nmap-farewell

nmap-farewell Dieses Tool soll die Fähigkeiten der nfnetlinkqueue-Funktion des Linux-Kernels demonstrieren. Für detailliertere Informationen kannst du diesen Artikel lesen. Bevor Pakete vom Kernel verworfen werden, werden sie zur weiteren Verarbeitung an dieses Tool gesendet. Wenn ein entfernter...

psad

psad - Rilevamento di Intrusioni con i Log di iptables Introduzione Il Port Scan Attack Detector psad è un demone di sistema leggero scritto in è progettato per funzionare con il codice di firewall Linux iptables/ip6tables/firewalld per rilevare traffico sospetto come scansioni e sweeps di porte,...

log4v-vuln-check

Log4JS Scanner de Arquivos e Vulnerabilidades + Scanner de Bind de Portas Locais Este script é usado para realizar uma verificação rápida para ver se o seu servidor está possivelmente afetado pela CVE-2021-44228 a vulnerabilidade do log4j. Ele não fornece 100% de garantia de que você não está...

FinalRecon

Twitter - Telegram - thewhiteh4t's Blog FinalRecon is an all in one automatic web reconnaissance tool written in python. Goal of FinalRecon is to provide an overview of the target in a short amount of time while maintaining the accuracy of results. Instead of executing several tools one after...

RED_HAWK

Versione 2.0.0 Di R3D@0R2H1N A.K.A Tuhinshubhra Strumento tutto in uno per Information Gathering e Vulnerability Scanning Scansioni che puoi eseguire con RED HAWK : Scansione di base Titolo del sito NUOVO Indirizzo IP Rilevamento del server web MIGLIORATO Rilevamento CMS Rilevamento Cloudflare...

Dome

DOME - Uno strumento di enumerazione dei sottodomini Consulta la versione spagnola Dome è uno script Python veloce e affidabile che esegue una scansione attiva e/o passiva per ottenere sottodomini e cercare porte aperte. Questo strumento è consigliato per cacciatori di bug bounty e penetration...

nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

behave

Behave! A Still in Development monitoring browser extension for pages acting as bad boys. NB : This is the code repository of the project, if you're looking for the packed extensions: Firefox: https://addons.mozilla.org/en-US/firefox/addon/behave/ Chrome:...

port-scan-automation

LazyMap - Script di Scansione NMAP Automatico Automatizza le scansioni NMAP e le politiche Nessus personalizzate. Sviluppato da Daniel Compton https://github.com/commonexploits/port-scan-automation.git Rilasciato sotto AGPL, consulta LICENSE per maggiori informazioni Installazione root@kitploit:...

crowbar

Crowbar - Brute forcing tool What is Crowbar? Crowbar formally known as Levye is a brute forcing tool that can be used during penetration tests. It was developed to brute force some protocols in a different manner according to other popular brute forcing tools. As an example, while most brute...

webkiller

WebKiller V2 Tool Information Gathering Write With Python. PreView root@kitploit: ██╗ ██╗███████╗██████╗ ██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██║ ██║██╔════╝██╔══██╗██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ ██║ █╗ ██║█████╗ ██████╔╝█████╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██║███╗██║██╔══╝ ██╔══██╗██╔═██╗ ██║██║...

Crips

Crips IP Tools Questo strumento è una raccolta di strumenti IP online che possono essere utilizzati per ottenere rapidamente informazioni su indirizzi IP, pagine web e record DNS. Menu Whois lookup Traceroute DNS Lookup Reverse DNS Lookup GeoIP Lookup Port Scan Reverse IP Lookup INSTALL & UPDATE...

CVE-2026-72860 9router Server-Side Request Forgery via /api/provider-nodes/validate Because the IPv4-Mapped IPv6 Denylist Check Is Unreachable

The POST /api/provider-nodes/validate route in 9router takes a caller-supplied baseUrl and issues server-side HTTP requests to it, guarding the destination with assertPublicUrl from src/shared/utils/ssrfGuard.js. That guard compares hostname strings only: it resolves no DNS, does not revalidate...

CVE-2026-74905 SiYuan before v3.7.4 SSRF via IPv6 Transition Address Bypass

SiYuan before v3.7.4 contains a server-side request forgery SSRF vulnerability in the isPrivateIP function in kernel/util/net.go, used by SSRFSafeDialer to enforce SSRF protection in SafeMode. The function only checks for loopback, link-local unicast, private, and unspecified addresses and does n...

-vsftpd-exploit-lab

🎯 vsftpd 2.3.4 Backdoor Exploit — Lab Report Date: 21 J...

PYSEC-2026-814 OpenStack Glance Server-Side Request Forgery (SSRF)

An SSRF issue was discovered in OpenStack Glance before Newton. The 'copyfrom' feature in the Image Service API v1 allowed an attacker to perform masked network port scans. With v1, it is possible to create images with a URL such as 'http://localhost:22'. This could then allow an attacker to...

CVE-2026-49345

Mercator is an open source web application that enables mapping of the information system. Prior to version 2025.05.19, a Server-Side Request Forgery SSRF vulnerability exists in Mercator's CVE configuration panel /admin/config/parameters. The testProvider method in ConfigurationController passes...

CVE-2026-34225

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.7.2 and below contain a Blind Server Side Request Forgery in the functionality that allows editing an image via a prompt. The affected function performs a GET request to a user-provided U...

CVE-2026-33234

CVE-2026-33234 affects AutoGPT versions 0.1.0–0.6.51, where SendEmailBlock accepts user-provided smtp_server and smtp_port and passes them to Python’s smtplib.SMTP() without IP address validation. This bypasses hardened SSRF protections (validate_url_host and BLOCKED_IP_NETWORKS) used by other bl...

Server-side Request Forgery (SSRF)

Overview ragas is an Evaluation framework for RAG and LLM applications Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via improper validation of URLs in the retrievedcontexts parameter when processing multimodal inputs. An attacker can access arbitrary files,...