URL_CHECKER

Controllo URL Phishing Uno strumento leggero basato sul web che rileva se un URL è probabilmente phishing o sicuro utilizzando un approccio ibrido di Machine Learning Random Forest/SVM e analisi euristica basata su regole. Realizzato a scopo educativo e per sperimentazione in cybersecurity e IA...

xsssniper

XSSSNIPER xsssniper is an handy xss discovery tool with mass scanning functionalities. Usage: root@kitploit: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA post data to use...

CVE-2024-2997

CVE-2024-2997 Scanner Panoramica CVE-2024-2997 Scanner è uno scanner di vulnerabilità avanzato progettato per rilevare la vulnerabilità di command injection nelle applicazioni web. Questo strumento aiuta i professionisti della sicurezza a identificare potenziali rischi di sicurezza nelle loro...

Olyx

Olyx Un'applicazione Android moderna per l'analisi completa della sicurezza degli URL, che combina più API di rilevamento delle minacce con un rilevamento avanzato dello spoofing dei domini per proteggere gli utenti da siti web dannosi. Schermate Caratteristiche Analisi di Sicurezza Multi-API...

CVE-2022-42889-POC

CVE-2022-42889-POC Eine einfache Demo-Anwendung, die zeigt, wie die Sicherheitslücke CVE-2022-42889 ausgenutzt werden kann. Nutzt OOB Out of Band-Dienste, um die Präfixe dns und url zu demonstrieren. JavaDocs für commons-text interpolation commons-text JavaDocs Beispiel-Interpolationen...

RTF-Cleaner

RTF-Cleaner De-offuscatore RTF per documenti CVE-2017-0199 per trovare URL staticamente. Usa questo strumento per trovare staticamente URL in documenti RTF offuscati. Utilizzo: .\rtfCleanerUniversal.ps1 percorso-del-file Esempio: .\rtfCleanerUniversal.ps1...

EUVD-2026-65697

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, the cleanfounduri function in emlparser/parser.py validates potential URL strings before unescaping HTML entities used for colon, slash,...

CVE-2026-55618

eml_parser is a Python module for parsing .eml files. Prior to 3.0.2 , the clean_found_uri function in parser.py validates potential URL strings before unescaping HTML entities for colon, slash, or period characters. As a result, valid encoded URLs and their hostnames are rejected and omitted fro...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

CVE-2017-8809_MediaWiki_RFD

CVE-2017-8809 - RFD Reflected File Download für MediaWiki Ein entfernter Benutzer kann eine speziell präparierte URL für die Zielseite erstellen, die, wenn sie vom Zielbenutzer geladen wird, das Skript 'api.php' dazu bringt, eine Datei mit Shell-Befehlen herunterzuladen CVE-2017-8809. Die Datei...

urlbuster

██╗ ██╗██████╗ ██╗ ██████╗ ██╗ ██╗███████╗████████╗███████╗██████╗ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║██╔════╝╚══██╔══╝██╔════╝██╔══██╗ ██║ ██║██████╔╝██║ ██████╔╝██║ ██║███████╗ ██║ █████╗ ██████╔╝ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║╚════██║ ██║ ██╔══╝ ██╔══██╗ ╚██████╔╝██║...

CVE-2024-56331

CVE-2024-56331 Uptime-Kuma : Inclusione Locale di File LFI tramite Gestione Impropria degli URL nel monitor Real-Browser Riepilogo Una Vulnerabilità di Gestione Impropria degli URL permette a un attaccante di accedere a file locali sensibili sul server sfruttando il protocollo file:///. Questa...

plution

plution Prototype pollution scanner using headless chrome What this is Plution is a convenient way to scan at scale for pages that are vulnerable to client side prototype pollution via a URL payload. In the default configuration, it will use a hardcoded payload that can detect 11 of the cases...

ingressnightmare-detection-poc

Strumento di Rilevamento IngressNightmare Panoramica Questo strumento fornisce una capacità di rilevamento non intrusiva per la catena di vulnerabilità IngressNightmare CVE-2025-1974 che colpisce Ingress NGINX Controller. Nello specifico sfrutta il vettore di iniezione tramite l'annotazione...

EUVD-2026-39800

Echo: Encoded slash %2F bypasses route-level protection and exposes static files...

SealSecurity_Exam

SealSecurityExam Prototype Pollution ist eine JavaScript-Sicherheitslücke, die es einem Angreifer ermöglicht, beliebige Eigenschaften zu globalen Objektprototypen hinzuzufügen, die dann von benutzerdefinierten Objekten geerbt werden können. Eine Prototype-Pollution-Quelle ist jede...

utcp-gql SSRF: CVE-2026-44661 fix not applied to the GraphQL and WebSocket plugins

Summary The fix for CVE-2026-44661 commit 5b16e43 added the ensuresecureurl / issecureurl helpers and wired them into the three HTTP-family plugins, but it did not reach the GraphQL or WebSocket plugins. The GraphQL plugin utcp-gql still uses the startswith prefix check that the fix explicitly...

CVE-2026-70551

A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data URL...

EUVD-2026-65518

A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data URL...

CVE-2026-70551

CVE-2026-70551 is a Server-Side Request Forgery (SSRF) vulnerability in JFrog Artifactory via VCS remote download. A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data URL , redirecting the server's request to an attacker-controlle...