CVE-2026-49975-POC

CVE-2026-49975 — HTTP/2 Bomb PoC CVE-2026-49975 का प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट, जो HTTP/2 सर्वर इम्प्लीमेंटेशन में एक रिमोट डिनायल-ऑफ-सर्विस कमजोरी है। क्वांग लुओंग कैलिफ़ सिक्योरिटी रिसर्च द्वारा खोजा गया, 2 जून 2026 को प्रकाशित किया गया। केवल अधिकृत सुरक्षा परीक्षण के लिए। उन बुनियादी ढाँचों ...

Bropper

BROPPER أداة استغلال Blind ROP تلقائية بلغة بايثون ملخص BROP Blind ROP هي تقنية اكتشفها Andrew Bittau من جامعة ستانفورد في عام 2014. الورقة الأصلية الشرائح معظم الخوادم مثل nginx و Apache و MySQL تقوم بعمل fork ثم تتواصل مع العميل. وهذا يعني أن الكناري والعناوين تبقى كما هي حتى في وجود ASLR و PIE...

cookiescanner

cookiescanner أداة للتحقق من علم الكوكي cookie flag في مواقع متعددة. مقدمة أداة تم إنشاؤها لتسهيل عملية التحقق من علم الكوكي عند تحليل خوادم ويب متعددة. إذا كنت تريد معرفة لماذا قد تكون هذه الأداة مفيدة؟ https://www.owasp.org/index.php/SecureFlag https://www.owasp.org/index.php/HttpOnly...

Phishruffus

Phishruffus - बुद्धिमान खतरा शिकारी और फिशिंग सर्वर Phishruffus एक उपकरण है जो DNS सर्वरों और इंटरनेट खतरों की पहचान के लिए डिज़ाइन किया गया है जिनका उपयोग फिशिंग की अवैध प्रथा के लिए किया जाता है। https://lab.insightsecurity.com.br/phishruffus-intelligent-threat-hunter-and-phishing-servers/...

heimdall_webserver

انتباه، هذا المشروع في نسخة تجريبية، هناك العديد من الأخطاء والمشاكل، إذا كنت ترغب في مساعدة المشروع استخدم هذا في معمل وليس في بيئتك الحقيقية. لا، لم يتم تنفيذ https بعد، سيأتي في الترقية القادمة هيمدال إنها أداة لإدارة الحزم الضعيفة في خوادم nix الخاصة بك، بطريقة مركزية قبل كل شيء root@kitploit...

Emby Server - Authentication Bypass

Emby Server is a user-installable home media server which stores and organizes a user's media files of virtually any format and makes them available for viewing at home and abroad on a broad range of client devices. This vulnerability may allow administrative access to an Emby Server system,...

Gogs <= 0.13.3 - Remote Code Execution

Gogs self-hosted Git service versions 0.13.3 and earlier contain a critical symlink bypass vulnerability that circumvents the fix for CVE-2024-55947. Authenticated users can exploit improper symbolic link handling in the PutContents API to overwrite files outside the repository by committing a...

LocalAI - Partial Local File Read

A vulnerability in the /models/apply endpoint of mudler/localai versions 2.15.0 allows for Server-Side Request Forgery SSRF and partial Local File Inclusion LFI. The endpoint supports both https-// and file-// schemes, where the latter can lead to LFI. However, the output is limited due to the...

slowloris

slowloris.py - Simple slowloris in Python What is Slowloris? Slowloris is basically an HTTP Denial of Service attack that affects threaded servers. It works like this: 1. We start making lots of HTTP requests. 2. We send headers periodically every 15 seconds to keep the connections open. 3. We...

fierce

Fierce Fierce is a DNS reconnaissance tool for locating non-contiguous IP space. Useful links: Domain Name System DNS Domain Names - Concepts and Facilities Domain Names - Implementation and Specification Threat Analysis of the Domain Name System DNS Name Servers NS State of Authority Record SOA...

festin

FestIN the powered S3 bucket finder and content discover What is FestIn Why Festin Install Using Python Using Docker Full options Usage Configure search domains Concurrency HTTP Crawling configuration Manage results Proxy usage DNS Options Full Text Support Running as a service or watching mode...

getaltname

GSAN - Get Subject Alternative Names GSAN is a tool that can extract Subject Alternative Names SAN found in SSL Certificates directly from https servers which can provide you with DNS names subdomains or virtual servers. It doesn't rely on Certificate Transparency logs, it connects directly to th...

impacket

Impacket Copyright Fortra, LLC and its affiliated companies. All rights reserved. Impacket was originally created by SecureAuth, and now maintained by Fortra's Core Security. Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level...

pwnspoof

pwnSpoof from Punk Security generates realistic spoofed log files for common web servers with customisable attack scenarios. Every log bundle is unique and completely customisable, making it perfect for generating CTF scenarios and for training serials. Can you find the attacker session and build...

pivotnacci

pivotnacci Pivot into the internal network by deploying HTTP agents. Pivotnacci allows you to create a socks server which communicates with HTTP agents. The architecture looks like the following: This tool was inspired by the great reGeorg. However, it includes some improvements: Support for...

domain_analyzer

Domain Analyzer v0.8.3 What Domain analyzer is a security analysis tool that automatically discovers and reports information about a given domain. Its main purpose is to analyze domains in an unattended way. It has many crazy features, such as getting more domains from DNS zones, automatic nmap,...

wreckuests

यह क्या है? Wreckuests एक स्क्रिप्ट है, जो आपको HTTP-flood GET/POST के साथ DDoS हमले चलाने की अनुमति देती है। यह शुद्ध Python में लिखी गई है और "bots" के रूप में प्रॉक्सी-सर्वरों का उपयोग करती है। बेशक, यह स्क्रिप्ट सार्वभौमिक नहीं है और आप एक ही माउस क्लिक से Pentagon/NSA/जो भी वेबसाइट को नहीं...

pyfiscan

pyfiscan About Pyfiscan is free web-application vulnerability and version scanner and can be used to locate out-dated versions of common web-applications in Linux-servers. Example use case is hosting-providers keeping eye on their users installations to keep up with security-updates. Fingerprints...

cbrutekrag

cbrutekrag Penetration tests on SSH servers using dictionary attacks. Written in C. brute krag means "brute force" in afrikáans Disclaimer This tool is for ethical testing purpose only. cbrutekrag and its owners can't be held responsible for misuse by users. Users have to act as permitted by loca...

jarm

JARM Please read the initial JARM blog post for more information. JARM is an active Transport Layer Security TLS server fingerprinting tool. JARM fingerprints can be used to: Quickly verify that all servers in a group have the same TLS configuration. Group disparate servers on the internet by...