DomainFrontDiscover

DomainFrontDiscover 도메인 프론팅이 가능한 CloudFront 도메인을 찾기 위한 스크립트 및 결과 여기서 진행된 작업에 대한 설명은 https://www.peew.pw/blog/2018/2/22/how-i-identified-93k-domain-frontable-cloudfront-domains 에서 확인할 수 있습니다. ConfirmedFrontableDomains.txt CloudFront를 통한 도메인 프론팅에 사용 가능한 것으로 확인된 93,000개 이상의 도메인 목록 2018년 2월 22일 기준...

laravel-phpunit-rce-masscaner

laravel phpunit rce masscanner CVE-2017-9841 Laravel phpunit RCE CVE-2017-9841 를 위한 대량 스캐너 의존성 root@kitploit: python3 -m pip install -r requirements.txt or pipenv install -r requirements.txt 사용법 root@kitploit: usage: tool -h --file --range , --single SINGLE optional arguments: -h, --help show thi...

hostscan

hostscan 0.2 Hostscan は、特定のホスト範囲をスキャンできる PHP ツールです。主に情報収集と 弱いパスワードのテストを目的としています。ペンテストツールだと思います。よく行うテストを自動化するために作成しました。 PHP 製なので、クライアントサイドのソフトウェアと比較すると動作がかなり遅いです。 どのように動作するのか？ IP の範囲を指定する必要があります（例: 127.0.0.1 - 127.0.0.10）。プログラムは選択されたオプションに基づいて 各アドレスに対して個別に操作を実行し、その応答を出力します。...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

CVE-2023-4966

CVE-2023-4966 CitrixBleed IPアドレスの範囲でCitrixアプリケーションを悪用するプログラム Windows、macOS、Linux向けのコンパイル方法は以下の通りです root@kitploit: GOOS=windows GOARCH=amd64 go build -o citrix citrix.go GOOS=darwin GOARCH=amd64 go build -o citrix.exe citrix.go GOOS=linux GOARCH=amd64 go build -o citrix citrix.go 起動方法: プログラム名...

iptodomain

iptodomain 설명: 이 도구는 VirustotalAPI 키 사용에 보관된 기록 정보를 이용하여 IP 범위에서 도메인을 추출할 수 있게 해줍니다. 이 IP 주소 뒤에 어떤 도메인이 있는지 알고 싶을 때 유용합니다. 예를 들어, 버그 바운티 프로그램에서 첫 번째 단계 중 하나는 서브도메인을 추출하는 것인데, 이 도구가 그 작업을 도와줄 수 있습니다... 먼저 회사가 사용하는 IP 범위를 알아내야 합니다. 많은 경우 ASAutonomous System 번호를 아는 것이 좋은 시작점이며, 이를 통해 IP 범위를 찾을 수 있습니...

CVE-2017-5689

CVE-2017-5689 탐지 스크립트 사용법: CVE-2017-5689detector.py 예시: CVE-2017-5689detector.py 192.168.1.253-255 권고: https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075...

reachability

-- 시작 면책 조항 -- 본인 책임 하에 사용하십시오. – 발생할 수 있는 어떤 손해에 대해서도 본인은 책임지지 않습니다. – 네트워크 소유자의 명시적 허가 없이 이 도구를 실행하지 마십시오. 반복합니다, 실행하지 마십시오. 이것은 MASSCANhttps://github.com/robertdavidgraham/masscan을 감싼 Python 래퍼입니다. -- 면책 조항 종료 -- 이 스크립트는 Debian Linux 배포판을 사용 중이며 인터넷에 접속 가능하다고 가정합니다. 이 스크립트가 답하는 질문? 대상 범위에 접근...

cloud_ip_ranges

Cloud IP Ranges 描述 大多数云服务提供商都会发布其 IP 地址范围的最新列表。该工具通过获取并解析最新列表，判断某个 IP 是否属于某个提供商的地址范围。 支持： AWS 来源 Azure 来源 Google Cloud Platform 来源 Alibaba Cloud 目前不发布列表 Oracle Cloud Infrastructure 来源 IBM Cloud 目前不发布列表 DigitalOcean 来源 该工具的灵感来自 Bryce Kunz 所写的 Nimbusland。 用法 推荐的安装方式是使用 pipx： root@kitploit: $ pipx...

Mongodb-Redis-scan

Mongodb-Redis-scan mongodb-redis匿名スキャンスクリプト。mongodbとredisの匿名スキャンに対応しています mongodb-redis匿名スキャンスクリプト。mongodbとredisの匿名スキャンに対応しています。このスクリプトは以前のニーズに応じて作成したもので、現在は皆さんの学習と研究のために共有しています: 使い方： バッチスキャン：Mongodbscan.py -m 100 -u ip.txt url.txt IPレンジスキャン：Mongodbscan.py -m 100 -g 192.168.1.1-192.168.1.254 url.t...

iptodomain

iptodomain V2 Update V2: Python 2.7から3.8.10へ移行されました。現在、入力ファイルとCSV出力ファイルをサポートしています。 説明:...

Linux Distros Unpatched Vulnerability : CVE-2026-18664

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems,...

CVE-2026-18664

When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems, IPs that were meant to be allowed may be denied, and, IPs that were meant to be denied access could be allowed. An IPv4 address is compar...

DEBIAN-CVE-2026-18664

When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems, IPs that were meant to be allowed may be denied, and, IPs that were meant to be denied access could be allowed. An IPv4 address is compar...

CVE-2026-18664

When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems, IPs that were meant to be allowed may be denied, and, IPs that were meant to be denied access could be allowed. An IPv4 address is compar...

CVE-2026-18664

When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems, IPs that were meant to be allowed may be denied, and, IPs that were meant to be denied access could be allowed. An IPv4 address is compar...

UBUNTU-CVE-2026-18664

When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems, IPs that were meant to be allowed may be denied, and, IPs that were meant to be denied access could be allowed. An IPv4 address is compar...

CVE-2026-18664

When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems, IPs that were meant to be allowed may be denied, and, IPs that were meant to be denied access could be allowed. An IPv4 address is compar...

CVE-2026-18664

When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems, IPs that were meant to be allowed may be denied, and, IPs that were meant to be denied access could be allowed. An IPv4 address is compar...

NSD -- multiple vulnerabilities

NLnet Labs reports: CVE-2026-18664: IP range access control restrictions are bypassed for some unintended IP. Reported by Qifan Zhang from Palo Alto Networks, Claude and Ada Logics. CVE-2026-18916: Any remote client can denial TCP service by throttling the TCP receive window down to 1. Reported b...