webanalyze

webanalyze Это порт Wappalyzer на Go. Инструмент создан для высокой производительности и позволяет проверять огромные списки хостов. !NOTE Поскольку Wappalyzer закрыл публичный доступ к своим определениям приложений, webanalyze в настоящее время загружает определения из enthec. Установка и...

sonar.js

sonar.js A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration, WebSocket host scanning, and external resource fingerprinting. How does it work? Upon loading the sonar.js payload in a modern web browser the following will happen: sonar....

log4j-cve-2021-44228

Log4j-CVE-2021-44228 탐지 스캐너 플레이북 Log4ShellCVE-2021-44228용 공식 Red Hat Log4j 탐지 스크립트를 사용하여 대상 Linux 호스트를 검증하는 Ansible 플레이북입니다. Red Hat 버전 1.3 탐지기 2022-01-10. 결과는 detectordir 아래의 txt 파일에 저장됩니다 기본값: /opt/cve-2021-44228/. Ansible Galaxy 역할 코드는 또한 Ansible Galaxy 역할 lucab85.ansiblerolelog4shell로...

mec

mec MassExploitConsole Предназначен для массового эксплуатирования Ознакомьтесь сwiki для начала работы Возможности Простой в использовании CLI интерфейс Выполнение адаптированных эксплойтов с конкурентностью на уровне процессов Встроенные эксплойты автоматические Скрывайте свой IP с помощью...

Logsensor

Logsensor Un outil de capteur puissant pour découvrir les panneaux de connexion et scanner les formulaires POST SQLi Fonctionnalités Scan des panneaux de connexion pour plusieurs hôtes Compatibilité proxy http, https Le scan des panneaux de connexion est effectué en multiprocessing ce qui rend le...

meg

meg meg est un outil pour récupérer beaucoup d'URLs tout en restant « sympa » avec les serveurs. Il peut être utilisé pour récupérer plusieurs chemins pour plusieurs hôtes ; en récupérant un chemin pour tous les hôtes avant de passer au chemin suivant et de répéter. Vous obtenez beaucoup de...

ScannerCVE-2021-3156

ScannerCVE-2021-3156 Script pour scanner une liste d'hôtes pour savoir s'ils sont vulnérables au CVE-2021-3156. Dans le cas où il n'est pas vulnérable, la sortie est la suivante : sudoedit: a terminal is required to read the password; either use the -S option to read from standard input or...

CVE-2022-24086-RCE

CVE-2022-24086-RCE Инструмент эксплуатации CVE-2022-24086, написанный на Python 3, совместимый со списками URL/IP. Данный загрузчик включает список из более чем 334 300 потенциально уязвимых хостов согласно shodan.io и личным сканированиям. Этот инструмент НЕ бесплатен для предотвращения...

laf

laf Python-скрипт, который ищет панели администратора/входа на заданном хосте или списке хостов. root@kitploit: usage: laf.py -h -d host -l hostfile|- -sys system -c cookie -u user -da -p pass -ic -k -v Find admin/login panel for a single host -d or a list of hosts -l. optional arguments: -h,...

cve-2024-41110-checker

CVE-2024-41110 Docker 보안 검사기 이 도구는 Docker 설치 환경에서 CVE-2024-41110과 관련된 취약점을 여러 호스트에서 점검하도록 설계되었습니다. 특히 취약한 Docker 버전과 보안 문제를 일으킬 수 있는 AuthZ 플러그인 사용 여부를 확인합니다. 기능 여러 호스트를 병렬로 검사하여 효율적인 스캔 취약한 Docker 버전 탐지 AuthZ 플러그인 사용 여부 식별 포괄적인 요약 보고서 생성 영향을 받는 호스트에 대한 해결 방안 제공 비밀번호 기반 및 키 기반 SSH 인증 모두 지원 요구 사항...

CVE-2023-25157

CVE-2023-25157 Ceci est un simple script Python pour trouver la dernière vulnérabilité d'injection SQL de GeoServer. Vous pouvez utiliser les scripts sur des hôtes pour vérifier le chemin infecté. Installation : 1. git clone https://github.com/0x2458bughunt/CVE-2023-25157/ 2. cd CVE-2023-25157 3...

EUVD-2026-75442

OpenPanel is an analytics platform. In all versions no patched release available at time of publication, the data importer fetches a caller-supplied URL with plain fetch instead of the project's existing SSRF guard apps/api/src/utils/safe-fetch.ts. In packages/importer/src/providers/umami.ts,...

CVE-2026-88892 OpenPanel SSRF via Unguarded Importer File URL Fetch

OpenPanel is an analytics platform. In all versions no patched release available at time of publication, the data importer fetches a caller-supplied URL with plain fetch instead of the project's existing SSRF guard apps/api/src/utils/safe-fetch.ts. In packages/importer/src/providers/umami.ts,...

CVE-2026-88892

OpenPanel , an analytics platform, has a server-side request forgery (SSRF) vulnerability in its data importer. The parseRemoteFile function in packages/importer/src/providers/umami.ts calls plain fetch() on a caller-supplied fileUrl validated only by z.string().url(), bypassing the project's exi...

PT-2026-89403

OpenPanel is an analytics platform. In all versions no patched release available at time of publication, the data importer fetches a caller-supplied URL with plain fetch instead of the project's existing SSRF guard apps/api/src/utils/safe-fetch.ts. In packages/importer/src/providers/umami.ts,...

CVE-2026-76361

Splunk SOAR versions below 8.6.0 are affected by an SSRF vulnerability in the /rest/support/connectivity/.../check_connectivity REST API endpoint, which fails to validate destination hosts before initiating outbound connections, allowing an Administrator-role user to probe internal network reacha...

PT-2026-78788

Name of the Vulnerable Software and Affected Versions Splunk SOAR versions prior to 8.6.0 Description A user with the Administrator role can perform Server-Side Request Forgery SSRF—a technique where an attacker forces a server to make requests to an unintended location—via the...

ember

🔥 Ember AI systems burn brightly but hide their secrets. Em...

EUVD-2006-5803

Malware in sbrugna...

CVE-2023-23943

Nextcloud mail is an email app for the nextcloud home server platform. In affected versions the SMTP, IMAP and Sieve host fields allowed to scan for internal services and servers reachable from within the local network of the Nextcloud Server. It is recommended that the Nextcloud Maill app is...