getaltname

GSAN - Get Subject Alternative Names GSAN is a tool that can extract Subject Alternative Names SAN found in SSL Certificates directly from https servers which can provide you with DNS names subdomains or virtual servers. It doesn't rely on Certificate Transparency logs, it connects directly to th...

domainhunter

Domain Hunter Authors Joe Vest @joevest & Andrew Chiles @andrewchiles Domain name selection is an important aspect of preparation for penetration tests and especially Red Team engagements. Commonly, domains that were used previously for benign purposes and were properly categorized can be purchas...

pipe_finder

Pipe Finder 1.0 Automated script to search in SMB protocol for availables pipe names Screenshots Requirements metasploit-framework wget locate pipeauditv2.rb module https://github.com/peterpt/pipeauditorfb - It will be installed on first run Install Requirements apt-get install metasploit-framewo...

dnspooq

dnspooq DNSpooq PoC - envenenamiento de caché de dnsmasq CVE-2020-25686, CVE-2020-25684, CVE-2020-25685 Solo con fines educativos Requisitos Docker compose Docker Exploit Iniciar contenedores $ docker-compose up -d Ejecutar exploit.py $ docker-compose exec attacker bash bash-5.0 python exploit.py...

spyse.py

spyse.py Python API wrapper and command-line client for the tools hosted on spyse.com. "Spyse is a developer of complete DAAS Data-As-A-Service solutions for Internet security professionals, corporate and remote system administrators, SSL / TLS encryption certificate providers, data centers and...

cloud

Cloud Monitoring the Cloud Landscape Our mission with this project is to provide an always up-to-date and freely accessible map of the cloud landscape for every major cloud service provider. We've decided to kick things off with collecting SSL certificate data of AWS EC2 and GCP machines,...

CVE-2024-36401

CVE-2024-36401 Vulnerabilidad de Ejecución Remota de Código RCE en la evaluación de expresiones de nombres de propiedades GeoServer es un servidor de código abierto que permite a los usuarios compartir y editar datos geoespaciales. Antes de las versiones 2.23.6, 2.24.4 y 2.25.2, múltiples...

udpx

Fast and lightweight, UDPX is a single-packet UDP scanner written in Go that supports the discovery of over 45 services with the ability to add custom ones. It is easy to use and portable, and can be run on Linux, Mac OS, and Windows. Unlike internet-wide scanners like zgrab2 and zmap, UDPX is...

CVE-2026-76060_ZoneMinder_CommandInjection-PoC

just wait and see Prueba de concepto de una vulnerabilidad de inyección de comandos del sistema operativo en la funcionalidad de exportación de eventos de ZoneMinder web/includes/downloadfunctions.php. Los nombres de los monitores se interpolan directamente en los comandos de shell utilizando un...

http-vuln-cve2019-14322.nse

http-vuln-cve2019-14322.nse Script NSE de Nmap para detectar CVE-2019-14322 de Pallets Werkzeug, que es un path traversal a través de SharedDataMiddleware que maneja incorrectamente nombres de unidades como C: en rutas de Windows. Descripción CVE-2019-14322 - Se encontró una vulnerabilidad en...

pe-sieve

Intro PE-sieve is a tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory patches...

CVE-2020-14179

CVE-2020-14179 Exposición de datos sensibles a través del endpoint /secure/QueryComponent!Default.jspa Prioridad: Alta Versiones afectadas: 8.6.0 | 8.8.0 | 8.5.5 | 8.9.0 | 8.10.0 | 8.11.0 Las versiones afectadas de Atlassian Jira Server y Data Center permiten a atacantes remotos no autenticados v...

rustbuster

rustbuster Un completo fuzzer web y herramienta de descubrimiento de contenido Introducción Lee el artículo del blog: Presentando Rustbuster — Un completo fuzzer web y herramienta de descubrimiento de contenido Descarga Puedes descargar binarios precompilados desde aquí. Instalación...

gitcolombo

Gitcolombo OSINT tool that extracts identities — names, emails, and links between seemingly unrelated accounts — from git repositories and GitHub. Python CLI gitcolombo.py — clones repos, walks git log, and can call the GitHub API for richer signals. Web version gitcolombo.html — a single static...

whatportis

whatportis .. image:: https://github.com/opencve/opencve/workflows/Tests/badge.svg :target: https://github.com/ncrocfer/whatportis/actions/workflows/tests.yml .. image:: https://badge.fury.io/py/whatportis.svg :target: https://pypi.python.org/pypi/whatportis/ .. image::...

getaltname

GSAN - Obtener Nombres Alternativos del Sujeto GSAN es una herramienta que puede extraer Nombres Alternativos del Sujeto SAN encontrados en Certificados SSL directamente desde servidores https, lo que puede proporcionarte nombres DNS subdominios o servidores virtuales. No depende de los registros...

CVE-2026-9806

CVE-2026-9806 CVE-2026-9806 es una vulnerabilidad de Cross-Site Scripting almacenado Stored XSS que afecta a las versiones de CTI Transmute anteriores a la versión parcheada. El fallo existe en el panel de notificaciones, donde los mensajes de notificación que contienen nombres de conversión...

CVE-2020-0753-and-CVE-2020-0754

Writeup y PoC para CVE-2020-0753, CVE-2020-0754 y seis vulnerabilidades DOS de Windows corregidas Explotación del bug de condición de carrera en FileSystem - análisis de CVE-2020-0753 y CVE-2020-0754 El servicio de Informe de Errores de Windows WER ha corregido 2 errores de Elevación de Privilegi...

wordlistgen

wordlistgen What and why? wordlistgen is a tool to pass a list of URLs and get back a list of relevant words for your wordlists. Wordlists are much more effective when you take the application's context into consideration. wordlistgen pulls out URL components, such as subdomain names, paths, quer...

dcrawl

dcrawl dcrawl is a simple, but smart, multi-threaded web crawler for randomly gathering huge lists of unique domain names. How it works? dcrawl takes one site URL as input and detects all links in the site's body. Each found link is put into the queue. Successively, each queued link is crawled in...