23 matches found
debugHunter
debugHunter Discover Hidden Debug Endpoints & Development Environments The essential Chrome extension for bug bounty hunters and penetration testers Passively detect debug parameters, sensitive headers, and exposed paths while you browse. Why debugHunter? Finding debug endpoints and exposed...
RSC_Detector
RSC Fingerprint Detector A Chrome extension for detecting React Server Components RSC and Next.js App Router fingerprints on web pages. ⚠️ Important Notice This extension is designed for educational and security research purposes only. It includes functionality that could be used to test for...
rxerium-templates
A curated collection of 144+ Nuclei templates focusing on zero-day and actively exploited vulnerabilities in the wild with a few miscellaneous templates. Templates use passive detection techniques version/date matching and are organized by year for easy navigation. ⚠️ Note: Date matching may be...
BurpWpsScan
Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. BurpWpsScan A Burp Suite extension that detects WordPress sites during web applicati...
whoishere.py
whoishere.py WIFI客户端检测 - 通过为执行无线探测请求的设备分配名称来识别人员。...
bluehood
Bluehood Bluetooth Neighborhood - Track BLE devices in your area and analyze traffic patterns. WARNING: Alpha Software This project is in early development and is not ready for production use. Features may change, break, or be removed without notice. Use at your own risk. Data collected should be...
Specter-FlipperZero
The waveform is not a graphic. It is 128 columns of 13.56 MHz carrier that Specter recorded off a real polling reader at 8 ms per column, read back out of the screenshot beside it. Its duty measures 28% where the device's own counter printed 27%, and both numbers are on the banner. Sweep for the...
log4j-Scan-Burpsuite
log4j-Scan-Burpsuite Burpsuite detection plugin for Log4j vulnerability CVE-2021-44228 Includes ON/OFF switch, Filter, Send Features: Automatically replace request headers Automatically replace POST request application/json parameters Automatically replace POST request application/x-www-urlencode...
jenkins_scan
jenkinsscan Find Jenkins environment and check for CVE-2024-23897 How it works Jenkins Detection Tests the paths: /, /login, /oops, /api/json, /cli, /jenkins/, /jenkins/api/json Identifies via: 1. Header X-Jenkins — most reliable, also returns the version 2. Header X-Hudson — older instances 3...
CVE-2026-76581-Detector
CVE-2026-76581 - WPMU DEV Dashboard 漏洞检测器 一个安全、被动的 Python 检测器，用于识别运行受 CVE-2026-76581 影响的 WPMU DEV Dashboard 版本的 WordPress 安装。 该检测器不会利用身份验证绕过、请求或重放 HMAC 值，也不会创建管理员会话。 该截图是出于教育目的而进行的脱敏演示。其中不包含任何真实目标、载荷、身份验证令牌或凭据。 漏洞摘要 字段| 信息 ---|--- CVE| CVE-2026-76581 产品| WPMU DEV Dashboard 插件标识| wpmudev-updates...
JEFAZO-CVE-2025-55182-Checker
JEFAZO-CVE-2025-55182-Checker Description JEFAZO-CVE-2025-55182-Checker is a passive analysis tool designed to identify indicators related to CVE-2025-55182 in applications built with Next.js and React Server Components RSC. The tool performs safe and non-intrusive checks, without attempting to...
CVE-2025-2294
CVE-2025-2294 kubio-cve-2025-2294active.yaml - the template implements a check that allows you to verify the presence of the vulnerability through exploitation. kubio-cve-2025-2294passive.yaml - the template implements a check based on the obtained software version. scanner.py - script that allow...
React2Shell
RSC Sentinel A Firefox extension for detecting React2Shell vulnerabilities CVE-2025-55182 & CVE-2025-66478 in web applications. 👁️ Overview RSC Sentinel is a Firefox browser extension for security researchers and educators who want to observe React Server Components RSC and Next.js App Router...
CVE-2026-24061-GNU-inetutils-Telnet-Detector
Detector de CVE-2026-24061 GNU inetutils Telnet Una herramienta de detección pasiva y segura para identificar una posible exposición a CVE-2026-24061 , una vulnerabilidad que afecta a ciertas versiones de GNU inetutils telnet. Este proyecto está diseñado para pipelines de DevOps , auditorías de...
copy-fail-cve-2026-31431
Comprobador de CVE para Copy Fail CVE-2026-31431 Autores/Colaboradores : Patrick Doyle Autor/Mantenedor, Effie Renard Coautora, Kimberly-Lee Banks Coautora, Chris F. Soporte/Revisión de código Divulgación de IA : Claude Code se utilizó para escribir archivos de pruebas, escribir datos de prueba y...
ripple20
"Ripple20" Treck IOT/ICS 设备发现与漏洞利用检测 v0.2 Summary: 一个用于被动检测 Treck 设备、发现/扫描尝试以及针对 Treck TCP/IP 协议栈中 "Ripple20" 系列漏洞的利用行为的 Zeek 包。 References: https://corelight.blog/2020/06/30/ripple20-zeek-package-open-sourced/ https://www.jsof-tech.com/ripple20/ 由 JSOF 提供的 python/scapy 扫描包。...
Specter-FlipperZero v2.8
The waveform is not a graphic. It is 128 columns of 13.56 MHz carrier that Specter recorded off a real polling reader at 8 ms per column, read back out of the screenshot beside it. Its duty measures 28% where the device's own counter printed 27%, and both numbers are on the banner. Sweep for the...
Exploit for CVE-2026-31431
copy-fail-cve-2026-31431 Passive detection tooling and techni...