xcrawl3r

xcrawl3r xcrawl3r 是一个命令行工具，用于递归爬取网页以获取 URL。它通过主动遍历网站——跟踪网页中的链接并解析文件（包括站点地图和 robots.txt）——来发现所有 URL。 与 xurlfind3r 不同，xcrawl3r 不直接与目标交互，而是通过实时爬取页面来直接与目标交互。这种主动方式使其能够发现可能被隐藏或未索引的 URL，从而提供网站导航流程和内容分布的完整视图。这使得 xcrawl3r 成为安全研究人员、IT 专业人员以及任何希望深入了解网站相关 URL 的用户的强大工具。 资源 功能 安装 安装发布版二进制文件（未安装 Go） 从源码安装（已安装...

endext

EndExt EndExt is a .go tool for extracting all the possible endpoints from the JS files Idea When you crawll all the JS files from waybackruls for example, or even collecting the JS files urls from your target website's home source page .. If the website was using API system and you wanna look fo...

xurlfind3r

xurlfind3r xurlfind3r 是一个命令行工具，旨在以简单高效的方式发现给定域名的 URL。它通过从多个被动来源收集信息来工作，这意味着它不会直接与目标交互，而是收集已公开可用的数据。这使得 xurlfind3r 成为安全研究人员、IT 专业人士以及任何希望深入了解域名关联 URL 的人的强大工具。 目录 特性 安装 安装发行版二进制文件（未安装 Go） 从源码安装（已安装 Go） go install ... go build ... 开发版 通过 Docker 安装（已安装 Docker） 安装后配置 使用方法 贡献 许可 特性 从多个在线被动来源获取...

waybackurls

waybackurls 从标准输入接受以换行符分隔的域名，从 Wayback Machine 获取 .domain 的已知 URL，并输出到标准输出。 使用示例： root@kitploit: ▶ cat domains.txt | waybackurls urls 安装： root@kitploit: ▶ go install github.com/tomnomnom/waybackurls@latest 致谢 本工具受 @mhmdiaa 的 waybackurls.py 脚本启发。 感谢他/她提供的绝妙创意！...

NucleiFuzzer

NucleiFuzzer = Nuclei + Paramspider + waybackurls + gauplus + hakrawler + katana + Fuzzing Templates Overview NucleiFuzzer is an advanced automation tool designed to streamline and optimize web application security testing by integrating a suite of powerful URL discovery and vulnerability scannin...

fuzzdb

FuzzDB was created to increase the likelihood of finding application security vulnerabilities through dynamic application security testing. It's the first and most comprehensive open dictionary of fault injection patterns, predictable resource locations, and regex for matching server responses...

waymore

关于 - v8.9 waymore 的设计理念是从 Wayback Machine（以及更多来源）中挖掘出比现有工具更多的链接。 👉 waymore 与其他工具的最大区别在于，它还能够 下载存档的响应数据 （来自 Wayback Machine 和 URLScan），以便你可以从中搜索更多链接、开发者注释、额外参数等。 👉 此外，其他工具目前无法处理来源现行的速率限制，常常在结果不完整时就停止运行，并且不会告知你结果不完整。 任何做过漏洞赏金的人很可能都用过 @TomNomNoms 开发的出色的 waybackurls 工具。该工具从 web.archive.org 获取 URL，并从...

dorkScanner

DORK SCANNER A typical search engine dork scanner that scrapes search engines with queries that you provide in order to find vulnerable URLs. Introduction Dorking is a technique used by newsrooms, investigative organisations, security auditors as well as tech savvy criminals to query various sear...

domhttpx

domhttpx 是一个使用 Python 构建的 谷歌搜索引擎搜索器 及 HTTP 工具包，可以让你快速同时查找大量 URL/IP。 目录 安装 使用 参数 基本用法 单个关键词 多个关键词 提取页面标题 从真实路径提取页面标题 提取状态码 从真实路径提取状态码 提取 Web 服务器 运行示例 帮助与错误报告 致谢 安装 适用于 Windows、Linux 和 Mac root@kitploit: git clone https://github.com/naufalardhani/domhttpx.git cd domhttpx pip3 install -r...

csp-log4j

csp-log4j Trova gli URL di report CSP e verifica se sono vulnerabili a log4j Installazione root@kitploit: go install github.com/randomrobbiebf/csp-log4j/ Esecuzione root@kitploit: csp-log4j -input file.txt -collab something.oastify.com...

DRUPAL-CORE-2026-008

The Media module comes with support for oEmbed. The oEmbed specification contains two discovery mechanisms, via providers.json and via URL discovery. The URL discovery code could be leveraged to trick Drupal into making server-side requests to any URL...

PT-2026-50609

Name of the Vulnerable Software and Affected Versions Drupal core affected versions not specified Description The Media module supports oEmbed, which utilizes two discovery mechanisms: providers.json and URL discovery. The URL discovery code can be exploited to trick the system into making...

Drupal core - Moderately critical - Server-side request forgery - SA-CORE-2026-008

The Media module comes with support for oEmbed. The oEmbed specification contains two discovery mechanisms, via providers.json and via URL discovery. The URL discovery code could be leveraged to trick Drupal into making server-side requests to any URL...

CVE-2026-25523

Magento-lts is a long-term support alternative to Magento Community Edition CE. Prior to version 20.16.1, the admin url can be discovered without prior knowledge of it's location by exploiting the X-Original-Url header on some configurations. This issue has been patched in version 20.16.1...

CVE-2026-25523

Magento-lts is a long-term support alternative to Magento Community Edition CE. Prior to version 20.16.1, the admin url can be discovered without prior knowledge of it's location by exploiting the X-Original-Url header on some configurations. This issue has been patched in version 20.16.1...

CVE-2024-25146

Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 18, and older unsupported versions returns with different responses depending on whether a site does not exist or if the user does not have permission to access the...

Fedora 35 : php-pear-CAS (2022-76b3530ac2)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-76b3530ac2 advisory. Changes in version 1.6.0 Bug Fixes: Introduce required servicename constructor argument to fix service hostname discovery exploitation vulnerability...

CVE-2020-36473

CVE-2020-36473 affects UCWeb UC browser versions 12.12.3.1219–12.12.3.1226. The root cause is the use of plaintext HTTP, enabling man-in-the-middle attackers to discover the URLs visited by a user. All cited sources (NVD, Red Hat, CNNVD) confirm the affected product/version range and the resultin...

CVE-2021-26845

Information Exposure vulnerability in Hitachi ABB Power Grids eSOMS allows unauthorized user to gain access to report data if the URL used to access the report is discovered. This issue affects: Hitachi ABB Power Grids eSOMS 6.0 versions prior to 6.0.4.2.2; 6.1 versions prior to 6.1.4; 6.3 versio...

OpenID library for Ruby: Server-Side Request Forgery

Background A Ruby library for verifying and serving OpenID identities. Description It was discovered that OpenID library for Ruby performed discovery first, and then verification. Impact A remote attacker could possibly change the URL used for discovery and trick the server into connecting to the...