35385 matches found
requests-ip-rotator
Orgogliosamente sponsorizzato da Swiftproxy Proxy residenziali ad alte prestazioni con un pool di oltre 80 milioni di IP in più di 195 paesi — migliora il tasso di successo delle richieste e riduce i blocchi IP durante la raccolta di dati su larga scala e l'automazione del browser. Perfetto per...
CVE-2025-61163
Cohere North AI v1.1.5 was discovered to contain excessively permissive cross-domain policy with untrusted domains. This occurs via the server failing to validate the Origin header of incoming connection requests...
strelka
Releases | Documentation | Pull Requests | Issues !Pull...
odat
Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid...
cloud_enum
cloudenum Future of cloudenum I built this tool in 2019 for a pentest involving Azure, as no other enumeration tools supported it at the time. It grew from there, and I learned a lot while adding features. Building tools is fun, but maintaining tools is hard. I haven't actively used this tool...
turbo-intruder
Turbo Intruder Turbo Intruder è un'estensione di Burp Suite per inviare un gran numero di richieste HTTP e analizzare i risultati. È pensata per complementare Burp Intruder gestendo attacchi che richiedono velocità, durata o complessità eccezionali. Le seguenti caratteristiche la distinguono:...
dnssearch
dnssearch This software is a subdomain enumeration tool. Purpose dnssearch takes an input domain -domain parameter and a wordlist -wordlist parameter , it will then perform concurrent DNS requests using the lines of the wordlist as sub domains eventually bruteforcing every sub domain available on...
mtr
WHAT IS MTR? mtr combines the functionality of the 'traceroute' and 'ping' programs in a single network diagnostic tool. As mtr starts, it investigates the network connection between the host mtr runs on and a user-specified destination host. It sends probes to the destination with successively...
PacketSender
Introduzione https://packetsender.com Leggi questo in altre lingue:English, Español, Deutsch, Français, Italiano, 简体中文. Packet Sender è un'utilità open source che permette di inviare e ricevere pacchetti TCP, UDP e SSL TCP crittografato, nonché richieste HTTP/HTTPS e la generazione di pannelli. I...
wfuzz
Wfuzz - Il Web Fuzzer Wfuzz è stato creato per facilitare il compito nelle valutazioni delle applicazioni web e si basa su un semplice concetto: sostituisce qualsiasi riferimento alla parola chiave FUZZ con il valore di un dato payload. Un payload in Wfuzz è una fonte di dati. Questo semplice...
chromepass
Chromepass - Hacking Chrome Saved Passwords and Cookies View Demo · Report Bug · Request Feature Table of Contents About the Project AV Detection Getting started Prerequisites Installation Usage Email Errors, Bugs and Feature Requests Learn More License Demo About The project Chromepass is a...
bypass-url-parser
Bypass Url Parser Tool that tests MANY url bypasses to reach a 40X protected page. If you wonder why this code is nothing but a dirty curl wrapper, here's why: Most of the python requests do url/path/parameter encoding/decoding, and I hate this. If I submit raw chars, I want raw chars to be sent...
EUVD-2026-66638
Missing Authentication for Critical Function vulnerability in Spring Spring Cloud Config allows Webhook requests to Spring Cloud Config Server's /monitor endpoint are not validated. This issue affects Spring Cloud Config: from 5.0.0 through 5.0.4, from 4.3.0 through 4.3.4, from 4.0.0 through 4.2....
CVE-2026-47837 Spring Cloud Config Server Monitor Endpoint Does Not Validate Webhook Requests
Missing Authentication for Critical Function vulnerability in Spring Spring Cloud Config allows Webhook requests to Spring Cloud Config Server's /monitor endpoint are not validated. This issue affects Spring Cloud Config: from 5.0.0 through 5.0.4, from 4.3.0 through 4.3.4, from 4.0.0 through 4.2....
CVE-2022-1388
CVE-2022-1388 في إصدارات F5 BIG-IP 16.1.x الأقدم من 16.1.2.2، وإصدارات 15.1.x الأقدم من 15.1.5.1، وإصدارات 14.1.x الأقدم من 14.1.4.6، وإصدارات 13.1.x الأقدم من 13.1.5، وجميع إصدارات 12.1.x و11.6.x، قد تتجاوز الطلبات غير المعلنة مصادقة iControl REST. استخدم أمر cURL التالي في سطر واحد لاختبار هذه...
cve2018-13379-nmap-script
cve2018-13379-nmap-script CVE-2018-13379 Script per Nmap NSE Una limitazione impropria di un percorso verso una directory ristretta "Path Traversal" in Fortinet FortiOS 6.0.0 a 6.0.4, 5.6.3 a 5.6.7 nel portale web SSL VPN consente a un attaccante non autenticato di scaricare file di sistema trami...
CVE-2023-27163-AND-Mailtrail-v0.53
Exploit Automático Resumo O seguinte exploit abusa da vulnerabilidade de SSRF no Requests Baskets v1.2.1 para encaminhar a aplicação interna que executa em 127.0.0.1:80 para a aplicação externa em /pwned. Uma vez que a aplicação Mailtrail v0.53 tenha sido encaminhada, ele executará um comando de...
WP-DOS-Exploit-CVE-2018-6389
WP-DOS-Exploit-CVE-2018-6389 Questo è un exploit dell'attacco DoS di Wordpress CVE 2018-6389. UTILIZZO python3 wp-dosCVE-2018-6389.py domain threads Esempio python3 wp-dosCVE-2018-6389.py http://example.com 1000...
CVE-2022-24112_POC
POC POC raccolti CVE-2022-24112 Per l'ambiente del campo di tiro 春秋云境:CVE-2022-24112, ho modificato due POC, modificando leggermente i POC dei due autori M4xSec e twseptian per adattarli al campo di tiro 春秋云境: 春秋云境:CVE-2022-24112: Apache Apisix è un gateway API cloud-native per microservizi della...