Airachnid-Burp-Extension

Extensión de Burp para Web Cache Deception Una extensión de Burp para probar aplicaciones en busca de vulnerabilidad al ataque Web Cache Deception. Una vez cargada la extensión, se puede acceder desde la pestaña Target - Sitemap y hacer clic derecho sobre el recurso que se desea probar. Aparecerá...

CVE-2024-30043-XXE

CVE-2024-30043-XXE Credit The impact of the vulnerability is limited at present, but thanks to https://x.com/chudyPB for providing a clever bypass idea. https://x.com/chudyPB...

CVE-2024-22243

CVE-2024-22243 Autor: Sean Pesce Este proyecto contiene una aplicación web de ejemplo que demuestra escenarios explotables para CVE-2024-22243, una vulnerabilidad de análisis de URL en el Spring Framework de Java divulgación oficial aquí. Vulnerabilidad Las versiones afectadas de Spring analizan ...

CVE-2020-5260

CVE-2020-5260 CVE-2020-5260 Demonstration Record When git executes a command like "git clone https://example.com", it requests the protocol "https" to store credentials for the host "example.com", and when the remote side requests authentication, it appends the returned credentials to the outgoin...

Zeus-Scanner

Annuaire des liens utiles Qu'estce que Zeus Les caractéristiques de Zeus Exigences et installation Ubuntu/Debian centOS autre Capturesécran vidéo Demo manuel d'utilisation Comment fonctionne Zeus Fonctionnalité Passant drapeaux sqlmap avec Zeus Informations légales Licence GPL Code de conduite...

bypass-url-parser

Bypass Url Parser Herramienta que prueba MUCHAS derivaciones bypasses de URL para alcanzar una página protegida 40X. Si te preguntas por qué este código es nada más que un envoltorio sucio de curl, aquí está el motivo: La mayoría de las requests de Python realizan codificación/descodificación de...

bypass-url-parser

Bypass Url Parser Tool that tests MANY url bypasses to reach a 40X protected page. If you wonder why this code is nothing but a dirty curl wrapper, here's why: Most of the python requests do url/path/parameter encoding/decoding, and I hate this. If I submit raw chars, I want raw chars to be sent...

unfurl

unfurl Extrae partes de las URLs proporcionadas en stdin Instalación Si tienes Go instalado y configurado: ▶ go install github.com/tomnomnom/unfurl@latest En caso contrario, descarga el último binario para tu plataforma, extráelo y muévelo a algún lugar de tu $PATH p. ej. /usr/bin/: ▶ wget...

cve-2020-5260

cve-2020-5260 一个针对 cve-2020-5260 的 HTTP PoC 端点，可部署到 Heroku 致谢信息 Google Project Zero 的 Felix Wilhelm https://bugs.chromium.org/p/project-zero/issues/detail?id=2021 触发漏洞 git clone 'https://YourHerokuAppNameAndNotMine.herokuapp.com?%0ahost=github.com%0aprotocol=ssh' 将 PoC 部署到 Heroku 点击此按钮即可自动部署到...

CVE-2023-24329-PoC

CVE-2023-24329-PoC A short and inforamtional PoC on CVE-2023-24329: Python urllib parsing flaw. git clone https://github.com/H4R335HR/CVE-2023-24329-PoC cd CVE-2023-24329-PoC python3 CVE-2023-24329-PoC.py Based on research by Yebo Cao - https://pointernull.com/security/python-url-parse-problem.ht...

CVE-2023-24329-Exploit

Intro The URL parsing functions focus on splitting a URL string into its components, or on combining URL components into a URL string. urllib.parse.urlparse Simply urllib.parse used for parsing urls, we can bypass it with adding blanks before the url. This happens in python 3.11.4 and before. PoC...

tryhackme-monikerlink-writeup

TryHackMe: Moniker Link — CVE-2024-21413 Walkthrough A full walkthrough of TryHackMe's "Moniker Link" room: weaponizing CVE-2024-21413, a 2024 Microsoft Outlook vulnerability, to steal a victim's NTLMv2 hash the moment they click a link in a phishing email — no macro, no attachment, no obvious...

poc-proxycommand-vulnerable

RCE via insecure /.ssh/config Use of tokens like %h, %p in ProxyCommand is quite popular to use tunnels and connection proxying using SSH. Vulnerable config host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Note: in my initial assessment I was under the impression that...

Rocky Linux 10.0 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2025_10073)

The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202510073 advisory. firefox: Content-Disposition header ignored when a file is included in an embed or object tag CVE-2025-6430 firefox: Use-after-free in FontFaceSet...

Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2025_10074)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202510074 advisory. firefox: Content-Disposition header ignored when a file is included in an embed or object tag CVE-2025-6430 firefox: Use-after-free in FontFaceSet...

AlmaLinux 9.2 [TuxCare] Security Update: ruby / ruby-default-gems / ruby-devel / ruby-doc / ruby-libs / etc (ALMALINUX9.2:CLSA-2026:1778661102)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778661102 advisory. - A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have...

Rocky Linux 8 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2023_7500)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20237500 advisory. Mozilla: Out-of-bound memory access in WebGL2 blitFramebuffer CVE-2023-6204 Mozilla: Use-after-free in MessagePort::Entangled CVE-2023-6205 Mozilla:...

EUVD-2026-70282

fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority...

CVE-2023-41080

脆弱: http://localhost:8081//secret.html;@example.com 任意のWebサイトにリダイレクトされます（この場合は、https://example.com）。 修正済み: http://localhost:8082//secret.html;@example.com 参照: https://github.com/advisories/GHSA-q3mw-pvr8-9ggc...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124474)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124474 advisory. The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL. RFC 3986 permits IPv6 addresses to ...