AppServ Open Project <=2.5.10 - Cross-Site Scripting

AppServ Open Project 2.5.10 and earlier contains a cross-site scripting vulnerability in index.php which allows remote attackers to inject arbitrary web script or HTML via the appservlang parameter. id: CVE-2008-2398 info: name: AppServ Open Project =2.5.11 or apply the necessary security patches...

WordPress MF Gig Calendar <=1.1 - Cross-Site Scripting

WordPress MF Gig Calendar plugin 1.1 and prior contains a reflected cross-site scripting vulnerability. It does not sanitize or escape the id GET parameter before outputting back in the admin dashboard when editing an event. id: CVE-2021-24510 info: name: WordPress MF Gig Calendar =1.2 which...

privacyguides.org

Votre ressource centrale en matière de confidentialité et de sécurité pour vous protéger en ligne. À propos Privacy Guides est un site web à vocation sociale qui fournit des informations pour protéger la sécurité et la confidentialité de vos données. Notre mission est d'informer le public sur la...

Th3inspector

🚀🚀🔥🔥🔥تحقق من أداتي الخاصة الجديدة المحترفة 🔥🔥🔥🔥🚀🚀https://XAttackerV50.Pro أداة Th3inspector 🕵️ Th3inspector 🕵️ أفضل أداة لجمع المعلومات 🔎 ⭐ أداة شاملة لجمع المعلومات ⭐ Th3inspector 🕵️ أفضل أداة لجمع المعلومات 🔎 لقطات الشاشة فيديو !https://assets.kitploit.com/production/public...

trevorc2

trevorc2 TrevorC2 - Command and Control via Legitimate Behavior over HTTP Written by: Dave Kennedy @HackingDave Website: https://www.trustedsec.com Note that this is a very early release - heavy randomization and encryption to be added soon. TrevorC2 is a client/server model for masking command a...

CVE-2022-27414

CVE-2022-27414 - حقن SQL نظام إدارة محتوى موقع الكلية v1.0 - CVE-2022-27414 - حقن SQL رابط CVE https://vulners.com/cve/CVE-2022-27414 PoC أدناه الكود المعرض للثغرة يبدأ من السطر 9 في "cwms\departments\index.php" query"SELECT FROM departmentlist where deleteflag = 0 and status = 1 order by name...

Added-Pentest-Ground-to-vulnerable-websites-for-training

https://vulners.com/cve/CVE-2017-0089 يسمح Uniscribe في Microsoft Windows Vista SP2 وWindows Server 2008 SP2 وR2 SP1 وWindows 7 SP1 للمهاجمين عن بُعد بتنفيذ تعليمات برمجية عشوائية عبر موقع ويب مخصص، ويُعرف أيضًا باسم "Uniscribe Remote Code Execution Vulnerability." تختلف هذه الثغرة عن تلك الموصوف...

EasyScan

EasyScan EasyScan एक Python स्क्रिप्ट है जो किसी दी गई वेबसाइट की HTTP हेडर, DNS रिकॉर्ड और अन्य कॉन्फ़िगरेशन का निरीक्षण करके उसकी सुरक्षा का विश्लेषण करती है। स्क्रिप्ट एक सुरक्षा रिपोर्ट उत्पन्न करती है जिसमें स्कोर, ग्रेड और संभावित कमजोरियों को दूर करने के लिए सिफारिशें शामिल होती हैं।...

URLextractor

مستخرج الروابط جمع المعلومات واستكشاف المواقع الاستخدام: ./extractor http://www.hackthissite.org/ نصائح: Colorex: إضافة ألوان للمخرجات pip install colorex واستخدمها كالتالي ./extractor http://www.hackthissite.org/ | colorex -g "INFO" -r "ALERT" Tldextract: يُستخدم بواسطة وظيفة dnsenumeration pip...

h2t

h2t - HTTP Hardening Tool Description h2t is a simple tool to help sysadmins to hardening their websites. Until now h2t checks the website headers and recommends how to make it better. Dependences Python 3 colorama requests Install $ git clone https://github.com/gildasio/h2t $ cd h2t $ pip instal...

credmap

credmap: The Credential Mapper Credmap is an open source tool that was created to bring awareness to the dangers of credential reuse. It is capable of testing supplied user credentials on several known websites to test if the password has been reused on any of these. An official introductionary...

