tulpar

Tulpar 是一款开源 Web 漏洞扫描器，旨在实现 Web 渗透测试的自动化。Tulpar 具有以下功能。 SQL 注入（GET 方法） XSS（GET 方法） 爬虫 电子邮件泄露 信用卡信息泄露 Whois 命令注入（GET 方法） 目录遍历（GET 方法） 文件包含（GET 方法） 服务器信息 技术信息 X-Content-Type 检查 X-XSS-Protection 检查 TCP 端口扫描 robots.txt 检查 URL 编码 证书信息 可用方法 网络威胁情报 IP2Location 文件输入可用性检查 安装： git clone...

BWASP

BWASP BWASP（BoB Web Application Security Project）是一个开源分析工具，用于支持Web漏洞手工分析黑客。 BWASP工具主要通过漏洞分析提供预测信息，而无需进行攻击。 BWASP支持自动分析和手动分析。 BWASP项目支持： 自动查找攻击向量（例如：SQL注入、跨站脚本） 检测网站技术 Log4J漏洞扫描（部分支持Java语言） HTTP REST API 指南结果 测试Payload选项（攻击测试） Getting started pip3 install -r requirements.txt python3 start.py...

CVE-2020-7246

Configuración del laboratorio: a git clone https://github.com/pswalia2u/CVE-2020-7246.git b cd CVE-2020-7246 && docker build -t cve-assignment:ine . && docker run -it -p 80:80 cve-assignment:ine c El servidor web debería ser accesible en http://127.0.0.1/index.php d Cuenta preconfigurada: correo...

dismap

🌀 Dismap - Asset discovery and identification tool 中文 Readme Dismap positioning is an asset discovery and identification tool. It can quickly identify protocols and fingerprint information such as web/tcp/udp, locate asset types, and is suitable for internal and external networks. It assists red...

Stable Diffusion Webui 1.10.0 - Open Redirect

An open redirect vulnerability exists in Stable-Diffusion-Webui 1.10.0, where the file parameter in the /file= endpoint can be manipulated to redirect users to malicious websites. This could facilitate phishing attacks by tricking users into visiting attacker-controlled URLs. id: CVE-2024-11044...

WordPress Jannah Theme <5.4.4 - Cross-Site Scripting

WordPress Jannah theme before 5.4.4 contains a reflected cross-site scripting vulnerability. It does not properly sanitize the options JSON parameter in its tiegetuserweather AJAX action before outputting it back in the page. id: CVE-2021-24364 info: name: WordPress Jannah Theme 5.4.4 - Cross-Sit...

Episerver 7 - Blind XML External Entity Injection

Episerver 7 patch 4 and earlier contains an XML external entity XXE caused by processing crafted DTD in XML requests involving util/xmlrpc/Handler.ashx, letting remote attackers read arbitrary files, exploit requires sending malicious XML payloads. id: CVE-2017-17762 info: name: Episerver 7 - Bli...

Webkul QloApps 1.6.0 - Cross-site Scripting

An unauthenticated Cross-Site Scripting XSS vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via POST controller parameter. id: CVE-2023-36287 info: name: Webkul QloApps 1.6.0 - Cross-site Scripting author: theamanrawa...

Employee Records System 1.0 - Unauthenticated File Upload RCE

Employee Records System version 1.0 contains an unrestricted file upload vulnerability in uploadID.php that allows remote unauthenticated attackers to upload arbitrary PHP files and achieve remote code execution. id: CVE-2021-4462 info: name: Employee Records System 1.0 - Unauthenticated File...

Hongjing e-HR 2020 - SQL Injection

A vulnerability, which was classified as critical, has been found in Hongjing e-HR 2020. Affected by this issue is some unknown functionality of the file /wselfservice/oauthservlet/%2e./.%2e/general/inform/org/loadhistroyorgtree of the component Login Interface. The manipulation of the argument...

LibreChat <= 0.7.9 - HTML Injection via Accept-Language Header

danny-avila/librechat 0.7.9 contains a stored XSS caused by improper sanitization of the Accept-Language header, letting logged-in users inject arbitrary HTML into the html lang= tag, exploit requires user to be logged in. id: CVE-2025-8848 info: name: LibreChat marker"...

VulnLab

VulnLab 由 Yavuzlar 开发的一个 Web 漏洞实验项目。 Logo 漏洞列表 SQL 注入 跨站脚本攻击 XSS 命令注入 不安全的直接对象引用 IDOR 跨站请求伪造 CSRF XML 外部实体注入 XXE 不安全反序列化 文件上传 文件包含 认证失效 竞态条件 服务端模板注入 SSTI API 攻击 验证码绕过 路径遍历 安装 使用 DockerHub 安装 1. 如果你想在 DockerHub 上安装，只需输入以下命令。 docker run --name vulnlab -d -p 1337:80 yavuzlar/vulnlab:latest 2. 访问...

wapiti

Wapiti - Escáner de vulnerabilidades web .. image:: https://img.shields.io/pypi/v/wapiti3?label=PyPI&logo=PyPI&logoColor=white&color=blue :alt: PyPI version :target: https://pypi.python.org/pypi/wapiti3 .. image:: https://img.shields.io/pypi/pyversions/wapiti3 :alt: Supported Python versions...

CVE-2024-57727

CVE-2024-57727 CVE-2024-57727 python poc.py http://target python poc.py https://192.168.32.130 + https://192.168.32.130 is vulnerable blog: https://rustlang.rs/posts/simple-help/...

rapidscan

🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...

exploit-writing-for-oswe

Escritura de Exploits para OSWE Antecedentes Qué Este repositorio contiene una lista de fragmentos de código snippets y consejos útiles relacionados con la escritura de scripts de exploits en los laboratorios y el examen de certificación OSWE. Algunos ejemplos aquí pueden ir en contra de ciertas...

WAVLINK WN530H4 live_api.cgi - Command Injection

A remote command-line injection vulnerability in the /cgi-bin/liveapi.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execute arbitrary Linux commands as root without authentication. id: CVE-2020-12124 info: name: WAVLINK WN530H4 liveapi.cgi - Command Injection author...

APT-Individual-Combat-Guide

Guía de Combate Individual APT Muchas personas creen que es difícil lanzar un ataque APT porque no saben cómo ocurren. De hecho, con el desarrollo de herramientas automatizadas, lanzar un ataque APT es fácil. Switch Switch to English Antecedentes Este repositorio contiene el código y los comandos...

CVE-2012-1823-exploit-for-https-user-password-web

El archivo CVE-2012-1823 es un exploit uso : python3 CVE-2012-1823.py El archivo CVE-2012-1823,CVE-2021-2291.py comprueba si el sitio es vulnerable a CVE-2012-1823 o CVE-2021-2291 uso : python3 CVE-2012-1823,CVE-2021-2291.py comandos: whoami cd ls probado en Kali Linux...

Open-Worldwide-Application-Security-Project-OWASP-

Open-Worldwide-Application-Security-Project-OWASP- Automated Web Vulnerability Assessment of DVWA using OWASP ZAP to identify and analyze critical security flaws like Remote Code Execution CVE-2012-1823...