Logsensor

Logsensor Ein leistungsstarkes Sensor-Tool zum Erkennen von Login-Panels und POST-Formular-SQLi-Scanning Funktionen Scanning von Login-Panels für mehrere Hosts Proxy-Kompatibilität http, https Das Scannen von Login-Panels erfolgt in Multiprozessierung daher ist das Skript beim Scannen vieler URLs...

mec

mec MassExploitConsole Progettato per lo sfruttamento di massa Segui lawiki per iniziare Caratteristiche Interfaccia CLI facile da usare Esegui exploit adattati con concorrenza a livello di processo Exploit integrati automatici Nascondi il tuo IP usando proxychains4 e proxypool Scansione host...

sonar.js

sonar.js A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration, WebSocket host scanning, and external resource fingerprinting. How does it work? Upon loading the sonar.js payload in a modern web browser the following will happen: sonar....

meg

meg meg ist ein Werkzeug zum Abrufen vieler URLs, das dabei aber 'nett' zu Servern bleibt. Es kann verwendet werden, um viele Pfade für viele Hosts abzurufen; dabei wird ein Pfad für alle Hosts abgerufen, bevor zum nächsten Pfad übergegangen wird, und wiederholt. Sie erhalten viele Ergebnisse...

ScannerCVE-2021-3156

ScannerCVE-2021-3156 Script per scansionare una lista di host dove è possibile sapere se si è vulnerabili al CVE 2021-3156. Nel caso non si sia vulnerabili, l'output è il seguente: sudoedit: a terminal is required to read the password; either use the -S option to read from standard input or...

CVE-2022-24086-RCE

CVE-2022-24086-RCE Strumento di sfruttamento CVE-2022-24086 scritto in Python 3 compatibile con elenchi di URL/IP. Questo download include un elenco di oltre 334.300 host potenzialmente vulnerabili secondo shodan.io e scansioni personali. Questo strumento NON è gratuito per prevenire abusi. Al...

cve-2024-41110-checker

CVE-2024-41110 Docker Security Checker Questo strumento è progettato per verificare la presenza di vulnerabilità relative a CVE-2024-41110 nelle installazioni Docker su più host. Controlla specificamente le versioni vulnerabili di Docker e l'uso di plugin AuthZ, che possono potenzialmente portare...

laf

laf Uno script Python che cerca pannelli di amministrazione/login su un determinato host o elenco di host. root@kitploit: usage: laf.py -h -d host -l hostfile|- -sys system -c cookie -u user -da -p pass -ic -k -v Find admin/login panel for a single host -d or a list of hosts -l. optional argument...

CVE-2023-25157

CVE-2023-25157 这是一个简单的Python脚本，用于查找最新的GeoServer SQL注入漏洞。您可以在主机上使用脚本检查受感染的路径。 安装： 1. git clone https://github.com/0x2458bughunt/CVE-2023-25157/ 2. cd CVE-2023-25157 3. chmod +x geoserver.sh 注意：您应该将所有文件放在同一目录下，如果您想从系统的任何位置使用这些文件，请按照以下步骤操作： 1...

log4j-cve-2021-44228

Playbook dello scanner detector Log4j-CVE-2021-44228 Playbook Ansible per verificare gli host Linux di destinazione utilizzando lo script detector ufficiale Red Hat Log4j per Log4Shell CVE-2021-44228. Detector Red Hat versione 1.3 del 2022-01-10. Il risultato viene salvato in un file txt in...

webanalyze

webanalyze これはGoで書かれたWappalyzerの移植版です。このツールは高性能になるように設計されており、大量のホストリストをテストすることができます。 Wappalyzerがアプリ定義への公開アクセスを削除したため、webanalyzeは現在enthecから定義を読み込んでいます。 インストールと使用方法 プリコンパイル済みリリース プリコンパイル済みのリリースはこちらから直接ダウンロードできます。 ビルド 自分でビルドする場合： root@kitploit: $ go install -v...

CVE-2026-76361

Splunk SOAR versions below 8.6.0 are affected by an SSRF vulnerability in the /rest/support/connectivity/.../check_connectivity REST API endpoint, which fails to validate destination hosts before initiating outbound connections, allowing an Administrator-role user to probe internal network reacha...

PT-2026-78788

Name of the Vulnerable Software and Affected Versions Splunk SOAR versions prior to 8.6.0 Description A user with the Administrator role can perform Server-Side Request Forgery SSRF—a technique where an attacker forces a server to make requests to an unintended location—via the...

ember

🔥 Ember AI systems burn brightly but hide their secrets. Em...

EUVD-2006-5803

Malware in sbrugna...

CVE-2023-23943

Nextcloud mail is an email app for the nextcloud home server platform. In affected versions the SMTP, IMAP and Sieve host fields allowed to scan for internal services and servers reachable from within the local network of the Nextcloud Server. It is recommended that the Nextcloud Maill app is...

Oracle Linux 7 / 8 / 9 : linux-firmware (ELSA-2024-12797)

The remote Oracle Linux 7 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12797 advisory. 20241003-999.35.git95bfe086.el8 - Rebase to latest upstream Orabug: 37132142 - Fix build error in ol7 due to linking in copy-firmware.sh Orabu...

Amazon Linux 2 : aws-cfn-bootstrap (ALAS-2024-2654)

The version of aws-cfn-bootstrap installed on the remote host is prior to 2.0-31. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2654 advisory. Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made...

Partnering for Security: Qualys Solutions for Microsoft Azure Linux in AKS

As customers transition from traditional workloads to containerized environments, they face significant challenges. Containers introduce a level of complexity that traditional security measures often fail to address, primarily due to their ephemeral nature and the shared responsibility model...

Elevating Security: Qualys Unveils First Solution for Scanning AWS Bottlerocket in Amazon EKS and Amazon ECS

With this new offering, Qualys establishes itself as the first and only vendor solution with the unique ability to scan AWS Bottlerocket instances directly using the Qualys Cloud Agent and TotalCloud Agent-less Snapshot-Based Scan. This innovative capability empowers organizations to...