92235 matches found
Sql-injection-scanner
Sql-injection-scanner Developing a security scanning tool that...
RF SDR Discovery
Detect software-defined radio USB devices and optionally run a quick spectrum sweep with rtlpower when rtl-sdr tools are installed. !/usr/bin/env python3 -- coding: utf-8 -- """Detect RTL-SDR dongles and run a quick RF power sweep when tools are available.""" from future import annotations import...
WiFi Client Enumerator
Passively enumerate wireless clients on a monitor-mode interface by observing probe requests, association frames, and data traffic. !/usr/bin/env python3 -- coding: utf-8 -- """Enumerate 802.11 wireless clients from probe, association, and data frames.""" from future import annotations from typin...
WiFi Probe Request Scanner
Capture 802.11 probe requests on a monitor-mode interface to reveal SSID names including hidden networks and client MAC addresses. !/usr/bin/env python3 -- coding: utf-8 -- """Sniff 802.11 probe requests to discover SSIDs and probing clients.""" from future import annotations from typing import...
WiFi Beacon Scanner
Capture 802.11 beacon frames on a monitor-mode interface and list visible wireless networks SSID and BSSID. !/usr/bin/env python3 -- coding: utf-8 -- """Sniff 802.11 beacon frames on a monitor-mode interface.""" from future import annotations from typing import Dict from kittysploit import class...
Bluetooth LE Scanner
Discover nearby BLE devices using passive/active advertisement scanning. !/usr/bin/env python3 -- coding: utf-8 -- """Discover nearby Bluetooth Low Energy BLE devices.""" from future import annotations import asyncio from typing import Dict from kittysploit import class ModuleAuxiliary: info =...
AD honeytoken hunt (lastLogon oracle)
Flags probable AD honeytokens/decoys via empty auth history lastLogon=0, logonCount=0 and feeds Guardian. !/usr/bin/env python3 -- coding: utf-8 -- """ Repérage de honeytokens AD via l'oracle lastLogon historique comportemental. Préférer le module SMB SAMR, port 445 : scanner/smb/honeytokenhunt C...
Bluetooth Classic Scanner
Discover nearby classic Bluetooth devices using hcitool or bluetoothctl inquiry scans. !/usr/bin/env python3 -- coding: utf-8 -- """Discover nearby classic Bluetooth devices via inquiry scan.""" from future import annotations import re import shutil import subprocess from typing import Dict from...
CVE-2026-56876: Improper Limitation of a Pathname to a Restricted Directory
extract-zip does not validate symlink targets when extracting zip archives. When processing a malicious zip file containing a symlink with a relative path like '../../../../etc/passwd', extract-zip will extract the symlink without validation, allowing it to point outside the extraction directory...
CVE-2026-57667: Improper Neutralization of Special Elements used in an SQL Command
Sales Representative SQL Injection in Groundhogg = 4.5 versions...
CVE-2026-57664: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Unauthenticated Sensitive Data Exposure in Bopo – WooCommerce Product Bundle Builder = 1.1.6 versions...
CVE-2026-57662: Improper Neutralization of Special Elements used in an SQL Command
Contributor SQL Injection in Contest Gallery = 30.0.0 versions...
CVE-2026-57660: Missing Authorization
Unauthenticated Broken Access Control in Booking and Rental Manager = 2.7.1 versions...
CVE-2026-57658: Unrestricted Upload of File with Dangerous Type
Administrator Arbitrary File Upload in TemplateSpare = 4.2.0 versions...
CVE-2026-57654: Missing Authorization
Affiliate Broken Access Control in Affiliates Manager = 2.9.49 versions...
CVE-2026-57651: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in Ghost Kit = 3.6.0 versions...
CVE-2026-57646: Authorization Bypass Through User-Controlled Key
Subscriber Insecure Direct Object References IDOR in Majestic Support = 1.1.7 versions...
CVE-2026-57634: Authorization Bypass Through User-Controlled Key
Contributor Insecure Direct Object References IDOR in PPWP = 1.9.19 versions...