waf-checker

Una potente aplicación web para probar qué tan bien protege tu Cortafuegos de Aplicaciones Web WAF contra vectores de ataque comunes. → waf-checker.com ← Características Pruebas de seguridad 19+ categorías de ataque listas para usar: Inyección SQL, XSS, Path Traversal, Inyección de Comandos, SSRF...

Cerberus

Cerberus A powerful vulnerability scanner. Subdomain enumeration uses aioDNS with asyncio for asynchronous fast scanning. It covers the target's full asset scope for batch vulnerability scanning, middleware information collection, automatic proxy IP collection, and automatically uses proxy IPs to...

nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

OpenDoor

OpenDoor — Plataforma de reconocimiento web y descubrimiento de directorios de OWASP OpenDoor es una plataforma CLI de Recon de código abierto para reconocimiento web autorizado, descubrimiento de directorios, enumeración de subdominios, huellas digitales, detección de WAF, sondeo de evasión,...

waf-checker

WAF Checker Este proyecto te ayuda a comprobar qué tan bien protege tu Web Application Firewall WAF tu producto contra ataques web comunes. Se puede ejecutar como un Cloudflare Worker con una interfaz web interactiva incorporada o como una herramienta CLI independiente de Node.js. Características...

gotestwaf

GoTestWAF GoTestWAF is a tool for API and OWASP attack simulation that supports a wide range of API protocols including REST, GraphQL, gRPC, SOAP, XMLRPC, and others. It was designed to evaluate web application security solutions, such as API security proxies, Web Application Firewalls, IPS, API...

WhatWaf

WhatWaf? WhatWaf 是一个高级防火墙检测工具，其目标是让你了解“有 WAF 吗？”的概念。WhatWaf 通过检测 Web 应用程序上的防火墙，并尝试针对该防火墙检测一个（或两个）绕过方法，在指定的目标上工作。 附注：任何不是 WhatWaf 最新版本的问题将会被关闭，恕不讨论 另一附注：我没有太多时间来更新这个项目了，更新将会很慢 有用的链接 通过 XMR 挖矿支持 whatwaf 创建一个 issue 阅读 手册 WhatWaf 的 特性 安装 WhatWaf 概念验证 演示视频 概念验证图片 参与进来 在 上关注我 在 上关注我 可检测的防火墙...

Recon

👑 Recon 侦察 👑 在漏洞赏金和渗透测试中，识别目标的过程可能非常耗时。考虑到这一点，我决定创建自己的侦察脚本，包含我在此步骤中最常用的所有工具。 该框架的所有构建均基于 @ofjaaah 和 @Jhaddix 的方法论。这些人是我开始信息安全职业生涯的最大灵感来源，我建议你看看他们的内容，你会学到很多！ 用法 💡 基本用法 root@kitploit: ❯ ./recon.sh -d domain.com -w /path/to/your/wordlist.txt 安静模式 root@kitploit: ❯ ./recon.sh -d domain.com -w...

AutoSQLi

AutoSQLi，脚本小子黑网站的新方式 功能 保存系统 - 有一个完整的保存系统，即使电脑崩溃也能恢复。 - 科技很酷 搜索引擎搜索 - 从命令行（单个搜索引擎搜索）：是 - 从文件：否 - 从交互式向导：是 WAF检测 - 感谢 Ekultek，WhatWaf 现在有了 JSON 输出功能。 - 所以基本完成 : - 更新：WhatWaf 已完全与 AutoSQLi 兼容。Sqlmap 是下一个重要步骤 SQL注入映射 - 我会看看是否有某种 sqlmap API，因为我这次不想用 execute（: - Sqlmap 很酷 报告生成：是 提供 Rest API：否...

cdncheck

cdncheck Características • Instalación • Uso • Unirse a Discord root@kitploit: cdncheck es una herramienta para identificar la tecnología asociada con direcciones de red dns / ip. Características Detección de CDN , CLOUD y WAF Fácil de usar como biblioteca Proveedores fácilmente extensibles Sopor...

dfir-malware-investigation

Laboratorio de Investigación de Malware DFIR – Spring4Shell CVE-2022-22965 Un proyecto integral de Forense Digital y Respuesta a Incidentes DFIR que simula, detecta e investiga la vulnerabilidad crítica Spring4Shell CVE-2022-22965. Este proyecto demuestra el ciclo de vida completo de la respuesta...

Exploit for CVE-2025-32429

CVE-2025-32429 Vulnerability Checker A Python-based vulnerabi...

CVE-2024-41661

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-50094. Reason: This candidate is a duplicate of CVE-2023-50094. Notes: All CVE users should reference CVE-2023-50094 instead of this candidate...

CVE-2024-41661

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-50094. Reason: This candidate is a duplicate of CVE-2023-50094. Notes: All CVE users should reference CVE-2023-50094 instead of this candidate...

CVE-2024-41661

...

CVE-2024-41661

CVE-2024-41661 is rejected; use CVE-2023-50094 instead.

CVE-2022-39957 Response body bypass in OWASP ModSecurity Core Rule Set via a specialy crafted charset in the HTTP Accept header

The OWASP ModSecurity Core Rule Set CRS is affected by a response body bypass. A client can issue an HTTP Accept header field containing an optional "charset" parameter in order to receive the response in an encoded form. Depending on the "charset", this response can not be decoded by the web...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

This work includes testing and improvement tools for C...

Vxscan

This is a Python-based comprehensive scanning tool called Vxscan. It is used for sensitive file detection, WAF/CDN identification, port scanning, fingerprint/service identification, operating system identification, weak password detection, POC scanning, SQL injection, and other functions. The too...

Wprecon - A Vulnerability Recognition Tool In CMS Wordpress, 100% Developed In Go

Hello! Welcome. Wprecon Wordpress Recon, is a vulnerability recognition tool in CMS Wordpress, 100% developed in Go. Notice: Why is the project out of updates these days ?! What happens is that I am doing the vulnerability scanner. Branch Dev Compile and Install Features Random Agent Detection WA...