second-order

Second Order 扫描Web应用程序以寻找二次子域名劫持漏洞，通过爬取应用并收集符合特定规则或以特定方式响应的URL（及其他数据）。 安装 从二进制文件安装 从发布页面下载预构建的二进制文件并解压。 从源码安装 推荐使用Go 1.17版本。 root@kitploit: go install -v github.com/mhmdiaa/second-order@latest Docker root@kitploit: docker pull mhmdiaa/second-order 命令行选项 root@kitploit: -target string 目标URL -config...

Atlas

Atlas - Sugeridor rápido de tamper de SQLMap v1.0 Atlas es una herramienta de código abierto que puede sugerir tampers de sqlmap para evitar WAF/IDS/IPS, la herramienta se basa en el código de estado devuelto. Pantalla Instalación root@kitploit: $ git clone https://github.com/m4ll0k/Atlas.git atl...

scscanner_sh

scscanner - 大规模状态码扫描器 scscanner 是一个从列表中读取网站状态码响应的工具。该工具能够仅过滤特定状态码，并将结果保存到文件中。 功能 依赖极少。该工具只需安装 curl 多进程。使用多进程扫描速度更快 过滤状态码。如果你只想从列表中获取特定状态码（例如：200），该工具将帮助你 用法 root@kitploit: ➜ scscannersh git:main ✗ bash scscanner.sh - -t int -o scscanner.sh -h Options: -l File contain lists of domain. -t Adjust...

domhttpx

domhttpx is a google search engine dorker with HTTP toolkit built with python, can make it easier for you to find many URLs/IPs at once with fast time. List Install Usage Flags Basic Usage One Keyword Multiple Keyword Extract Title Page Extract Title Page from Real Path Extract Status Code Extrac...

Zin

Versione 1.0 😎 Zin 😎 Un injector di payload per bug bounty scritto in go Caratteristiche Inietta più payload in tutti i parametri Inietta un singolo payload in tutti i parametri Salva le risposte in una cartella di output Mostra il codice di stato e la lunghezza della risposta Può cercare pattern...

Admin-Panel_Finder

Admin Panel Finder Un'estensione di Burp Suite che enumera infrastrutture e interfacce di amministrazione delle applicazioni. Riferimenti OWASP: Classificazione : Web Application Security Testing 02-Configuration and Deployment Management Testing OTG v4 : OWASP OTG-CONFIG-005 WSTG : WSTG-CONF-05...

CVE-2024-40725

Ferramenta de Detecção de Contrabando de Requisição HTTP Este repositório contém uma ferramenta baseada em Python para detectar vulnerabilidades de Contrabando de Requisição HTTP, visando especificamente a CVE-2024-40725. A ferramenta tenta explorar essa vulnerabilidade no Apache HTTP Server...

CVE-2024-9466

CVE-2024-9466 CVE-2024-9466 Prova de Conceito PoC Descrição Este script verifica a vulnerabilidade CVE-2024-9466 acrescentando /home/userSpace/devices/debug.txt a uma lista de URLs ou endereços IP de destino. Ele determina se o alvo é vulnerável com base no código de status da resposta HTTP e se ...

EUVD-2026-66609

Automatisch reveals whether an address is registered through the response to its forgot-password request. The controller at packages/backend/src/controllers/internal/api/v1/users/forgot-password.js looks the address up and chains a not-found throw onto the query, so an address with no account...

CVE-2026-81033

Automatisch (through v0.15.0 ) exposes a user enumeration vulnerability through its forgot-password endpoint. The controller at packages/backend/src/controllers/internal/api/v1/users/forgot-password.js returns a not-found status for unregistered addresses but a no-content status for registered on...

-cve-2025-55182

CVE-2025-55182 Script de detecção em lote / URL única image Uma ferramenta eficiente de detecção de vulnerabilidades CVE-2025-55182, suporta detecção rápida de URL única e detecção em lote de URLs, gera automaticamente relatórios detalhados em Excel e também produz arquivos de log completos. 🔥...

PT-2026-82221

Name of the Vulnerable Software and Affected Versions Automatisch affected versions not specified Description An information disclosure issue exists in the forgot-password functionality. The endpoint '/api/v1/users/forgot-password' allows an unauthenticated user to determine if a specific address...

CVE-2024-57778

CVE-2024-57778 Descrizione : Un problema in Orbe ONetView Roteador Onet-1200 consente a un attaccante remoto di aumentare i propri privilegi tramite la risposta del server, portando il codice di stato da 500 a 200. Versioni : Individuato in Orbe ONetView Roteador Onet-1200 Orbe 1680210096, ma...

postfix: buffer over-read via malformed enhanced status code

A flaw was found in Postfix. This issue occurs when processing enhanced status codes, specifically an enhanced status code that lacks text following the third number. Depending on the configuration of the server, this allows a remote attacker to cause a buffer over-read of only 1 byte, leading to...

Important: Red Hat Security Advisory: postfix security update

An update for postfix is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

Important: Red Hat Security Advisory: postfix security update

An update for postfix is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

postfix: buffer over-read via malformed enhanced status code

A flaw was found in Postfix. This issue occurs when processing enhanced status codes, specifically an enhanced status code that lacks text following the third number. Depending on the configuration of the server, this allows a remote attacker to cause a buffer over-read of only 1 byte, leading to...

Important: Red Hat Security Advisory: postfix security update

An update for postfix is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

Important: Red Hat Security Advisory: postfix security update

An update for postfix is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

postfix: buffer over-read via malformed enhanced status code

A flaw was found in Postfix. This issue occurs when processing enhanced status codes, specifically an enhanced status code that lacks text following the third number. Depending on the configuration of the server, this allows a remote attacker to cause a buffer over-read of only 1 byte, leading to...