Email-Extract

Email-Extract - गणना की गई वेबसाइटों से ईमेल निकालने का उपकरण! अपडेट : CLI टूल में परिवर्तित किया गया, dirb द्वारा उत्पन्न सूचियों के अलावा अन्य सूचियों को प्रारूपित करने के लिए प्रारूप विकल्प जोड़ा गया, Email-Extract एक सरल उपकरण है जो मैंने OSINT अनुसंधान के लिए वेबसाइटों से ईमेल निकालने में मद...

unfurl

unfurl Pull out bits of URLs provided on stdin Install If you have Go installed and configured: ▶ go install github.com/tomnomnom/unfurl@latest Otherwise download the latest binary for your platform, extract it and move it to somewhere in your $PATH e.g. /usr/bin/: ▶ wget...

moniorg

moniorg Description By looking through CT logs an attacker can gather a lot of information about organization's infrastructure i.e. internal domains,email addresses in a completly passive manner. moniorg leverage certificate transparency logs to monitor for newly issued domains based on...

CVE-2024-55060

CVE-2024-55060 Rafed CMS 웹사이트 v1.44 - 크로스 사이트 스크립팅 XSS 익스플로잇 제목: Rafed CMS 웹사이트 v1.44 - 크로스 사이트 스크립팅 XSS 날짜: 2024-03-12 CVE: CVE-2024-55060 익스플로잇 작성자: Abdulaziz Saad @b4zb0z 공급업체 홈페이지: https://www.rafed-system.org/ 소프트웨어 링크: N/A 버전: 1.44 테스트 환경: Apache, Linux 취약점 위치: index.php?"XSSPayload에서...

ddos

ndbiaw نص Python لـ DDOS موقع ويب باستخدام طريقة HTTP Flood، موقع ويب عادي يحتاج فقط 5 ثوانٍ ليهبط بالكامل! طريقة الاستخدام: هذا النص يمكن أن يعمل على كل من Windows و Android Termux، فيما يلي الإرشادات: pip install -r requirements.txt python ndbiaw.py مهم!!! هذا النص لأغراض تعليمية فقط. لست مسؤول...

ssrf-king

🔥 ssrf-king 🔥 v1.12 Latest SSRF plugin for burp that Automates SSRF Detection in all of the Request alt text If you are facing any problems or would like a new feature that is not listed below Please create a new issue below in this form Create New Issue Upcoming Features Checklist ✔️ It will soon...

xsssniper

XSSSNIPER xsssniper is an handy xss discovery tool with mass scanning functionalities. Usage: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA post data to use --threads=THREADS...

CVE-2017-0108

مكوّن الرسومات في Windows في Microsoft Office 2007 SP3؛ و2010 SP2؛ وWord Viewer؛ وSkype for Business 2016؛ وLync 2013 SP1؛ وLync 2010؛ وLive Meeting 2007؛ وSilverlight 5؛ وWindows Vista SP2؛ وWindows Server 2008 SP2 وR2 SP1؛ وWindows 7 SP1 يسمح للمهاجمين عن بُعد بتنفيذ تعليمات برمجية عشوائية عبر...

CyberClass

CyberClass يحتوي هذا المستودع على موارد تعليمية لـ Class'Code CyberClass. شجرة الملفات 📦CyberClass ------------------------------------ Root directory ┣ 📂docs --------------------------------------- Website sources ┃ ┣ 📂assets ----------------------------------- General assets logo, favicon, etc ...