CVE-2021-21349

CVE-2021-21349 XStream SSRF XStream 公式発表 CVE-2021-21349 脆弱性 CVE-2021-21349: XStream でのアンマーシャリング時にサーバーサイドフォージェリリクエストが有効化され、イントラネットまたはローカルホスト上のリソースを参照する任意の URL からデータストリームにアクセスできる可能性があります。 影響を受けるバージョン バージョン 1.4.15 までを含むすべてのバージョンが、標準設定で使用されている場合に影響を受けます。最小限の型のみに制限したホワイトリストで XStream...

Venom

Venom - A Multi-hop Proxy for Penetration Testers 简体中文 ｜ English Venom is a multi-hop proxy tool developed for penetration testers using Go. You can use venom to easily proxy network traffic to a multi-layer intranet, and easily manage intranet nodes. This tool is limited to security research and...

CVE-2021-3019

Lanproxy Directory Traversal Vulnerability CVE-2021-3019 Vulnerability Description Lanproxy is an intranet penetration tool that proxies local area network PCs and servers to the public network. It supports TCP traffic forwarding and can support any TCP upper-layer protocol accessing intranet...

Ladon

Ladon Large-scale Intranet Penetration Scanner Cobalt Strike Plugin Memory Loading Program Introduction Ladon is a large-scale intranet penetration scanner, domain penetration, and lateral movement tool, featuring PowerShell modules, Cobalt Strike plugins, memory loading, and fileless scanning. I...

Yasso

Yasso Powerful intranet penetration auxiliary toolset - let Yasso be like the wind. Supports brute-forcing of RDP, SSH, Redis, PostgreSQL, MongoDB, MSSQL, MySQL, WinRM and other services, fast port scanning, powerful web fingerprint recognition, one-click exploitation of various built-in services...

Log4jShell-Scan

概要 log4j2 RCE脆弱性（CVE-2021-44228）の内部ネットワークスキャナーです。インターネットに接続しない環境でも脆弱性スキャンが可能で、企業内部でLog4jShell脆弱性を迅速に発見するのに役立ちます。 改変元: https://github.com/fullhunt/log4j-scan JNDIMonitorは以下から: r00tSe7en/JNDIMonitor: LDAPリクエストリスナー、dnslogプラットフォームから脱却 github.com...

iox

iox English | 中文 Tool for port forward & intranet proxy, just like lcx/ew, but better Why write? lcx and ew are awesome, but can be improved. When I first used them, I can't remember these complicated parameters for a long time, such as tran, slave, rcsocks, sssocks.... The work mode is clear, wh...

SecurityManageFramwork

SecurityManageFramwork-SeMF README English | 中文 はじめに SEMF は、企業のイントラネット向けセキュリティ管理プラットフォームであり、資産管理、脆弱性管理、アカウント管理、知識ベース管理、およびセキュリティスキャンの自動化機能を備えています。内部セキュリティ管理に使用できます。...

CVE-2021-3019

CVE-2021-3019 Recorrido de Directorios en LanProxy Lanproxy es una herramienta de penetración de intranet que hace de proxy de los ordenadores personales y servidores de la LAN hacia la red pública. Soporta el reenvío de tráfico tcp y cualquier protocolo de capa superior de tcp acceso a sitios we...

LSTAR

LSTAR - Aggressor A plugin from initial access to domain takeover, enabling intranet traversal With the goal of simplifying CS right-click operations and facilitating integration, referencing a large number of post-exploitation plugins Restructured and enriched host credential acquisition,...

zscan

Zscan a scan blasting tool set 📄English document 更新内容はログを参照log 結果出力形式 -出力された結果のスクリーンショット一部。2段階に分かれており、第1段階はスキャン中の出力（ホスト生存検出終了から）、第2段階はすべてのスキャン結果を整理した出力（port result listの出力開始から） 概要🎉...

LSTAR-EN

LSTAR - Traduit en anglais ! Par Google Traduction et Deepl Dans le but de simplifier le clic droit de CS et de faciliter l'auto-intégration, se référer à un grand nombre de plugins de post-infiltration Remanié et enrichi l'acquisition de credentials liés à l'hôte, la pénétration de réseaux...

fscan v2.2.1

Fscan 中文 Comprehensive intranet scanning tool for automated vulnerability assessment. Version : 2.2.0 Features Scanning Host Discovery - ICMP/Ping alive detection, B/C segment statistics for large networks Port Scanning - TCP connect scan, 133 built-in ports, port groups web/db/service/all...

CVE-2026-54837

Unauthenticated Broken Access Control in Intranet & Private Site All-In-One Intranet = 1.8.1 versions...

CVE-2026-54837

The WordPress plugin All-In-One Intranet (Intranet & Private Site) <= 1.8.1 exposes unauthenticated Broken Access Control. Affected software is the All-In-One Intranet WordPress plugin (version

CVE-2026-54837 WordPress Intranet & Private Site – All-In-One Intranet plugin <= 1.8.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Intranet & Private Site All-In-One Intranet = 1.8.1 versions...

EUVD-2026-39680

Unauthenticated Broken Access Control in Intranet & Private Site All-In-One Intranet = 1.8.1 versions...

CVE-2026-56275

Flowise before 3.1.0 contains a server-side request forgery vulnerability in the Execute Flow node that allows attackers to bypass security validation by providing intranet addresses through the base URL field. Attackers can initiate HTTP requests to internal network addresses, access cloud...

CVE-2026-56275 Flowise - Server-Side Request Forgery via Execute Flow Base URL

Flowise before 3.1.0 contains a server-side request forgery vulnerability in the Execute Flow node that allows attackers to bypass security validation by providing intranet addresses through the base URL field. Attackers can initiate HTTP requests to internal network addresses, access cloud...

CVE-2026-56275 Flowise - Server-Side Request Forgery via Execute Flow Base URL

Flowise before 3.1.0 contains a server-side request forgery vulnerability in the Execute Flow node that allows attackers to bypass security validation by providing intranet addresses through the base URL field. Attackers can initiate HTTP requests to internal network addresses, access cloud...