Vulnerability-Assessment-and-OSINT-CVE-2012-1823

Valutazione delle vulnerabilità e OSINT: CVE-2012-1823 Il mio repository documenta il processo di identificazione, analisi e raccolta di Open Source Intelligence OSINT su una specifica vulnerabilità di sicurezza rilevata durante una scansione della rete target. Panoramica del processo Il flusso d...

nse-log4shell

nse-log4shell Script NSE di Nmap per verificare le vulnerabilità log4shell o LogJam CVE-2021-44228. Gli script NSE controllano i servizi esposti più popolari su Internet. È uno script di base dove puoi personalizzare il payload. Esempi Nota che gli script NSE invieranno solo le richieste ai...

ssl-heartbleed.nse

ssl-heartbleed.nse Script NSE di Nmap che scopre/sfrutta Heartbleed/CVE-2014-0160. Questo script è ora sostanzialmente quello scritto da Patrik Karlsson con alcune modifiche minori portate dal mio script personale. Caratteristiche Include supporto per FTP, SMTP, XMPP...

nse-exchange

nse-exchange Nmap NSE-Skripte zur Überprüfung auf Exchange-Schwachstelle CVE-2022-41082. NSE-Skripte überprüfen die gängigsten exponierten Dienste im Internet. Es ist ein einfaches Skript, das prüft, ob virtuelles Patchen funktioniert. Beispiele Da es derzeit keinen Patch gibt – es werden nur...

fat-finger

Fat-Finger Estende lo script finger.nse originale e tenta di enumerare gli utenti attualmente connessi tramite una corrispondenza esatta del nome utente e una corrispondenza parziale del campo GECOS in /etc/passwd Esempio di output: root@kitploit: @output PORT STATE SERVICE 79/tcp open finger |...

ip-https-tools

ip-https-tools Una raccolta di strumenti per il protocollo di tunneling IP su HTTPS IP-HTTPS utilizzato da Microsoft DirectAccess per inviare pacchetti IPv6 relativi a Teredo su una sessione HTTPS basata su IPv4. MS-IPHTTPS specifica del protocollo Panoramica tecnica di DirectAccess Requisiti di...

EUVD-2018-1865

Malware in sbrugna...

Exploit for Improper Input Validation in Atlassian Confluence_Data_Center

CVE-2023-22515-NSE This repository provides a tool to check f...

Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 shipped with IBM WebSphere Remote Server

Summary IBM Db2 is shipped with IBM WebSphere Remote Server. Information about security vulnerabilities affecting IBM Db2 have been published in a security bulletin CVE-2023-45853, CVE-2023-29267, CVE-2024-25710, CVE-2024-26308, CVE-2023-45178, CVE-2024-28762, CVE-2024-28757, CVE-2024-29025,...

Security Bulletin: IBM® Db2® NSE (Net Search Extender) is affected by a vulnerability in the open source Expat library. (CVE-2024-28757)

Summary IBM® Db2® NSE Net Search Extender is affected by a vulnerability in the open source Expat library. Vulnerability Details CVEID:CVE-2024-28757 DESCRIPTION: libexpat could allow a remote attacker to obtain sensitive information, caused by improper handling of XML external entity XXE...

Exploit for Command Injection in Contec Solarview_Compact_Firmware

nmap-CVE-2023-23333-exploit Nmap NSE script to dump /etc/passw...

SUSE CVE-2017-18594

nselibssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated by a leading \n character to ssh-brute.nse or ssh-auth-methods.nse...

EyesOfNetwork Improper Privilege Management Vulnerability

EyesOfNetwork contains an improper privilege management vulnerability that may allow a user to run commands as root via a crafted Nmap Scripting Engine NSE script to nmap7...

port-states NSE Script

Prints a list of ports found in each state. Nmap ordinarily summarizes "uninteresting" ports as "Not shown: 94 closed ports, 4 filtered ports" but users may want to know which ports were filtered vs which were closed. This script will expand these summaries into a list of ports and port ranges th...

openflow-info NSE Script

Queries OpenFlow controllers for information. Newer versions of the OpenFlow protocol 1.3 and greater will return a list of all protocol versions supported by the controller. Versions prior to 1.3 only return their own version number. For additional information: Example Usage nmap -p 6633,6653...

Exploit for Deserialization of Untrusted Data in Telerik Ui_For_Asp.Net_Ajax

TelerikUI Python Scanner telerikrcescan.py Examples A...

Exploit for Improper Input Validation in Cisco Adaptive_Security_Appliance_Software

CVE-2020-3452 !PoChttps://i.ibb.co/9sds0py/Po...

Exploit for Deserialization of Untrusted Data in Telerik Ui_For_Asp.Net_Ajax

TelerikUI Python Scanner telerikrcescan.py Examples A...

Updated nmap packages fix security vulnerability

Updated nmap packages fix security vulnerability: nselibssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as demonstrated by a leading \n character to ssh-brute.nse or ssh-auth-methods.nse CVE-2017-18594. Also, when a server forced...

CVE-2020-8655

An issue was discovered in EyesOfNetwork 5.3. The sudoers configuration is prone to a privilege escalation vulnerability, allowing the apache user to run arbitrary commands as root via a crafted NSE script for nmap 7...