CVE-2024-21644-Poc

PoC de CVE-2024-21644 Installer les modules : pip install requests pip.install colorama...

POC-CVE-2023-32681

POC для CVE-2023-32681 Это реализация CVE-2023-32681 на Python 3, затрагивающая клиентов, использующих библиотеку requests версии = 2.30.0. Согласно https://www.rfc-editor.org/rfc/rfc9110.htmlsection-15.4, когда сервер выдает перенаправление 3xx, пользовательский агент должен изменить запрос,...

bypass-url-parser

Bypass Url Parser Tool that tests MANY url bypasses to reach a 40X protected page. If you wonder why this code is nothing but a dirty curl wrapper, here's why: Most of the python requests do url/path/parameter encoding/decoding, and I hate this. If I submit raw chars, I want raw chars to be sent...

dp_crypto

dpcrypto Base64-based encryption oracle exploit for CVE-2017-9248 Telerik UI for ASP.NET AJAX dialog handler Published on exploit-db Update 2020 - Please note that the version on exploit-db is now very out of date compared to the latest version here on GitHub...

CVE-2022-22947

CVE-2022-22947 استغلال يبدو أن هذه الثغرة لا تتكرر في كل مرة. python3 requests...

exploit-writing-for-oswe

Écriture d'exploits pour OSWE Contexte Quoi Ce dépôt contient une liste d'extraits de code et de conseils utiles concernant l'écriture de scripts d'exploit dans les laboratoires OSWE et l'examen de certification. Certains exemples peuvent aller à l'encontre de certaines pratiques de codage, mais...

CVE-2019-17662

CVE-2019-17662 修改了CVE代码 使用了 Prepared Requests，因为 python3 requests 模块会规范化URL中的 ../，例如： 代码如下： root@kitploit: r = requests.get"http://123.123.123.123/../../../../../../test" printstrr.statuscode 结果如下： root@kitploit: GET /test HTTP/1.1 Host: 123.123.123.123 Connection: close Accept-Encoding: gzip,...

forbidden

محظور Forbidden تجاوز رموز حالة استجابة HTTP 4xx والمزيد. الأداة مبنية على Python Requests و PycURL و HTTP Client. تم اختبارها على Kali Linux v2024.2 64-bit. صُنعت لأغراض تعليمية. آمل أن تكون مفيدة! الخطط المستقبلية: إضافة خيار silent لكتم إخراج وحدة التحكم. إضافة خيار no color لتعطيل الإخراج...

Sharepoint-cve-2023-29375-incident-response

Analyse d'incident SOC : Élévation de privilèges sur Microsoft SharePoint Server CVE-2023-29375 Une enquête de sécurité approfondie sur une tentative critique d'exploitation et d'énumération ciblant un serveur Microsoft SharePoint. Vue d'ensemble de l'incident Nom de l'alerte : SOC227 - Élévation...

Exploit for CVE-2026-64638

XSS2Shell Multi-Target Scanner Developer: YogaGymn PoC/s...

EulerOS Virtualization 2.12.0 : python-requests (EulerOS-SA-2026-2800)

According to the versions of the python-requests package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a...

EulerOS 2.0 SP12 : python-requests (EulerOS-SA-2026-2623)

According to the versions of the python-requests packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a predictable filename...

EulerOS 2.0 SP12 : python-requests (EulerOS-SA-2026-2563)

According to the versions of the python-requests packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a predictable filename...

EulerOS 2.0 SP15 : python-requests (EulerOS-SA-2026-2465)

According to the versions of the python-requests packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a predictable filename...

GHSA-6H9P-93HQ-Q7H6 PraisonAI: SpiderTools redirect-target SSRF protection bypass

SpiderTools redirect-target SSRF protection bypass Summary SpiderTools.scrapepage validates the initial URL and rejects direct loopback, private, link-local, metadata, and internal hostnames. It then calls requests.Session.get without disabling automatic redirects or validating redirect Location...

EulerOS Virtualization 2.13.0 : python-requests (EulerOS-SA-2026-2417)

According to the versions of the python-requests packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a...

EulerOS Virtualization 2.13.1 : python-requests (EulerOS-SA-2026-2388)

According to the versions of the python-requests packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a...

openSUSE 16 Security Update : python-requests (openSUSE-SU-2026:20926-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20926-1 advisory. This update for python-requests fixes the following issue: - CVE-2026-25645: extractzippedpaths uses predictable filenames when extracting files from zi...

EulerOS 2.0 SP13 : python-requests (EulerOS-SA-2026-2313)

According to the versions of the python-requests packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a predictable filename...

EulerOS 2.0 SP13 : python-requests (EulerOS-SA-2026-2356)

According to the versions of the python-requests packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a predictable filename...