bscan

:mag: an asynchronous target enumeration tool :magright: Synopsis bscan is a command-line utility to perform active information gathering and service enumeration. At its core, bscan asynchronously spawns processes of well-known scanning utilities, repurposing scan results into highlighted console...

scscanner_sh

scscanner - Escáner Masivo de Códigos de Estado scscanner es una herramienta para leer el código de estado de respuesta HTTP de sitios web a partir de listas. Esta herramienta tiene la capacidad de filtrar solo códigos de estado específicos y guardar el resultado en un archivo. Características...

domhttpx

domhttpx is a google search engine dorker with HTTP toolkit built with python, can make it easier for you to find many URLs/IPs at once with fast time. List Install Usage Flags Basic Usage One Keyword Multiple Keyword Extract Title Page Extract Title Page from Real Path Extract Status Code Extrac...

chaos

chaos chaos is an 'origin' IP scanner developed by RST in collaboration with ChatGPT. It is a niche utility with an intended audience of mostly penetration testers and bug hunters. An origin-IP is a term-of-art expression describing the final public IP destination for websites that are publicly...

rsdl

rsdl Escáner de Subdominios v.2 Escaneo de subdominios con método Ping y comprobación de estados HTTP/S. Banderas| Valor| Descripción ---|---|--- --hostname| example.com| Dominio para escanear. --output| | Registra la salida con el nombre del dominio. --list| /tmp/lists/example.txt| Lista de...

Horn3t

Horn3t 🐝 - Mejor Reconocimiento de Subdominios Reconoce tus objetivos a velocidad vertiginosa Mejora tu productividad centrándote en sitios de aspecto interesante Enumera sitios críticos inmediatamente Pica a tu objetivo Horn3t es tu herramienta número 1 para explorar subdominios visualmente...

Atlas

Atlas - Sugeridor rápido de tamper de SQLMap v1.0 Atlas es una herramienta de código abierto que puede sugerir tampers de sqlmap para evitar WAF/IDS/IPS, la herramienta se basa en el código de estado devuelto. Pantalla Instalación $ git clone https://github.com/m4ll0k/Atlas.git atlas $ cd atlas $...

Zin

Version 1.0 😎 Zin 😎 A Payload Injector for bugbounties written in go Features Inject multiple payloads into all parameters Inject single payloads into all parameters Saves responses into output folder Displays Status Code & Response Length Can grep for patterns in the response Really fast Easy to...

Admin-Panel_Finder

Admin Panel Finder Una extensión de Burp Suite que enumera interfaces de administración de infraestructura y aplicaciones. Referencias OWASP: Clasificación : Pruebas de Seguridad en Aplicaciones Web 02-Pruebas de Gestión de Configuración y Despliegue OTG v4 : OWASP OTG-CONFIG-005 WSTG :...

nuubi

Nuubi Tools Scanner, Recon. Details Options: -h/--help | Show help message and exit Arguments: -b/--banner | Banner grabing of target ip address -s/--subnet | Subnetlookup of target -c/--cms | Cms detect with headers -d/--dns | Dnslookup of target domain -e/--extract | Extract links from target...

forbidden

Forbidden Bypass códigos de estado de respuesta HTTP 4xx y más. La herramienta está basada en Python Requests, PycURL y HTTP Client. Probado en Kali Linux v2024.2 64-bit. Hecho con fines educativos. ¡Espero que sea útil! Planes futuros: Añadir la opción silent para suprimir la salida de consola...

Parsero

¿Qué es Parsero? Parsero es un script gratuito escrito en Python que lee el archivo Robots.txt de un servidor web y examina las entradas Disallow. Las entradas Disallow le indican a los motores de búsqueda qué directorios o archivos alojados en un servidor web no deben ser indexados. Por ejemplo,...

Zeebsploit

¿ESTE PROYECTO SE DETENDRÁ O SE ACTUALIZARÁ?...

rustbuster

rustbuster A Comprehensive Web Fuzzer and Content Discovery Tool Introduction Check the blog post: Introducing Rustbuster — A Comprehensive Web Fuzzer and Content Discovery Tool Download You can download prebuilt binaries from here. Installation installrustbuster echo "Installing latest version o...

SEH utnserver Pro/ProMAX/INU-100 20.1.22 - File Exposure

A vulnerability was identified in utnserver Pro, utnserver ProMAX, and INU-100 version 20.1.22 and earlier, impacting the file handling functions. This flaw results in authenticated file disclosure, granting unauthorized access to sensitive files and directories. Although authentication is...

CData API Server < 23.4.8844 - Path Traversal

A path traversal vulnerability exists in the Java version of CData API Server 23.4.8844 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative access to the application. id: CVE-2024-31848 info: name: CData API Server...

BlueSnap Payment Gateway for WooCommerce <=3.4.0 - IPN Authorization Bypass

BlueSnap Payment Gateway for WooCommerce = 3.4.0 validates its unauthenticated IPN webhook using WooCommerce's client-IP geolocation, which trusts spoofed forwarding headers instead of requiring a webhook signature. Version 3.4.1 replaces the IP check with HMAC-SHA256 security headers. This...

Jenkins build-metrics 1.3 - Cross-Site Scripting

Jenkins build-metrics 1.3 is vulnerable to a reflected cross-site scripting vulnerability that allows attackers to inject arbitrary HTML and JavaScript into the web pages the plugin provides. id: CVE-2019-10475 info: name: Jenkins build-metrics 1.3 - Cross-Site Scripting author: madrobot severity...

Webmin < 1.920 - Authenticated Remote Code Execution

rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialisevariable makes an eval call. NOTE: the WebminServersIndex documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it must...

ESAFENET CDG - Arbitrary File Download

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request. id: CVE-2019-9632 info: name: ESAFENET CDG - Arbitrary File Download author: pdteam severity: hi...