Dome

DOME - Un outil d'énumération de sous-domaines Consultez la version espagnole Dome est un script Python rapide et fiable qui effectue une analyse active et/ou passive pour obtenir des sous-domaines et rechercher des ports ouverts. Cet outil est recommandé pour les chasseurs de bugs et les...

Crips

Crips IP-инструменты Этот инструмент представляет собой набор онлайн IP-инструментов, которые можно использовать для быстрого получения информации об IP-адресах, веб-страницах и DNS-записях. Меню Поиск Whois Traceroute DNS-запрос Обратный DNS-запрос GeoIP-запрос Сканирование портов Обратный...

psad

psad - Détection d'intrusion avec les journaux iptables Introduction Le Port Scan Attack Detector psad est un démon système léger écrit en conçu pour fonctionner avec le pare-feu Linux iptables/ip6tables/firewalld afin de détecter le trafic suspect tel que les scans de ports et les balayages, les...

RED_HAWK

Версия 2.0.0 Автор: R3D@0R2H1N A.K.A Tuhinshubhra Всё в одном инструменте для сбора информации и сканирования уязвимостей Сканирования, которые вы можете выполнить с помощью RED HAWK : Базовое сканирование Название сайта НОВОЕ IP-адрес Обнаружение веб-сервера УЛУЧШЕНО Обнаружение CMS Обнаружение...

FinalRecon

Twitter - Telegram - thewhiteh4t's Blog FinalRecon is an all in one automatic web reconnaissance tool written in python. Goal of FinalRecon is to provide an overview of the target in a short amount of time while maintaining the accuracy of results. Instead of executing several tools one after...

port-scan-automation

LazyMap - Script de scan NMAP automatique Automatisez les scans NMAP et les politiques Nessus personnalisées. Développé par Daniel Compton https://github.com/commonexploits/port-scan-automation.git Publié sous licence AGPL, voir LICENSE pour plus d'informations Installation root@kitploit: git clo...

webkiller

WebKiller V2 Tool Information Gathering Write With Python. PreView root@kitploit: ██╗ ██╗███████╗██████╗ ██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██║ ██║██╔════╝██╔══██╗██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ ██║ █╗ ██║█████╗ ██████╔╝█████╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██║███╗██║██╔══╝ ██╔══██╗██╔═██╗ ██║██║...

nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

patator

Patator Patator was written out of frustration from using Hydra, Medusa, Ncrack, Metasploit modules and Nmap NSE scripts for password guessing attacks. I opted for a different approach in order to not create yet another brute-forcing tool and avoid repeating the same shortcomings. Patator is a...

behave

Behave! A Still in Development monitoring browser extension for pages acting as bad boys. NB : This is the code repository of the project, if you're looking for the packed extensions: Firefox: https://addons.mozilla.org/en-US/firefox/addon/behave/ Chrome:...

nmap-farewell

nmap-farewell Этот инструмент предназначен для демонстрации возможностей функции nfnetlinkqueue ядра Linux. Более подробную информацию вы можете прочитать в этой статье. Прежде чем пакеты будут отброшены ядром, они отправляются этому инструменту для дальнейшей обработки. Если удалённый узел...

log4v-vuln-check

Сканер файлов и уязвимостей Log4JS + сканер локальных портов привязки Этот скрипт предназначен для быстрой проверки возможности влияния уязвимости CVE-2021-44228 log4j на ваш сервер. Он не даёт 100% гарантии отсутствия уязвимости, но указывает на потенциальную возможность её наличия. Особенности:...

CVE-2026-72860 9router Server-Side Request Forgery via /api/provider-nodes/validate Because the IPv4-Mapped IPv6 Denylist Check Is Unreachable

The POST /api/provider-nodes/validate route in 9router takes a caller-supplied baseUrl and issues server-side HTTP requests to it, guarding the destination with assertPublicUrl from src/shared/utils/ssrfGuard.js. That guard compares hostname strings only: it resolves no DNS, does not revalidate...

CVE-2026-74905 SiYuan before v3.7.4 SSRF via IPv6 Transition Address Bypass

SiYuan before v3.7.4 contains a server-side request forgery SSRF vulnerability in the isPrivateIP function in kernel/util/net.go, used by SSRFSafeDialer to enforce SSRF protection in SafeMode. The function only checks for loopback, link-local unicast, private, and unspecified addresses and does n...

-vsftpd-exploit-lab

🎯 vsftpd 2.3.4 Backdoor Exploit — Lab Report Date: 21 J...

PYSEC-2026-814 OpenStack Glance Server-Side Request Forgery (SSRF)

An SSRF issue was discovered in OpenStack Glance before Newton. The 'copyfrom' feature in the Image Service API v1 allowed an attacker to perform masked network port scans. With v1, it is possible to create images with a URL such as 'http://localhost:22'. This could then allow an attacker to...

CVE-2026-49345

Mercator is an open source web application that enables mapping of the information system. Prior to version 2025.05.19, a Server-Side Request Forgery SSRF vulnerability exists in Mercator's CVE configuration panel /admin/config/parameters. The testProvider method in ConfigurationController passes...

CVE-2026-34225

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.7.2 and below contain a Blind Server Side Request Forgery in the functionality that allows editing an image via a prompt. The affected function performs a GET request to a user-provided U...

CVE-2026-33234

CVE-2026-33234 affects AutoGPT versions 0.1.0–0.6.51, where SendEmailBlock accepts user-provided smtp_server and smtp_port and passes them to Python’s smtplib.SMTP() without IP address validation. This bypasses hardened SSRF protections (validate_url_host and BLOCKED_IP_NETWORKS) used by other bl...

Server-side Request Forgery (SSRF)

Overview ragas is an Evaluation framework for RAG and LLM applications Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via improper validation of URLs in the retrievedcontexts parameter when processing multimodal inputs. An attacker can access arbitrary files,...