CVE-2026-63292

⚠️ CVE-2026-63292 — Vulnérabilité de sécurité du serveur HTTP Apache 🔐 --- 🔎 Aperçu CVE-2026-63292 est une vulnérabilité de dépassement de tampon basé sur la pile affectant le module modvhostalias du serveur HTTP Apache. Le problème peut être déclenché dans des configurations serveur spécifiques...

ssllabs.rb

ssllabs.rb Gem Ruby pour les tests de serveur Qualys SSL Labs. Notes sur l'API Tous les objets de l'API décrits dans la documentation de l'API SSL Labs sont exposés comme objets Ruby natifs. Les propriétés sont accessibles avec des noms en « underscored », c.-à-d. que endpoint.hoststarttime...

exchange-scanner

ماسح Microsoft Exchange Server الوصف تقوم هذه الأداة بفحص العديد من الخدمات العامة الشائعة على مضيف هدف لاكتشاف Microsoft Exchange Server وتحديد بصمة إصدار برامجه إن أمكن. وللقيام بذلك، تستخدم التقنيات التالية: تحديد بصمة Outlook Web Access OWA عبر ترويسات الاستجابة ومحتويات صفحة تسجيل الدخول...

CVE-2024-54330

CVE-2024-54330 Hurrakify bfdibc85r04ky96cie05dfzjjgigz...

CVE-2018-12533

CVE-2018-12533 شكرًا لـ https://www.lucifaer.com/2018/12/05/RF-14310%EF%BC%88CVE-2018-12533%EF%BC%89%E5%88%86%E6%9E%90/...

Sync_Breeze_Enterprise_10_6_24_-DOS

SyncBreezeEnterprise10624-DOS Exploit Title: Sync Breeze Enterprise 10.6.24 - Denial Of Service Vulnerability Date: 03-09-2018 Exploit Author: Ege Balcı Vendor Homepage: http://www.syncbreeze.com Software Link: http://www.syncbreeze.com/setups/syncbreezeentsetupv10.6.24.exe Version: 10.6.24 Teste...

santa

Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...

gitrob

Gitrob: Putting the Open Source in OSINT Gitrob is a tool to help find potentially sensitive files pushed to public repositories on Github. Gitrob will clone repositories belonging to a user or organization down to a configurable depth and iterate through the commit history and flag files that...

CVE-2026-11106-DNS-Zone-Transfer-AXFR-Information-Disclosure

CVE-2026-11106 – Divulgation d'informations par transfert de zone DNS AXFR Code du programme serveur DNS Python + attaque dnsserversim.py - Simulated DNS server allowing AXFR from dnslib import DNSRecord, QTYPE, RR, TXT, A import socketserver, socket class DNSHandlersocketserver.BaseRequestHandle...

Kage

Kage Kage ka-geh is a tool inspired by AhMyth designed for Metasploit RPC Server to interact with meterpreter sessions and generate payloads. For now it only supports windows/meterpreter & android/meterpreter. Getting Started Please follow these instructions to get a copy of Kage running on your...

Responder

⛔ DEPRECATED Active at https://github.com/lgandx/Responder Responder.py LLMNR/NBT-NS/mDNS Poisoner Author: Laurent Gaffie http://www.spiderlabs.com Intro Responder an LLMNR, NBT-NS and MDNS poisoner. It will answer to specific NBT-NS NetBIOS Name Service queries based on their name suffix see:...

CVE-2026-21010-VoIP-SIP-Digest-Authentication-Replay

CVE-2026-21010 – Rejeu de l'authentification Digest SIP VoIP Code du programme simulateur SIP Python sipserversim.py - SIP server that accepts replayed authenticated requests from flask import Flask, request app = Flaskname Simulated nonce storage: doesn't track used nonces usednonces = set...

purpleteam-server-scanner

purpleteam-server-scanner Server scanning component of purpleteam...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue. Hackable HTTP proxy to simulate server failure scenarios , systems resiliency testing and unexpected network conditions , built for node.js. It was mainly...

dnscat2-powershell

dnscat2 is a DNS covert channel tool by @iagox86 Ron Bowes which is used to transfer data over DNS requests. This is a powershell version of the dnscat2 C client. Click here for a blog post that gives a more detailed breakdown of the purpose of this script, and how to use it. To use this script,...

IDArling

Warning This project is no longer under active development and the more featured and up-to-date fork is probably something more interesting for new comers. Also, IDA has announced an official support for collaborative reverse engineering session and one could also wait for this. Overview IDArling...

nginxpwner

Nginxpwner نغينكس‌باونر هي أداة بسيطة للبحث عن الأخطاء في التهيئة والثغرات الشائعة في إن‌جينكس. التثبيت: cd /opt git clone https://github.com/stark0de/nginxpwner cd nginxpwner chmod +x install.sh ./install.sh التثبيت باستخدام دوكر git clone https://github.com/stark0de/nginxpwner cd nginxpwner sud...

Explosive-As-Hell-MCS-Qualifer-Web-500

CVE-2025-55182 — RCE sur les Composants Serveur React | Writeup CTF Catégorie : Web Exploitation | Difficulté : Medium | Vulnérabilité : Exécution de Code à Distance → Élévation de Privilèges SUID TL;DR Le point de terminaison du Composant Serveur React est vulnérable à CVE-2025-55182 RCE →...

flyphish

Flyphish Flyphish est un playbook Ansible permettant aux consultants en cybersécurité de déployer un serveur de phishing dans le cloud pour des évaluations de sécurité. Le playbook installe et configure Gophish , Postfix et OpenDKIM sur une machine virtuelle dans le cloud. De plus, pour des raiso...

DDoS-PHP-Script

DDoS PHP Script Script to perform a DDoS UDP flood by PHP Usage From web server visit the page: http://127.0.0.1/ddos.php?pass=apple&host=TARGET&port=PORT&time=SECONDS&packet=NUMBER&bytes=NUMBER From terminal: php ./ddos.php host=TARGET port=PORT time=SECONDS packet=NUMBER bytes=NUMBER Parameters...