CVE-2025-53770-Checker

CVE-2025-53770-Checker 检查本地 SharePoint 服务器是否存在 CVE-2025-53770 漏洞 非侵入式检测器 ，用于检测 SharePoint Server 中的 CVE-2025-53770 漏洞 开发：Division81（Grupo Oruss 道德黑客团队） 技术描述 CVE-2025-53770 是 SharePoint 本地部署版 ViewState 管理器中一个严重的 .NET 反序列化漏洞，可导致无需认证的远程代码执行（RCE）:contentReferenceoaicite:1index=1。 利用方式是通过 POST 请求发送到 /...

CVE-2024-4577

CVE-2024-4577 CVE-2024-4577 的修复版极简 PoC 我刚刚测试了此漏洞的一些 PoC，发现其中几个无法正常工作，因此我创建了自己的非侵入式极简 PoC，用来检查你是否易受攻击。 使用方法： python3 CVE-2024-4577.py URL 示例：python3 CVE-2024-4577.py http://127.0.0.1/（请勿指定 php-cgi 路径，仅提供基础 URL）。...

CVE-2022-22965

CVE-2022-22965 Comprobador Nmap NSE para Spring Framework RCE CVE-2022-22965 No intrusivo Este script comprueba la existencia de la vulnerabilidad CVE-2022-22965 en Spring Framework 5.2.x / 5.3.x RCE. Utiliza el payload "/?class.module.classLoader.definedPackages%5B0%5D=0" mediante una petición G...

CVE-2025-55182-scanner

🔍 CVE-2025-55182-scanner - 轻松检测漏洞 Download CVE-2025-55182-scanner 🚀 快速开始 欢迎！本指南将帮助您下载并运行 CVE-2025-55182-scanner。该工具可以非侵入式地识别应用程序中暴露的 React Server Components 端点。 🔧 系统要求 开始之前，请确保您具备以下条件： 操作系统： Windows 10 或更高版本、macOS 或 Linux 发行版。 磁盘空间： 至少 100 MB 可用空间。 网络： 需要互联网连接以获取更新和下载。 📥 下载与安装 要下载扫描器，请访问以下页面： 下载...

regreSSHion-Checker

OpenSSH 安全审计工具 regreSSHion 与 2026 漏洞 一款轻量级、非侵入式的 Python 工具，用于检查远程 SSH 服务器是否存在关键 OpenSSH 漏洞。它通过提取并解析 SSH 横幅来检测易受攻击的版本，并考虑操作系统特定的安全向后移植（特别针对 Ubuntu Noble 24.04）。 🛡️ 支持的漏洞检查 1. CVE-2024-6387 regreSSHion ：OpenSSH 中关键远程代码执行 RCE 信号处理程序竞争条件。 上游风险范围： 8.5p1 PORT...

Exploit for CVE-2026-64638

CVE-2026-64638 — Nuclei Detection Template Template Nuclei...

AirPlay RTSP Device Discovery Scanner

The AirPlay RTSP Device Discovery Scanner is a Metasploit auxiliary module designed to safely identify Apple AirPlay-compatible devices by sending a legitimate RTSP OPTIONS request to the default AirPlay service port 7000/TCP. The module performs non-intrusive service fingerprinting only and does...

WordPress Slider‑Future 1.0.5 Exposure Scanner

This Metasploit auxiliary module is designed to detect exposure of the WordPress Slider‑Future plugin REST endpoint at /wp-json/slider-future/v1/upload-image/. The module performs a non-intrusive HTTP request OPTIONS method to determine whether the endpoint is accessible. It does not upload files...

Exploit for Deserialization of Untrusted Data in Facebook React

$$\ $$\ $$$$$$$\ $$\ $$\ $$$$$$$$\ $$\ $...

Exploit for Deserialization of Untrusted Data in Facebook React

RSC Surface & Crash Detector This tool is a non-intrusive sec...

Leveraging Digital Twin-As-A-Service Towards Continuous and Automated Cybersecurity Certification

Traditional risk assessments rely on manual audits and system scans, often causing operational disruptions and leaving security gaps. To address these challenges, this work presents Security Digital Twin-as-a-Service SDT-aaS, a novel approach that leverages Digital Twin DT technology for automate...

Simplifying Azure Cloud Security with Snapshot-Based Scans

As organizations increasingly move to the cloud, securing these dynamic and transient environments has become a critical challenge for security teams. Cloud deployments are inherently more fluid than traditional infrastructure, with resources constantly being spun up, modified, or decommissioned...

The Rise of the Open Bug Bounty Project

Can you imagine launching a global bug bounty platform with almost 500,000 submissions and 13,000 researchers without consuming a cent from venture capitalists? If not, this success story is for you. The once skyrocketing bug bounty industry seems to be not in the best shape today. While prominen...

Watcher v1.5.8 - Web Security Testing Tool and Passive Vulnerability Scanner

Watcher is a runtime passive-analysis tool for HTTP-based Web applications. Being passive means it won't damage production systems, it's completely safe to use in Cloud computing, shared hosting, and dedicated hosting environments. Watcher detects Web-application security issues as well as...