Penetration_Testing_POC

PenetrationTestingPOC 搜集有关渗透测试中用到的POC、脚本、工具、文章等姿势分享，作为笔记吧，欢迎补充。 请注意所有工具是否有后门或者其他异常行为，建议均在虚拟环境操作。 PenetrationTestingPOC 请善用搜索Ctrl+F查找 IOT Device&Mobile Phone Web APP 提权辅助相关 PC tools-小工具集合 文章/书籍/教程相关 说明 请善用搜索Ctrl+F查找 IOT Device&Mobile Phone 天翼创维awifi路由器存在多处未授权访问漏洞 华为WS331a产品管理页面存在CSRF漏洞...

rengine

reNgine: The Ultimate Web Reconnaissance & Vulnerability Scanner 🚀 reNgine 2.2.0 is released! reNgine 2.2.0 comes with bounty hub where you can sync and import your hackerone programs, in app notifications, chaos as subdomain enumeration tool, ability to upload multiple nuclei and gf patterns,...

NagaScan

NagaScan NagaScan is a distributed passive vulnerability scanner for Web application...

paskto

Paskto - Passive Web Scanner Paskto will passively scan the web using the Common Crawl internet index either by downloading the indexes on request or parsing data from your local system. URLs are then processed through Nikto and known URL lists to identify interesting content. Hash signatures are...

wstg

OWASP Web Security Testing Guide Welcome to the official repository for the Open Worldwide Application Security Project® OWASP® Web Security Testing Guide WSTG. The WSTG is a comprehensive guide to testing the security of web applications and web services. Created by the collaborative efforts of...

zaproxy

The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...

xssmap

2020.08.20 actualización Todavía hay muchos errores, así que me tomaré el tiempo para corregirlos pronto, así que por favor manténgase actualizado. XSSMAP Detecta vulnerabilidades XSS en aplicaciones web El uso imita a sqlmap, y si conoces sqlmap, ¡puedes manejar xssmap fácilmente! 中文介绍 Capturas ...

Passhunt

Passhunt Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords. Screenshot Pre-requisites Make sure you have installed the following: - Python 3.0 or later. - pip3 sudo apt-get...

CVE-2021-31589

Insignias Licencia MIT Instalación Instalar cve-2021-31589 con npm npm install cve-2021-31589 -g Uso Ejemplo para una sola URL cve-2021-31589 -u http://example.com Uso Ejemplo para una lista de URLs cve-2021-31589 -l urls.txt -o out.txt Capturas de pantalla Menú de ayuda Obtener todos los element...

vajra

Un framework automatizado de hacking web para aplicaciones web Tabla de contenido Acerca de Vajra ¿Qué es Vajra? Características clave Qué hace Vajra Instalación Ejecución con docker-compose Herramientas usadas por Vajra Contribuciones Licencia Planes futuros/En desarrollo Créditos Descargo de...

AuthMatrix

AuthMatrix v0.8.2 AuthMatrix is an extension to Burp Suite that provides a simple way to test authorization in web applications and web services. With AuthMatrix, testers focus on thoroughly defining tables of users, roles, and requests for their specific target application upfront. These tables...

shannon

!NOTE Cyber verification for Anthropic and OpenAI models: complete your provider's cyber verification program to prevent model failures and refusals during cyber workloads. Shannon is an autonomous, AI pentester for web applications and APIs. It analyzes your source code, identifies attack paths,...

Kyocera TASKalfa printer - Path Traversal

CCRX has a Path Traversal vulnerability. Path Traversal is an attack on web applications. By manipulating the value of the file path, an attacker can gain access to the file system, including source code and critical system settings. id: CVE-2023-34259 info: name: Kyocera TASKalfa printer - Path...

Twisted - Open Redirect & XSS

Twisted is an event-based framework for internet applications, supporting Python 3.6+. The Twisted web framework's redirectTo function is vulnerable to reflected XSS if an attacker can control the redirect URL. This template tests for an open redirect and XSS vulnerability in the URL parameter...

ligolo-iwa

Ligolo-IWA Un agente JavaScript de Ligolo-ng que funciona en navegadores basados en Chrome/Chromium aprovechando Isolated Web Applications. Consulte la documentación de Ligolo-IWA para una configuración rápida: Ligolo-IWA Configuración/Inicio rápido Y no olvide leer la documentación de Ligolo-ng:...

The vulnerability of the platform for creating individual web applications in CRM involves an incorrect restriction on the path to the catalog, allowing attackers to delete arbitrary files.

The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...

The vulnerability of the platform for creating individual web applications in CRM. The leader involved in this issue faces unlimited distribution of resources, allowing attackers to compromise the accessibility of protected information.

The vulnerability of the platform for creating individual web applications in CRM involves unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...

pbtk

pbtk - Reverse engineering Protobuf apps Protobuf is a serialization format developed by Google and used in an increasing number of Android, web, desktop and more applications. It consists of a language for declaring data structures , which is then compiled to code or another kind of structure...

CVE-2006-2842

Badges Licencia MIT Instalación Instalar cve-2006-2842 con npm npm install cve-2006-2842 -g Uso Ejemplo para una sola URL cve-2006-2842 -u http://example.com Uso Ejemplo para una lista de URLs cve-2006-2842 -l urls.txt -o out.txt Capturas de pantalla Menú de ayuda Obtener todos los elementos 👋 Ho...

OWASP-VWAD

OWASP-VWAD 2024-10-26 ⚠️ Este repositorio se está cerrando gradualmente. El trabajo futuro debe realizarse a través de www-project-vulnerable-web-applications-directory El Proyecto de Directorio de Aplicaciones Web Vulnerables de OWASP VWAD,...