LHF

Codacy Badge 此工具仅在最新的Kali Linux发行版上测试过 LHF: Low Hanging Fruit - 一款渗透测试侦察工具 安装依赖： ./Install.sh 启动： ./LHF.py root@kitploit: + Checking permissions - Rockyou wordlist is missing trying to decompress... + Rockyou wordlist is decompressed! - Please enter the ip to scan example 192.168.0.1 or target.co...

vc5

VC5 本 README 正在更新以反映近期变更——部分信息可能与当前代码库不符。此迭代代码尚未达到实战就绪状态——生产环境中请使用 v0.2 版本。 一种基于 Linux XDP/eBPF 的、支持水平扩展的直连服务器返回（DSR）四层负载均衡器（L4LB）。 如果您认为这可能有帮助，或有任何疑问/建议，欢迎通过 [email protected] 与我联系，或在 GitHub 上提 Issue。 现已支持 IPv6 以及三层分发（即隧道模式） ！XVS 库已更新包含这些功能，同时不再需要从网络命名空间运行健康检查，大幅简化了代码。这将结束所有后端服务器必须与负载均衡器共享同...

Identificador-CVE-2018-11759

Otro idioma git - pt-BR Comprueba si tus instancias están expuestas al CVE 2018-11759 El archivo main es un script en bash para explotación. Las urls deben usar el protocolo y la dirección completa, ejemplo: https://test.site.com.br Para más urls en una consulta, se puede usar el here-document,...

CVE-2021-26855

CVE-2021-26855-PoC CVE-2021-26855 的 PoC 利用代码。 原始代码由 https://github.com/GreyOrder 开发。在添加了附加功能（如用户枚举等）后不久，原始仓库被删除。 如果您有最新版本，请提交拉取请求。 CVE-2021-26855 SSRF 简单利用的 Golang 练习 受影响版本： Exchange Server 2013 低于 CU23，Exchange Server 2016 低于 CU18，Exchange Server 2019 低于 CU7 使用条件： 此漏洞与之前的 Exchange...

domain-protect

domain-protect Domain Protect is now an OWASP project moved to: github.com/domain-protect/domain-protect...

Identificador-CVE-2018-11759

Other language git - pt-BR Check if your instances are expose the CVE 2018-11759 The archive main are a script in bash for exploiting. The urls shall use the protocol and complete addres, example: https://test.site.com.br For more urls in one consult, can be used the here-document, example:...

CVE-2021-26855-PoC

CVE-2021-26855-PoC Código de exploit PoC para CVE-2021-26855. El código original fue desarrollado por https://github.com/GreyOrder. CVE-2021-26855 ssrf uso simple de ejercicios golang Versión afectada root@kitploit: Exchange Server 2013 es menor que CU23 Exchange Server 2016 es menor que CU18...

lbmap

Scripts de prueba de concepto para fingerprinting HTTP avanzado, presentados en OWASP AppSecAsia 2012. Estos scripts deben considerarse PoC o calidad alfa. Se agradecen sugerencias, recomendaciones, firmas, parches y críticas a través de http://www.github.com/wireghoul/lbmap. Se incluyen las...

CVE-2019-20372

Poc for CVE 2019-20372 [email protected] 描述 在 1.17.7 之前的 NGINX 版本中，结合特定的 errorpage 配置，会导致 HTTP 请求走私漏洞。攻击者可以在 NGINX 前端存在负载均衡器的环境下，读取未授权的网页内容。 CVE-2019-20372 利用工具 这个 Python 脚本旨在对 Web 服务器执行一系列安全测试，以检测运行易受攻击版本 Nginx 1.14.2 的服务器中存在的 CVE-2019-20372 漏洞。此外，该脚本会验证 HTTP 头、允许的 HTTP 方法，并尝试进行漏洞利用。 功能 1. ...

CVE-2024-7591-PoC

CVE-2024-7591-PoC 这些 PoC Python 脚本用于测试 Kemp LoadMaster 是否存在远程代码执行漏洞。 此工具仅供测试用途。 这些脚本基于 Marius Walter 关于此漏洞细节的文章。您可以阅读他们的文章： https://insinuator.net/2024/11/vulnerability-disclosure-command-injection-in-kemp-loadmaster-load-balancer-cve-2024-7591/ 这是一个 python3 脚本，用于测试 LoadMaster 是否存在 CVE-2024-7591...

vc5 v0.3.4

VC5 This README is currently being updated to reflect recent changes - some information may not reflect the current codebase. This iteration of code is not yet battle ready - use a v0.2 release for production A horizontally scalable Direct Server Return DSR layer 4 load balancer L4LB for Linux...

Astra Linux – Vulnerability in Tomcat9

Occasional URL redirection to untrusted sites is a vulnerability in Apache Tomcat, caused by the LoadBalancerDrainingValve. This issue affects Apache Tomcat versions as follows: 11.0.0-M1 through 11.0.18, 10.1.0-M1 through 10.1.52, 9.0.0.M23 through 9.0.115, and 8.5.30 through 8.5.100. Other,...

RLSA-2026:55859 Important: haproxy security update

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fixes: haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions CVE-2026-55204 For more details about the security issues, including the impact, a CVSS score...

Important: haproxy security update

The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fixes: haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions CVE-2026-55204 For more details about the security issues, including the impact, a CVSS score...

GO-2024-3212 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller-fips, aws-load-balancer-controller...

GO-2026-4600 vulnerabilities

Vulnerabilities for packages: go, flux-source-watcher, grafana-rollout-operator, nova, flux-helm-controller, nova-fips, flux-source-controller, terragrunt, grafana-operator, cluster-autoscaler-fips, cert-manager-fips, grafana-operator-fips, victoriametrics, flux-operator-fips,...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, fuse-overlayfs-snapshotter, k3s, runc, wuzz, gitness, k8s-device-plugin...

GO-2024-3212 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: aws-load-balancer-controller, fuse-overlayfs-snapshotter, k3s, runc, wuzz, gitness, k8s-device-plugin...

CVE-2026-55401

CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. Attackers can send an unauthenticated packet to a Secure Access server with load balancing enabled, which results in the internal load balancer crashing. After a successful...