lockphish

Lockphish v2.0 Lockphish it's the first tool 07/04/2020 for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone Passcode using a https link. LockPhish Tutorial: https://www.kalilinux.in/2020/05/lockphish.html Author: The Linux Choice Who deleted his...

ioccheck

ioccheck A tool for simplifying the process of researching file hashes, IP addresses, and other indicators of compromise IOCs. Features Look up hashes across multiple threat intelligence services, from a single command or a few lines of Python. Currenty supports the following services: VirusTotal...

jfscan

!CAUTION ⚠️ Project Deprecated This project has been rewritten in Go for better performance and features. Please use the new version here: nullt3r/massmap Description Killing features Unleash the power of Nmap with Masscan for large-scale scans Scan targets using domain names and other formats...

reverseip_py

reverseippy Domain parser for IPAddress.com Reverse IP Lookup. Writen in Python 3. What is Reverse IP? Reverse IP refers to the process of looking up all the domain names that are hosted on a particular IP address. This can be useful for a variety of reasons, such as identifying all the websites...

reverseip_py

reverseippy 用于IPAddress.com反向IP查询的域名解析器。使用Python 3编写。 什么是反向IP？ 反向IP是指查找特定IP地址上托管的所有域名的过程。这对于多种场景很有用，例如识别共享托管服务器上托管的所有网站，或找出与某个特定网站共享同一IP地址的网站。 依赖项 beautifulsoup4 requests urllib3 已在 Debian 系统上使用 Python 3.10.8 测试通过。 安装依赖项 pip3 install -r requirements.txt 使用方法 帮助菜单 python3 reverseip.py -h usage:...

cve-2019-2725

python3运行 1.检测目标放在ip.txt文件下，格式:192.168.1.18:7001 2.直接运行脚本，存在漏洞的结果保存在ok.txt文件中...

Western Digital MyCloud NAS - Authentication Bypass

It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. An unauthenticated attacker can exploit this vulnerability to authenticate as an admin user without needing to provide a password, thereby gaining full control of the...

F5 iControl REST - Remote Command Execution

F5 iControl REST interface is susceptible to remote command execution. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. This affects BIG-IP 16.0.x before 16.0.1.1, 15.1.x before...

watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127

watchTowr-vs-f5-bigip-PreAuth-RCE Generador de artefactos de detección para F5 BIG-IP Consulta nuestra publicación en el blog para obtener detalles técnicos. Detección en acción ./watchTowr-vs-f5-bigip-PreAuth-RCE-CVE-2026-94127.py --host 192.168.5.36 --port 80 --command 'touch /tmp/hello' todos...

cve-2024-38063-detection-mitigation-system

CVE 漏洞检测与缓解系统 作者： Rohit Malik | 领域： 网络安全 | 类型： 小组学术项目 | 用途： 作品集与教育 概述 本项目是一个基于小组的网络安全实现，专注于在受控虚拟环境中检测并缓解一个真实的关键漏洞——CVE-2024-38063。 该工作展示了安全工程师如何分析漏洞、设计检测机制，并在无法立即修补或不便于部署补丁时采用分层缓解策略。 项目类型 小组项目——3名成员 Rohit Kumar Malik Izaan Shumaiz Mohamed Sinan 项目目标 本项目的目标是： 深入分析一个真实的关键 CVE 漏洞 设计实用的检测与缓解策略...

F5 Networks BIG-IP : BIG-IP APM vulnerability (K000162605)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.5.0.41.14 / 17.5.1.9.0.160.12 / 21.1.0.2.0.30.22. It is, therefore, affected by a vulnerability as referenced in the K000162605 advisory. When a BIG-IP APM access policy and an OAuth profile are configured on a...

Linux Distros Unpatched Vulnerability : CVE-2026-98123

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration sctpverifyasconf walks ASCONF-ACK parameters with sctpwalkparams, which advances by...

hikvision_CVE-2017-7921_auth_bypass_config_decryptor

hikvisionCVE-2017-7921authbypassconfigdecryptor 该 Python 文件用于解密受 CVE-2017-7921 影响的 hikvision 摄像头所使用的配置文件。 https://www.checkpoint.com/defense/advisories/public/2017/cpai-2017-0876.html/ 描述 Hikvision IP 摄像头认证绕过（CVE-2017-7921） 简而言之，受上述 CVE 影响的 hikvision 摄像头，通过在 URL 中提供一个简单的 base64 字符串作为参数，可以暴露多个路由。...

ThreatLens

Investigate IPs, domains, hashes, and CVEs across 6 free threat intel APIs — without switching between browser tabs. Quick Start · Usage · Architecture · API Keys · Screenshots · Contributing 🚀 Proudly featured in the official Awesome OSINT repository. 📖 Overview ThreatLens is a single command-li...

externalip-webhook

externalip-webhook creado para abordar CVE-2020-8554 Nota: Este chart está obsoleto para la versión 1.21 de Kubernetes y no es compatible a partir de 1.22. Para mitigar CVE-2020-8554, habilita el controlador de admisión DenyServiceExternalIPs en el clúster. externalip-webhook es un webhook de...

CVE-2021-37740

CVE-2021-37740 的漏洞验证程序 目录 简介 漏洞 执行 PoC 修复 协调漏洞披露 许可证 变更日志 简介 CVE-2021-37740 是一个影响 MDT 公司固件 v3.0.3 的 KNXnet/IP Secure 路由器 SCN-IP100.03 和接口 SCN-IP000.03 的拒绝服务（DoS）漏洞。一个特制的 KNXnet/IP Secure 帧会导致设备无法响应后续请求，需要重启才能恢复正常运行。本仓库包含一个漏洞验证程序，用于演示如何触发该漏洞，最初是为协调漏洞披露而开发的。 漏洞 攻击者可以通过与目标设备建立 TCP 连接，然后发送一个总长度字段被修改为...

CVE-2025-61304

CVE-2025-61304 "Vulnerabilidad de inyección de comandos del sistema operativo en la extensión de ping de Dynatrace ActiveGate hasta la versión 1.016 mediante una dirección IP manipulada" En segundo plano, la extensión de ping utiliza el símbolo del sistema de Windows para realizar el ping. El cam...

reachability

-- 免责声明开始 -- 使用后果自负——我对任何造成的损害概不负责——如果你没有得到网络所有者的明确许可，不要，我再说一遍，不要启动此工具 这是基于 MASSCAN https://github.com/robertdavidgraham/masscan 的 Python 封装 -- 免责声明结束 -- 这些脚本假设你使用的是 Debian Linux 发行版并且可以联网。 脚本能回答什么问题？ 目标网段是否可达？如果可达，每个网段中有多少主机？如果还不够，哪些 IP 地址在哪些端口上有响应？ 场景 1...

autopwn

autopwn Especifica objetivos y ejecuta conjuntos de herramientas contra ellos. autopwn está diseñado para hacer la vida del pentester más fácil y consistente, permitiéndole especificar las herramientas que desea ejecutar contra los objetivos, sin tener que escribirlas en una shell o escribir un...

cloud_ip_ranges

Rangos de IP de la nube Descripción La mayoría de los proveedores de nube publican listas actualizadas de sus rangos de direcciones IP. Esta herramienta identifica si una IP pertenece a los rangos de un proveedor mediante la obtención y el análisis de las listas más recientes. Soporta: AWS fuente...