CVE-2023-25203

CVE-2023-25203: Anwendung anfällig für SSRF-Angriffe Server Side Request Forgery Beschreibung CVE-2023-25203 identifiziert eine Sicherheitslücke in der Therefore-Lösung, die aufgrund der Verwendung der Aspose-Software zur Konvertierung hochgeladener Dateien in das PDF-Format anfällig für...

cloudmapper

CloudMapper Nota la funzionalità Network Visualization comando prepare non è più mantenuta. CloudMapper ti aiuta ad analizzare i tuoi ambienti Amazon Web Services AWS. Lo scopo originale era generare diagrammi di rete e mostrarli nel tuo browser funzionalità non più mantenuta. Ora contiene molte...

xray

XRay wurde in Rust neu implementiert und um weitere Funktionen erweitert, dieses Repository enthält LEGACY-Code. Verwenden Siehttps://github.com/evilsocket/legba XRAY XRay ist ein Werkzeug für die Netzwerk-OSINT-Sammlung, dessen Ziel es ist, einige der anfänglichen Aufgaben der Informationssammlu...

asnmap

ASN जानकारी का उपयोग करके संगठन के नेटवर्क रेंज को त्वरित रूप से मैप करने के लिए Go CLI और लाइब्रेरी। विशेषताएँ • स्थापना • उपयोग • asnmap चलाना • Discord से जुड़ें विशेषताएँ ASN से CIDR लुकअप ORG से CIDR लुकअप DNS से CIDR लुकअप IP से CIDR लुकअप ASN/DNS/IP/ORG इनपुट JSON/CSV/TEXT आउटपुट STD IN/OU...

A-Red-Teamer-diaries

Diari di un Red-Teamer Note accessibili pubblicamente sui miei esperimenti di pentesting/red teaming testati su diversi ambienti/infrastrutture controllati che coinvolgono l'uso di vari strumenti e tecniche utilizzati da penetration tester e redteam durante una valutazione di sicurezza. Progetto ...

LetsMapYourNetwork

Omniscient - Let’s Map Your Network v2.0 Indice dei contenuti 1. COS'È 2. PERCHÉ 3. DOVE USARLO 4. Presentazioni 5. Caratteristiche principali 6. Linee guida per l'installazione 7. COME USARLO 8. Comprendere il nodo 9. Contributore 10. LMYN In Azione 11. Roadmap 12. Informazioni di contatto COS'È...

HiddenNetworks-Python

HiddenNetworks-Python v0.9 Maggio 2020 Hidden Networks è un test di nuovo concetto basato sul paper omonimo, programmato usando Python 3.4. Facilita il compito di analizzare macchine locali e remote all'interno di un dominio, usando WMI nella ricerca di tracce di connessioni di dispositivi USB. C...

infernal-twin

Infernal-Wireless v3 Release 3 Improved and Compatibility on Kali Linux 2018 Added Visual Representation of Wireless Scan Added Visual Representation of Probe Requests and Map per SSID requested by Devices Updated MAC address mapping Added MAC address mappting on probe request devices Evil Twin...

xray

XRay has been reimplemented in Rust and expanded with more features, this repository is LEGACY code. Usehttps://github.com/evilsocket/legba XRAY XRay is a tool for network OSINT gathering, its goal is to make some of the initial tasks of information gathering and network mapping automatic. How Do...

leprechaun

Leprechaun root@kitploit: .-----. / V \ |...| |.....| .-' '-. .-. .-./ .--. |\ /| .-;.-"-.-;;-, =/ . -;,-;, . .-.-. . / ||'-'|| \ ,'--;.\ .;--' // o \ // --.. o '';,//| || : || |\ ;' \ '.\--' |"""""""|// / ':.// ,/\ | '---'| ||| ; Leprechaun ; ;""|""; \ / | '. vonahisec .' .' / \ '. '-,...

gibson

Gibson Ferramenta de monitoramento de rede que mapeia conexões processo-rede, identifica provedores de nuvem e gera regras de firewall. Agente leve para coleta, servidor para agregação, parser para análise. Screenshots Visão geral entre máquinas — comparação de versões de SO, detecção de IPs...

EUVD-2026-44918

HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. The application includes internal IP address details within its generated server responses, which could allow a remote attacker to gather sensitive network topology information and use it to map the internal...

robot

Good all day, my friends, I finally finished the first versio...

Beyond the Zero-Day: See Your Network Like an Attacker | Webinar with HD Moore

Assume the breach. Zero-days keep shipping, AI is writing exploits faster than anyone patches, and "patch everything in time" stopped working years ago. Stop betting the org on winning that race. You don't control which bug lands. You control what it can reach once it does. That is a question abo...

EUVD-2026-33260

A flaw was found in the Quay config-tool's LDAP and SMTP validation functions. An attacker with config editor access can exploit these functions, which make outbound connections to user-supplied endpoints without proper IP or host filtering. This allows the attacker to perform internal network...

Exploit for Server-Side Request Forgery in Rbaskets Request_Baskets

CVE-2023-27163 — request-baskets SSRF Exploit I wrote this ex...

CVE-2025-55276 HCL Aftermarket DPC is affected by Internal IP Disclosure vulnerability

HCL Aftermarket DPC is affected by Internal IP Disclosure vulnerability will give attackers a clearer map of the organization’s network layout...

CVE-2025-55276

CVE-2025-55276 concerns HCL Aftermarket DPC and an Internal IP Disclosure issue. Public documents describe an ability for an attacker to obtain a clearer map of an organization’s network layout, potentially aiding further attacks. NVD lists CVSS v3.1 base score 5.3 (Network vector, Low confidenti...

EUVD-2026-12762

A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP redirects when processing certain client configuration requests. This behavior allows an attacker to trick the server into making unintended requests to internal or restricted resources...

CVE-2026-4366 Keycloak-services: blind server-side request forgery (ssrf) via http redirect handling in keycloak

A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP redirects when processing certain client configuration requests. This behavior allows an attacker to trick the server into making unintended requests to internal or restricted resources...