goscan

GoScan est un client interactif de scan réseau avec auto-complétion, qui offre une abstraction et une automatisation autour de nmap. Bien qu'il ait commencé comme un petit projet personnel développé pour apprendre @golang, GoScan peut désormais être utilisé pour effectuer la découverte d'hôtes, l...

celerystalk

celerystalk celerystalk helps you automate your network scanning/enumeration process with asynchronous jobs aka tasks while retaining full control of which tools you want to run. Interactive Demo: Bug Bounty Mode HackerOne Interactive Demo: Vulnerability Assessment / PenTest Mode Retired...

celerystalk

celerystalk celerystalk te ayuda a automatizar tu proceso de escaneo/enumeración de red con trabajos asíncronos también conocidos como tareas mientras conservas el control total de qué herramientas quieres ejecutar. Demo interactiva: Modo Bug Bounty HackerOne Demo interactiva: Modo Evaluación de...

NetAss2

NetAss2 Escaneo de red más fácil con NetAss2 Network Assessment Assistance Framework. Facilita al Pentester realizar pruebas de penetración en la red. Dependencias nmap herramienta zmap herramienta Instalación root@kitploit: git clone https://github.com/zerobyte-id/NetAss2.git root@kitploit: cd...

reachability

-- INICIO DEL DESCARGO -- ÚSELO BAJO SU PROPIO RIESGO – DE NINGUNA MANERA SOY RESPONSABLE POR CUALQUIER DAÑO OCURRIDO – SI NO TIENE PERMISO EXPLÍCITO DEL PROPIETARIO DE LA RED, NO Y REPITO NO EJECUTE ESTO ESTO ES PYTHON ENCAPSULANDO MASSCAN https://github.com/robertdavidgraham/masscan -- FIN DEL...

conflucheck

ConfluCHECK Script de Python 3 para identificar CVE-2021-26084 mediante peticiones de red. Requisito pip install -r requirements.txt Cómo usar En primer lugar, dicho que no soy un programador experto, entonces... estoy bastante seguro de que mi código puede mejorarse, aceptaré pull requests...

Scanning

Análisis de Vulnerabilidades - LAB W7 Descripción | ---|--- Código del Curso| IKB21004 & IKB21403 Tarea| Análisis de Archivos - Resultado de Escaneo Dificultad| Intermedio Categoría| Evaluación de Vulnerabilidades, Análisis de Red Técnicas Utilizadas| Análisis de Paquetes, Huella Digital del SO,...

nl-kat-coordination

================ What is OpenKAT? OpenKAT aims to monitor, record and analyze the status of information systems. The basic premise is that many of the major security incidents are caused by small errors and known vulnerabilities, and if you find them and resolve them in time your systems and...

NetRaptor

NetRaptor - ARP Poisoning MITM Tool NetRaptor is a GUI-based ARP poisoning tool built with Python that allows you to scan a network, select a target and gateway, and perform a Man-in-the-Middle MITM attack. This tool is designed for educational purposes and authorized network security testing onl...

CVE-2021-41277_SSRF

CVE-2021-41277SSRF CVE-2021-41277 puede extenderse a un SSRF Descripción Metabase es una plataforma de análisis de datos de código abierto. Las versiones de Metabase 0.40.5 se vieron afectadas por CVE-2021-41277 , lo que provocaba la inclusión local de archivos según la descripción de la CVE. Al...

CVE-2026-92719 Quickwit through 0.9.0 SSRF via SQS queue_url Parameter

Quickwit through 0.9.0 fails to validate the host and scheme of the queueurl parameter in SQS file sources, allowing attackers to make the node issue requests to arbitrary internal addresses. Attackers can supply a malicious queueurl to the create-source API to scan internal networks and...

CVE-2026-92719

Quickwit through 0.9.0 is affected by a Server-Side Request Forgery (SSRF) vulnerability in its SQS file sources . The root cause is a failure to validate the host and scheme of the queue_url parameter, allowing an unauthenticated attacker to supply a malicious value via the create-source API and...

PSO - Printer Security Offensive

🖨️ PSO - Printer Security Offensive Version 0.4.0 | Changelog "Nmap for Printers" - Offensive security tool for printer pentesting. Fast. Focused. No bloat. ⚠️ Legal Notice PSO includes assessment and exploitation features. Always obtain explicit authorization before use. Safe mode: Scanning + IPP...

wannafind

wannafind Script simple que usa nmap para detectar CVE-2017-0143 MS17-010 Windows SMB y CVE-2017-7494 SAMBA en tu red Uso: wannafind.sh IP|Network wannafind.sh 192.168.1.0/24...

CVE-2026-76820

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0, the synchronizerFetch GraphQL query called fetchRemoteStreams after checking only that a remote stream URL used HTTP or HTTPS. The backend did not apply the ingestion deny lis...

CVE-2026-76820 OpenCTI: Synchronizer SSRF: stream fetch has no URL validation

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0, the synchronizerFetch GraphQL query called fetchRemoteStreams after checking only that a remote stream URL used HTTP or HTTPS. The backend did not apply the ingestion deny lis...

CVE-2026-76820

OpenCTI, an open-source cyber threat intelligence platform, is affected by a Server-Side Request Forgery (SSRF) in the synchronizerFetch GraphQL query prior to version 7.260701.0 . The backend's fetchRemoteStreams function validated only the HTTP/HTTPS scheme without applying the ingestion deny l...

EUVD-2026-79241

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0, the synchronizerFetch GraphQL query called fetchRemoteStreams after checking only that a remote stream URL used HTTP or HTTPS. The backend did not apply the ingestion deny lis...

CVE-2026-76820 OpenCTI: Synchronizer SSRF: stream fetch has no URL validation

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260701.0, the synchronizerFetch GraphQL query called fetchRemoteStreams after checking only that a remote stream URL used HTTP or HTTPS. The backend did not apply the ingestion deny lis...

EternalBlue-Vulnerability-Scanner

Escáner EternalBlue Una herramienta en Python para escanear dispositivos con SMB habilitado en busca de la vulnerabilidad EternalBlue CVE-2017-0144. Este script verifica si los dispositivos en una red son vulnerables al exploit EternalBlue probando conexiones SMB. ⚡ Características ✅ Escanea una...