Lucene search
+L

34 matches found

Kitploit
Kitploit
•added 2026/09/25 10:21 p.m.•18 views

ligolo-mp

Ligolo-MP : tunelización como una VPN, ¡ahora con amigos! Ligolo-MP es una versión avanzada de Ligolo-ng, con arquitectura cliente-servidor, que permite a los pentesters jugar con múltiples túneles concurrentes de forma colaborativa. Gestiona todos tus TUN automáticamente, mientras también...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/09/25 8:43 p.m.•13 views

Invoke-SocksProxy

Invoke-SocksProxy Crea un proxy Socks local o 'inverso' utilizando powershell. El proxy local es un simple proxy Socks 4/5. El proxy inverso crea un túnel TCP iniciando conexiones SSL salientes que pueden atravesar el proxy del sistema. El túnel puede entonces usarse como un proxy socks en el hos...

6.1AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 3:49 p.m.•11 views

PivotSuite

DESCARGO DE RESPONSABILIDAD: Este software es solo para fines educativos. Este software no debe utilizarse para actividades ilegales. El autor no se hace responsable de su uso. PivotSuite PivotSuite: Hackea la Red Oculta - Un Kit de Pivoteo de Red Descripción PivotSuite es un kit de pivoteo de re...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 1:07 p.m.•167 views

punk.py

punk.py unix SSH post-exploitation 1337 tool how it works punk.py is a post-exploitation tool meant to help network pivoting from a compromised unix box. It collect usernames, ssh keys and known hosts from a unix system, then it tries to connect via ssh to all the combinations found. punk.py is...

5.6AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 6:56 a.m.•11 views

ICMPTunnel

icmptunnel is a tool to tunnel IP traffic within ICMP echo request and response ping packets. It’s intended for bypassing firewalls in a semi-covert way, for example when pivoting inside a network where ping is allowed. It might also be useful for egress from a corporate network to the Internet,...

6.2AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/25 3:05 a.m.•14 views

maalik

Maalik Framework de Pivoting de Red y Post-Explotación. Características Características de la Consola Notificación de escritorio en nueva sesión. Eliminar sesión en línea fácilmente. Construir Cliente Maalik, Fhdawn fácilmente. Valores configurables en settings.ini Shell root. Multihilo, Obtener...

5.9AI score
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/25 1:57 a.m.•16 views

pivotool

pivotool pivotool en el hacking ético, como era de esperar, es una herramienta simple escrita en bash que puede ayudarte en la fase de post-explotación para pivotar a otros sistemas. Descripción Pivotool es una herramienta que no pretende revolucionar la fase de post-explotación de una prueba de...

5.9AI score
SaveExploits0References1
NVD
NVD
•added 2026/09/05 10:16 a.m.•8 views

CVE-2026-86123

SQL Chat contains four unauthenticated API endpoints that accept client-supplied database connection parameters and execute arbitrary SQL queries against attacker-specified hosts. Attackers can connect to internal databases, execute SQL commands, enumerate schemas, and pivot into the server's...

9.4CVSS0.00487EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/05 9:59 a.m.•10 views

EUVD-2026-71955

SQL Chat contains four unauthenticated API endpoints that accept client-supplied database connection parameters and execute arbitrary SQL queries against attacker-specified hosts. Attackers can connect to internal databases, execute SQL commands, enumerate schemas, and pivot into the server's...

9.4CVSS5.9AI score0.00487EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/05 12:00 a.m.•19 views

PT-2026-86394

SQL Chat contains four unauthenticated API endpoints that accept client-supplied database connection parameters and execute arbitrary SQL queries against attacker-specified hosts. Attackers can connect to internal databases, execute SQL commands, enumerate schemas, and pivot into the server's...

