reachability

-- INÍCIO DO AVISO -- USE POR SUA CONTA E RISCO -- DE FORMA ALGUMA SOU RESPONSÁVEL POR QUAISQUER DANOS INCORRIDOS -- SE VOCÊ NÃO TIVER PERMISSÃO EXPLÍCITA DO PROPRIETÁRIO DA REDE, NÃO E EU REPITO NÃO EXECUTE ISSO ISTO É PYTHON ENVOLVENDO MASSCAN https://github.com/robertdavidgraham/masscan -- FIM...

CVE-2017-5689

Script de Detecção para CVE-2017-5689 Uso: CVE-2017-5689detector.py Exemplo: CVE-2017-5689detector.py 192.168.1.253-255 Aviso: https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075...

hostscan

hostscan 0.2 Hostscan é uma ferramenta PHP que permite escanear um intervalo específico de hosts, principalmente para coleta de informações e teste de senhas fracas. Acho que é uma ferramenta de pentest, criei para automatizar alguns testes que faço com frequência. Por ser PHP, funciona bastante...

Mongodb-Redis-scan

Mongodb-Redis-scan mongodb-redis अनाम स्कैनिंग स्क्रिप्ट, mongodb और redis की अनाम स्कैनिंग का समर्थन करती है mongodb-redis अनाम स्कैनिंग स्क्रिप्ट, mongodb और redis की अनाम स्कैनिंग का समर्थन करती है, यह स्क्रिप्ट पहले एक आवश्यकता के कारण लिखी गई थी, अब इसे सीखने और शोध के लिए सभी के साथ साझा कि...

iptodomain

iptodomain विवरण: यह टूल आपको IP रेंज से डोमेन निकालने की अनुमति देता है, Virustotal API कुंजी का उपयोग करके में संग्रहीत ऐतिहासिक जानकारी का उपयोग करके। यह तब उपयोगी होता है जब आप जानना चाहते हैं कि इस IP पते के पीछे कौन से डोमेन हैं, उदाहरण के लिए बग बाउंटी प्रोग्राम में पहला कदम सबडोमेन निकालन...

laravel-phpunit-rce-masscaner

laravel phpunit rce masscanner CVE-2017-9841 Masscanner para Laravel phpunit RCE CVE-2017-9841 deps root@kitploit: python3 -m pip install -r requirements.txt or pipenv install -r requirements.txt Usage root@kitploit: usage: tool -h --file --range , --single SINGLE argumentos opcionais: -h, --help...

iptodomain

iptodomain V2 अद्यतन V2: इसे python 2.7 से 3.8.10 में स्थानांतरित किया गया। अब यह एक इनपुट फ़ाइल और csv आउटपुट फ़ाइल का समर्थन करता है। विवरण: यह उपकरण आपको IP रेंज से डोमेन निकालने की अनुमति देता है, जिसमें Virustotal में संग्रहीत ऐतिहासिक जानकारी का उपयोग किया जाता है API कुंजी का उपयोग करके। य...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

CVE-2023-4966

CVE-2023-4966 CitrixBleed Programme pour exploiter les applications Citrix avec une plage d'adresses IP. Voici comment le compiler pour Windows, macOS ou Linux root@kitploit: GOOS=windows GOARCH=amd64 go build -o citrix citrix.go GOOS=darwin GOARCH=amd64 go build -o citrix.exe citrix.go GOOS=linu...

DomainFrontDiscover

DomainFrontDiscover Scripts e resultados para encontrar domínios CloudFront que permitem domain fronting Um passo a passo do que aconteceu pode ser encontrado em https://www.peew.pw/blog/2018/2/22/how-i-identified-93k-domain-frontable-cloudfront-domains ConfirmedFrontableDomains.txt Uma lista de...

cloud_ip_ranges

क्लाउड आईपी रेंजेस विवरण अधिकांश क्लाउड प्रदाता अपनी आईपी एड्रेस रेंज की अद्यतन सूचियाँ प्रकाशित करते हैं। यह टूल नवीनतम सूचियों को प्राप्त करके और पार्स करके यह पहचानता है कि कोई आईपी किसी प्रदाता की रेंज से संबंधित है या नहीं। समर्थन करता है: AWS स्रोत Azure स्रोत Google Cloud Platform स्रोत...

CVE-2026-71246

Pixelfed's SearchController behind the auth middleware accepts a URL via its remote-search parameters and fetches it server-side through ActivityPubFetchService, whose validateUrl only blocks the literal hosts 127.0.0.1, localhost, and ::1 and requires https, without checking the resolved IP...

EUVD-2026-50229

The Apache Traffic Server headerrewrite plugin can crash or corrupt memory during cookie operations and CIDR condition matching. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version...

SUSE CVE-2026-52921

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: stop hash: range iteration at end The following hash set variants: hash:ip,mark hash:ip,port hash:ip,port,ip hash:ip,port,net iterate IPv4 ranges with a 32-bit iterator. The iterator must stop once the last...

CVE-2026-46348

CVE-2026-46348 affects Mastodon servers prior to 4.5.10, 4.4.17, and 4.3.23. The issue stems from the disallowed IP range list lacking an IPv6 unspecified address (::), allowing an attacker to induce HTTP requests to loopback interfaces and potentially access private resources and services. Impac...

CVE-2026-52921

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: stop hash: range iteration at end The following hash set variants: hash:ip,mark hash:ip,port hash:ip,port,ip hash:ip,port,net iterate IPv4 ranges with a 32-bit iterator. The iterator must stop once the last...

CVE-2026-40564

Files or Directories Accessible to External Parties, Server-Side Request Forgery SSRF vulnerability in Apache Flink Kubernetes Operator. The FlinkSessionJob jarURI is currently not validated so that it points to user-owned files or addresses. This lets a user with CR create permissions read files...

CVE-2026-24231

NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl SSRF protection component, where an attacker could cause a server-side request forgery by supplying a crafted endpoint URL referencing the 0.0.0.0/8 address range through a blueprint configuration file or CLI flag. A successful...

FreeScout 1.8.206 Network Reachability and HTTP Security Audit Scanner

The provided PHP script is a network reconnaissance and auditing tool designed to scan a local IP range and identify reachable hosts potentially running web services such as FreeScout...

CVE-2026-33025

AVideo is a video-sharing Platform. Versions prior to 8.0 contain a SQL Injection vulnerability in the getSqlFromPost method of Object.php. The $POST'sort' array keys are used directly as SQL column identifiers inside an ORDER BY clause. Although realescapestring was applied, it only escapes...