24 matches found
CanaryTokenScanner
CanaryToken / HoneyToken 扫描器 检测 Microsoft Office 文档 和 PDF 中的可疑 URL（包括 CanaryTokens）。 支持的格式： Office Open XML: .docx, .xlsx, .pptx .pdf .zip （通用归档） 为什么存在这个工具 CanaryTokens 和 HoneyTokens（以及其他跟踪或恶意 URL）通常嵌入文档中，用于在文件被打开或外部资源被获取时发出信号。此工具仅执行静态检查 ：它读取文件内容并查找嵌入的 URL，而无需在 Office/Acrobat 中打开文档 ，也不发起任何网络请求。...
cve-2019-16097
cve-2019-16097 1.在urls.txt中添加你要检测的url 2.python3环境下运行cve-2019-16097脚本 python3 cve-2019-16097.py 3.批量检测完成后再results中查看成功写入账号的url。...
CVE-2021-37580
CVE-2021-37580 支持单独和批量验证CVE-2021-37580漏洞 单个url检测： 文件批量验证：...
Malicious-URL-Detection-Open-Source
Malicious-URL-Detection-Open-Source 我们收集了现有的用于恶意 URL 检测的开源代码。...
CVE-2022-22954-POC
VMware-CVE-2022-22954-POC 声明:该POC仅供于学习专用，禁止一切违法操作，如果进行恶意破坏与本人无关！！！ —、批量检测脚本： 用法： root@kitploit: python vm-2022-22954-POC.py url.txt 二、单个url检测： root@kitploit: python vm-2022-22954-POC.py http://xx.xx.xx.xx 脚本执行成功，若存在漏洞则会在本地生成一个succ.txt文档并存储其中...
CVE-2024-0012-poc
更多PoC见 https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X 代码执行时因网络环境不同可能会遇到超时情况，自行调整timeout时间即可 批量检测： python poc.py -f url.txt 单个检测： python poc.py -u https://your-ip...
CVE-2025-30208
CVE-2025-30208 Este repositorio contiene un script Bash que automatiza el proceso de detección y escaneo de CVE-2025-30208 a partir de una lista de URLs. El script integra notificaciones de Discord para realizar un seguimiento del estado de ejecución. Características Ejecuta detectvite.py para...
CVE-2024-0352
徽章 许可 MIT 安装 1. 安装 Python3 和 pip 说明在此（如果你不会这个，那你其实不应该使用这个工具） 通过 pip 安装 root@kitploit: pip install CVE-2024-0352 运行以下命令检查 CVE-2024-0352 -h 配置 2. 我们集成了 Telegram API，以接收漏洞检测的即时通知。 Telegram 通知 root@kitploit: CVE-2024-0352 --chatid 打开你的 Telegram，搜索 @CappricioSecuritiesToolsbot 并点击开始 用法 3. 该工具有多种使用场景。...
CVE-2026-27779
Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting public URLs, allowing spoofed canonical URL generation...
EUVD-2026-41637
Gitea versions before 1.25.5 accept malformed or injected forwarded-proto values when detecting public URLs, allowing spoofed canonical URL generation...
flowintel 安全漏洞
Flowintel is an open-source security analyst case and task management platform developed by flowintel. Versions of FlowIntel 3.3.0 and earlier contain security vulnerabilities. These vulnerabilities stem from the external reference URL detection function in the app/case/task.py file, which has a...
A Graph-Attentive LSTM Model for Malicious URL Detection
Malicious URLs pose significant security risks as they facilitate phishing attacks, distribute malware, and empower attackers to deface websites. Blacklist detection methods fail to identify new or obfuscated URLs because they depend on pre-existing patterns. This work presents a hybrid deep...
URL2Graph++: Unified Semantic-Structural-Character Learning for Malicious URL Detection
Malicious URL detection remains a major challenge in cybersecurity, primarily due to two factors: 1 the exponential growth of the Internet has led to an immense diversity of URLs, making generalized detection increasingly difficult; and 2 attackers are increasingly employing sophisticated...
From past to Present: a Survey of Malicious URL Detection Techniques, Datasets and Code Repositories
Malicious URLs persistently threaten the cybersecurity ecosystem, by either deceiving users into divulging private data or distributing harmful payloads to infiltrate host systems. Gaining timely insights into the current state of this ongoing battle holds significant importance. However, existin...
CanaryTokenScanner - Script Designed To Proactively Identify Canary Tokens Within Microsoft Office Documents And Acrobat Reader PDF (docx, xlsx, pptx, pdf)
Detecting Canary Tokens and Suspicious URLs inMicrosoft Office, Acrobat Reader PDF and Zip Files Introduction In the dynamic realm of cybersecurity, vigilance and proactive defense are key. Malicious actors often leverage Microsoft Office files and Zip archives, embedding covert URLs or macros to...
Exploit for Path Traversal in Stagil Stagil_Navigation
POC script for the vulnerability exposure in the Jira plugin S...
Exploit for Code Injection in Vmware Identity_Manager
VMware-CVE-2022-22954-POC Note: This POC is for educatio...
openSUSE Security Update : nextcloud (openSUSE-2019-640)
This update for nextcloud to version 13.0.5 fixes the following issues : Security issues fixed : - CVE-2018-3780: Fixed a missing sanitization of search results for an autocomplete field that could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names,...
atlanticcoastalarm.com XSS vulnerability
Open Bug Bounty ID: OBB-701603 Description| Value ---|--- Affected Website:| atlanticcoastalarm.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...