forbidden

محظور Forbidden تجاوز رموز حالة استجابة HTTP 4xx والمزيد. الأداة مبنية على Python Requests و PycURL و HTTP Client. تم اختبارها على Kali Linux v2024.2 64-bit. صُنعت لأغراض تعليمية. آمل أن تكون مفيدة! الخطط المستقبلية: إضافة خيار silent لكتم إخراج وحدة التحكم. إضافة خيار no color لتعطيل الإخراج...

CVE-2019-17662

CVE-2019-17662 CVE कोड को संशोधित किया गया Prepared Requests का उपयोग किया गया, जैसा कि python3 requests मॉड्यूल URL में ../ को सामान्यीकृत करता है, उदाहरण के लिए: कोड के लिए: root@kitploit: r = requests.get"http://123.123.123.123/../../../../../../test" printstrr.statuscode परिणाम: root@kitploit...

bypass-url-parser

Bypass Url Parser Tool that tests MANY url bypasses to reach a 40X protected page. If you wonder why this code is nothing but a dirty curl wrapper, here's why: Most of the python requests do url/path/parameter encoding/decoding, and I hate this. If I submit raw chars, I want raw chars to be sent...

dp_crypto

dpcrypto Base64-based encryption oracle exploit for CVE-2017-9248 Telerik UI for ASP.NET AJAX dialog handler Published on exploit-db Update 2020 - Please note that the version on exploit-db is now very out of date compared to the latest version here on GitHub...

exploit-writing-for-oswe

كتابة الاستغلالات لشهادة OSWE خلفية ما هو يحتوي هذا المستودع على قائمة من المقتطفات والنصائح المفيدة المتعلقة بكتابة سكربتات الاستغلال في مختبرات وامتحان شهادة OSWE. بعض الأمثلة هنا قد تخالف بعض ممارسات البرمجة السليمة، لكن هدفنا النهائي هو كتابة سكربت الاستغلال بسرعة وبشكل صحيح. يُعد قسم مقتطفات...

POC-CVE-2023-32681

CVE-2023-32681 के लिए POC यह CVE-2023-32681 का Python 3 कार्यान्वयन है, जो requests संस्करण = 2.30.0 का उपयोग करने वाले क्लाइंटों को प्रभावित करता है। जैसा कि https://www.rfc-editor.org/rfc/rfc9110.htmlsection-15.4 के अनुसार, जब भी सर्वर द्वारा रीडायरेक्शन 3xx जारी किया जाता है तो user-agent को...

Sharepoint-cve-2023-29375-incident-response

SOC घटना विश्लेषण: Microsoft SharePoint Server विशेषाधिकार उन्नयन CVE-2023-29375 Microsoft SharePoint सर्वर को लक्षित करने वाले एक गंभीर शोषण और एन्यूमरेशन प्रयास की गहन सुरक्षा जाँच। घटना अवलोकन अलर्ट नाम: SOC227 - Microsoft SharePoint Server Elevation of Privilege - Possible CVE-2023-29375...

CVE-2022-22947

CVE-2022-22947 शोषण यह बग हर बार पुनरावृत्त नहीं होता। python3 requests...

CVE-2024-21644-Poc

CVE-2024-21644 का poc मॉड्यूल स्थापित करें: pip install requests pip.install colorama...

Exploit for CVE-2026-64638

XSS2Shell Multi-Target Scanner Developer: YogaGymn PoC/s...

EulerOS Virtualization 2.12.0 : python-requests (EulerOS-SA-2026-2800)

According to the versions of the python-requests package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a...

EulerOS 2.0 SP12 : python-requests (EulerOS-SA-2026-2623)

According to the versions of the python-requests packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a predictable filename...

EulerOS 2.0 SP12 : python-requests (EulerOS-SA-2026-2563)

According to the versions of the python-requests packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a predictable filename...

EulerOS 2.0 SP15 : python-requests (EulerOS-SA-2026-2465)

According to the versions of the python-requests packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a predictable filename...

GHSA-6H9P-93HQ-Q7H6 PraisonAI: SpiderTools redirect-target SSRF protection bypass

SpiderTools redirect-target SSRF protection bypass Summary SpiderTools.scrapepage validates the initial URL and rejects direct loopback, private, link-local, metadata, and internal hostnames. It then calls requests.Session.get without disabling automatic redirects or validating redirect Location...

EulerOS Virtualization 2.13.0 : python-requests (EulerOS-SA-2026-2417)

According to the versions of the python-requests packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a...

EulerOS Virtualization 2.13.1 : python-requests (EulerOS-SA-2026-2388)

According to the versions of the python-requests packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a...

openSUSE 16 Security Update : python-requests (openSUSE-SU-2026:20926-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20926-1 advisory. This update for python-requests fixes the following issue: - CVE-2026-25645: extractzippedpaths uses predictable filenames when extracting files from zi...

EulerOS 2.0 SP13 : python-requests (EulerOS-SA-2026-2313)

According to the versions of the python-requests packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a predictable filename...

EulerOS 2.0 SP13 : python-requests (EulerOS-SA-2026-2356)

According to the versions of the python-requests packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a predictable filename...