9.4CVSS6.3AI score0.00487EPSS
SaveExploits0References6
NVD
NVD
•added 2026/08/17 11:16 a.m.•13 views

CVE-2026-74802

SiYuan versions before 3.7.4 contain a cross-site WebSocket hijacking vulnerability in the admin-only /ws/network/proxy endpoint that explicitly disables origin validation by setting CheckOrigin to unconditionally return true. Attackers can craft malicious webpages that establish WebSocket...

8.2CVSS0.00164EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/08/17 11:04 a.m.•36 views

CVE-2026-74802

SiYuan versions before 3.7.4 contain a cross-site WebSocket hijacking vulnerability in the admin-only /ws/network/proxy endpoint that explicitly disables origin validation by setting CheckOrigin to unconditionally return true. Attackers can craft malicious webpages that establish WebSocket...

8.2CVSS5.3AI score0.00164EPSS
SaveExploits0References3
CVE
CVE
•added 2026/08/17 11:04 a.m.•27 views

CVE-2026-74802

SiYuan versions before 3.7.4 set the WebSocket CheckOrigin handler to unconditionally return true on the admin-only /ws/network/proxy endpoint, allowing cross-site WebSocket hijacking. A malicious webpage can make the victim's SiYuan kernel proxy arbitrary network traffic, enabling authenticated ...

8.2CVSS5.3AI score0.00164EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/17 11:04 a.m.•8 views

CVE-2026-74802 SiYuan 3.7.3 Cross-Site WebSocket Hijacking via network proxy

SiYuan versions before 3.7.4 contain a cross-site WebSocket hijacking vulnerability in the admin-only /ws/network/proxy endpoint that explicitly disables origin validation by setting CheckOrigin to unconditionally return true. Attackers can craft malicious webpages that establish WebSocket...

8.2CVSS5.9AI score0.00164EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/17 12:00 a.m.•2 views

CVE-2026-74802: Origin Validation Error

SiYuan versions before 3.7.4 contain a cross-site WebSocket hijacking vulnerability in the admin-only /ws/network/proxy endpoint that explicitly disables origin validation by setting CheckOrigin to unconditionally return true. Attackers can craft malicious webpages that establish WebSocket...

8.2CVSS5.9AI score0.00164EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/17 12:00 a.m.•22 views

PT-2026-76601

SiYuan versions before 3.7.4 contain a cross-site WebSocket hijacking vulnerability in the admin-only /ws/network/proxy endpoint that explicitly disables origin validation by setting CheckOrigin to unconditionally return true. Attackers can craft malicious webpages that establish WebSocket...

8.2CVSS5.3AI score0.00164EPSS
SaveExploits0References3
Metasploit
Metasploit
•added 2026/06/19 7:03 p.m.•292 views

Quectel Cellular Modem Pivot (Serial AT)

Opens a serial connection to a Quectel cellular modem and registers it as a 'modem' session capable of network pivoting. The Quectel modems have a limited number of sockets available, configurable using MODEMSOCKETS. Once the session is established, it can be routed through using the route comman...

6AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/06/18 12:00 a.m.•38 views

PT-2026-50710

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions prior to 0.6.62 have a DOM-based Cross-Site Scripting XSS vulnerability in AutoGPT's signup page. The application improperly trusts a URL parameter next, which is...

8.8CVSS5.5AI score0.00319EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
•added 2026/05/15 12:00 a.m.•18 views

Rosemary 1.1.0

Rosemary is a cross-platform transparent tunneling platform designed for network pivoting. Unlike traditional tools that rely on TUN/TAP interfaces or require per-application proxy configuration like proxychains, Rosemary intercepts traffic at the kernel level...

5.8AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/04/24 12:00 a.m.•15 views

Rosemary 1.0.4

Rosemary is a cross-platform transparent tunneling platform designed for network pivoting. Unlike traditional tools that rely on TUN/TAP interfaces or require per-application proxy configuration like proxychains, Rosemary intercepts traffic at the kernel level...

5.2AI score
SaveExploits0
Rows per page
Query Builder