199 matches found
CVE-2025-30208-EXP
CVE-2025-30208-EXP Vite development server arbitrary file read vulnerability CVE-2025-30208, with wide coverage, simple exploitation, and no restrictions, posing a huge threat! Fofa search syntax: body="/@vite/client" Hunter search syntax: web.body="/@vite/client" Exp script usage -u to check -p...
webscreenshot
webscreenshot Descripción Un script sencillo para capturar pantallas de una lista de sitios web, basado en el script url-to-image de PhantomJS. Características Integración del 'renderizado diferido' de url-to-image para recursos AJAX Funciona completamente en sistemas Windows y Linux Soporte de...
NodeGoat
NodeGoat Being lightweight, fast, and scalable, Node.js is becoming a widely adopted platform for developing web applications. This project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them. Getti...
urlbuster
██╗ ██╗██████╗ ██╗ ██████╗ ██╗ ██╗███████╗████████╗███████╗██████╗ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║██╔════╝╚══██╔══╝██╔════╝██╔══██╗ ██║ ██║██████╔╝██║ ██████╔╝██║ ██║███████╗ ██║ █████╗ ██████╔╝ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║╚════██║ ██║ ██╔══╝ ██╔══██╗ ╚██████╔╝██║...
CVE-2024-4577
CVE-2024-4577 Disclaimer This tool is intended only for personal security research and learning. Any direct or indirect consequences or losses caused by the dissemination or use of this tool are the sole responsibility of the user; the tool author assumes no responsibility. PHP NAME: PHP-CGI -...
WinPwn
Sponsored by WinPwn In many past internal penetration tests I often had problems with the existing Powershell Recon / Exploitation scripts due to missing proxy support. I also often ran the same scripts one after the other to get information about the current system and/or the domain. To automate...
CVE-2022-22947
Introduction Inject Godzilla memory shell via CVE-2022-22947. Since the tools I found didn't have proxy functionality, I built my own wheel. Usage main -u http://127.0.0.1:8080 Using proxy main -u http://127.0.0.1:8080 -p http://10.0.0.1:8080 Reference...
FGscanner
FantaGhost URL Scanner 1.1 Released date : 2014/02/05 Advanced web directory scanner with proxy and TOR support About FGscanner is an advanced opensource web directory scanner. It find hidden contents on a web server using dictionary-like attack. FantaGhost URL scanner support proxy and TOR...
dnschan
dnschan This is a trojan that runs over DNS. You can: handle multiple agents very slowly upload files fetch files from the web run processes...
CVE-2021-40438-POC
Note: Intended only for educational and controlled testing purposes. Only test on systems you have permission to assess. CVE-2021-40438 - SSRF Exploit ░█▀▀░█░█░█▀▀░░░░░▀▀▄░▄▀▄░▀▀▄░▀█░░░░░░█░█░▄▀▄░█░█░▀▀█░▄▀▄ ░█░░░▀▄▀░█▀▀░▄▄▄░▄▀░░█/█░▄▀░░░█░░▄▄▄░░▀█░█/█░░▀█░░▀▄░▄▀▄...
cve-2023-37635
CVE-2023-37635 - Exploitation Guide Installation & Setup 1️⃣ Install Dependencies pip install -r requirements.txt 2️⃣ Run the Exploit With a proxy: python brutForc.py Without a proxy: python brutForc.py -n Notes: Replace with the target URL. The -n flag disables proxy usage. ⚠️ Disclaimer : This...
CVE-2018-7600
CVE-2018-7600 Proof of Concept Exploit for Drupal CVE-2018-7600 RCE with Pseudo-Shell and proxy support...
Vite-CVE-2025-30208-Scanner
An automated tool for detecting Vite CVE-2025-30208 vulnerability, supporting batch scanning and result saving. Features ✅ Colored terminal output ✅ Batch target scanning file import supported ✅ Multi-threaded concurrent detection adjustable thread count ✅ Automatic saving of vulnerability result...
Confluence-RCE
Usage: python3 mian.py Detection Command Execution Reverse Shell Supports SOCKS5 and HTTP Proxy For communication and learning purposes only...
CVE-2025-30208_POC
Scan without proxy python3 poc.py -f urls.txt Scan with proxy python3 poc.py -f urls.txt --proxy http://127.0.0.1:8080...
Malicious code in new-native-tools-linux-x64-gnu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38b165a8872e9c65dab5b230d8a4cc26e045f5fc3fd8502fd711652913af44a The package ships a single 10 MB Rust-compiled Linux x8664 N-API native module tools.linux-x64-gnu.node referenced by main, with a two-line README th...
MAL-2026-12402 Malicious code in new-native-tools-linux-x64-gnu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38b165a8872e9c65dab5b230d8a4cc26e045f5fc3fd8502fd711652913af44a The package ships a single 10 MB Rust-compiled Linux x8664 N-API native module tools.linux-x64-gnu.node referenced by main, with a two-line README th...
wp2shell
Command-Line Arguments Argument Type Default Description -u, --u...
Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3
urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with 'ProxyManager', the 'Proxy-Authorization' header is only sent to the configured proxy, as expected. However, when sending HTTP requests without using urllib3's proxy support, it's possible to...