parámetros ocultos escrita en Rust. La herramienta ayuda a identificar parámetros ocultos que podrían ser vulnerables o revelar funcionalidades interesantes que otros evaluadores podrían pasar por alto. Su alta precisión se logra mediante la comparación línea por lín...

param-miner

param-miner Esta extensión identifica parámetros ocultos y no vinculados. Es particularmente útil para encontrar vulnerabilidades de envenenamiento de caché web. Combina la lógica avanzada de diferenciación de Backslash Powered Scanner con una técnica de búsqueda binaria para adivinar hasta 65,00...

parameth

parameth 该工具可用于暴力发现GET和POST参数 通常，当你在目录中爆破常见文件时，可能会识别出一些看起来需要传入未知参数的脚本（例如test.php）。该工具有望帮助你找到这些参数。 示例扫描 -off 标志允许你指定一个偏移量（有助于处理动态页面），例如，如果你得到交替的响应大小4444和4448，将偏移量设为5，工具将仅显示超出正常范围的内容。 安装 root@kitploit: virtualenv venv . ./venv/bin/activate pip install -u -r requirements.txt 用法 root@kitploit: usage:...

OpenStack Heat information leak vulnerability

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

CVE-2026-39825

A flaw was found in the net/http/httputil package, specifically within the ReverseProxy component. This vulnerability allows the ReverseProxy to forward query parameters that are not visible to Rewrite functions. This occurs because the ReverseProxy does not correctly consider the url.ParseQuery...

CVE-2026-40569

FreeScout is a free self-hosted help desk and shared mailbox. Versions prior to 1.8.213 have a mass assignment vulnerability in the mailbox connection settings endpoints of FreeScout connectionIncomingSave at app/Http/Controllers/MailboxesController.php:468 and connectionOutgoingSave at line 398...

BIT-GOLANG-2026-39825 ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

SUSE CVE-2026-39825

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

CVE-2026-39825

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

CVE-2026-39825

ReverseProxy can forward queries containing parameters not visible to Rewrite functions. When used with a Rewrite function, or a Director function which parses query parameters, ReverseProxy sanitizes the forwarded request to remove query parameters which are not parsed by url.ParseQuery...

PT-2026-38566

Name of the Vulnerable Software and Affected Versions ReverseProxy affected versions not specified Description ReverseProxy can forward queries containing parameters that are not visible to Rewrite functions. When utilizing a Rewrite function or a Director function that parses query parameters,...

EUVD-2023-2428

Malicious code in bioql PyPI...

Invariant-Based Cryptography

We propose a new symmetric cryptographic scheme based on functional invariants defined over discrete oscillatory functions with hidden parameters. The scheme encodes a secret integer through a four-point algebraic identity preserved under controlled parameterization. Security arises not from...

DEBIAN-CVE-2023-1625

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

CVE-2023-1625

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

CVE-2023-1625

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

CVE-2023-1625 Information leak in api

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...

USN-6293-1 heat vulnerability

It was discovered that OpenStack Heat incorrectly handled certain hidden parameter values. A remote authenticated user could possibly use this issue to obtain sensitive data...

SUSE CVE-2023-1625

An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, and availability of the system...