sslScrape

sslScrape SSLScrape | Uno strumento di scansione per estrarre hostname dai certificati SSL. Scritto da Peter Kim e @bbuerhaus . / //| | // \ \ | | / \ / \ / / | | / \ | | // | | / / / /| / / | // / / / / / /|| / Uso | python sslScrape.py CIDR Range Es. | python sslScrape.py 10.100.100.0/24...

combobulator

Dependency Combobulator Dependency Combobulator is an Open-Source, modular and extensible framework to detect and prevent dependency confusion leakage and potential attacks. This facilitates a holistic approach for ensuring secure application releases that can be evaluated against different sourc...

mwebfp

LNHG - Massive Web Fingerprinter mwebfp Introduction The "LowNoiseHG LNHG Massive Web Fingerprinter " "mwebfp " from now on was conceived in July 2013 after realizing the usefulness of webserver screenshots to pentesters, during an engagement with large external or internal IP address ranges, as ...

CVE-2024-29943

CVE-2024-29943 Un bug JIT di SpiderMonkey scoperto al Pwn2Own: dall'inconsistenza dell'intervallo degli interi all'eliminazione del controllo dei limiti, quindi RCE. Questo repository contiene PoC, Exploit e slide di analisi per CVE-2024-29943. Demo Demo.mp4 Slide Slides.pdf Informazioni per la...

CVE-2023-23752

जूमला! सूचना प्रकटीकरण - CVE-2023-23752 शोषण CVE-2023-23752 के लिए शोषण 4.0.0 = जूमला = 4.2.7. उपयोग प्रोजेक्ट का उपयोग करने से पहले हमें आवश्यक पैकेज स्थापित करने की आवश्यकता होगी मैं पहले एक वर्चुअल वातावरण बनाने की सलाह देता हूं root@kitploit: pip install -r requierements.txt अवधारणा का प्रमाण...

CVE-2026-46242

CVE-2026-46242 poc completo e lpe Faixa do Kernel Estado Notas 5.15.209 - 5.16 Afetado Commit introdutor backportado 6.1.175 - 6.2 Afetado Commit introdutor backportado 6.4 - 6.18.32 Afetado Bug introduzido na mainline 6.4 6.19 - 7.0.9 Afetado Inclui a estável mais recente v6.1-based Pixel 8, mai...

CVE-2017-5689

Script di rilevamento per CVE-2017-5689 Utilizzo: CVE-2017-5689detector.py Esempio: CVE-2017-5689detector.py 192.168.1.253-255 Avviso: https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00075...

nginx-CVE-2017-7529

Vulnerabilità di lettura fuori dai limiti della cache di Nginx CVE-2017-7529 Principio della vulnerabilità Riferimenti: https://cert.360.cn/detailnews.html?id=b879782fbad4a7f773b6c18490d67ac7...

CVE-2023-23752_Joomla

CVE-2023-23752 Joomla! v4.2.8 - Divulgazione di informazioni senza autenticazione Una proof-of-concept per CVE-2023-23752 Joomla! v4.2.8 - Divulgazione di informazioni senza autenticazione. Per le versioni 4.0.0 4.2.8 ovvero dalla 4.0.0 fino alla 4.2.7. Per Iniziare Esecuzione del programma Con...

cve-2023-50164

CVE-2023-50164 Versioni vulnerabili Struts 2.0.0 - Struts 2.3.37 EOL Struts 2.5.0 - Struts 2.5.32 Struts 6.0.0 - Struts 6.3.0 Versioni in cui la vulnerabilità è stata risolta Struts 2.5.33 Struts 6.3.0.2 Script per la ricerca Windows/PowerShell Per PowerShell 5.1 e versioni successive. Scritto da...

EXP-CVE-2017-75

EXP-CVE-2017-75 Этот скрипт на Python предназначен для проверки и эксплуатации определенной уязвимости в серверах NGINX известной как CVE-2017-75. Он был разработан для программы публичного раскрытия уязвимостей, в которую я недавно отправил отчет. Он использует специально сформированный заголово...

attack_range

Splunk Attack Range v5 يبني Splunk Attack Range بيئات سحابية مجهزة بالأدوات AWS, Azure, GCP، ويحاكي الهجمات، ويُمرر البيانات إلى Splunk لتطوير الكشف والاختبار. ما يفعله: بناء مختبرات — نشر مختبر صغير يشبه الإنتاج Splunk، خوادم Windows/Linux، اختياري Kali، Zeek، إلخ عبر Terraform وAnsible. محاكاة...

attack_range

Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...

recollapse

REcollapse REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications. It can also be helpful to bypass WAFs and weak vulnerability mitigations. For more information, take a look at the REcollapse blog post. The goal of this tool ...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

CVE-2026-80552

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Ensure index for read/write regions are within range The introduction of the capability chain rightly clamped the region indexes to the range of the capabilities itself, but neglected to do so for the existing...

CVE-2026-80530

In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range reflink flag clearing issue with INO1WRITTEN When exchanging two full-file ranges, xmicanexchangereflinkflags can move the reflink inode flag from the file that currently has it to the other file, as long ...

CVE-2026-80552

CVE-2026-80552 affects the Linux kernel on s390 architectures, specifically the vfio_ccw driver. When the capability chain was introduced, it correctly clamped region indexes to the capability range but neglected to apply the same bounds check to existing read/write regions , allowing out-of-rang...

CVE-2026-80530 xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN

In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range reflink flag clearing issue with INO1WRITTEN When exchanging two full-file ranges, xmicanexchangereflinkflags can move the reflink inode flag from the file that currently has it to the other file, as long ...