cloudbunny

CloudBunny CloudBunny ist ein Tool, um den Ursprungsserver zu erfassen, der eine WAF als Proxy oder Schutz verwendet. Sie können mehr über das Tool hier lesen: https://tinyurl.com/y8p48wb3 Wie es funktioniert In diesem Tool verwenden wir drei Suchmaschinen, um Domain-Informationen zu suchen:...

Joomla3.7-SQLi-CVE-2017-8917

Zusammenfassung Es ist ein einfaches Skript, um mit der ZoomEye-API Joomla-3.7-SQL-Injection CVE-2017-8917 im Batch zu scannen. Verwendung git clone https://github.com/brianwrf/Joomla3.7-SQLi-CVE-2017-8917.git cd Joomla3.7-SQLi-CVE-2017-8917 python CVE-2017-8917.py Los!!! Referenz...

Mass-exploit-CVE-2022-29464

Miau Miau Miau! Nur ein Massenexploit basierend auf einem Python PoC für WSO2 Carbon Server CVE-2022-29464 Pre-auth RCE-Fehler CVE-2022-29464. Miau Miau Miau? Anforderungen? Python3 Shodan Zoomeye Ein Gehirn Was ist dieses Tool? Dies ist ein Massen-Autoscan-Exploit für CVE-2022-29464 basierend au...

CVE-2021-22986

CVE-2021-22986 यह एक सरल स्क्रिप्ट है जो यह निर्धारित करने के लिए है कि एक बड़े IP पतों के समूह से कोई IP इस CVE के प्रति संवेदनशील है या नहीं। बड़े IP पतों को खोजने के लिए shodan या zoomeye cli का उपयोग करें। सभी IP को "testips.txt" नामक फ़ाइल में सहेजें।...

CVE-2025-55182-zoomeye

Zoomeye Next.js RCE Scanner Autor: im-ezboy Scanner für Next.js RCE CVE-2025-55182 unter Verwendung der Zoomeye-Suche. Findet Ziele mittels Zoomeye-Abfragen und testet sie mit dem bereitgestellten Exploit-Payload. Funktionen Zwei fokussierte Zoomeye-Dorks standardmäßig: http.header="Vary: RSC,...

mec

mec MassExploitConsole Intended for mass exploiting Follow thewiki to get started Features Easy-to-use CLI UI Execute adpated exploits with process-level concurrency Built-in exploits automated Hide your IP using proxychains4 and proxypool ZoomEye host scan 10 threads Simple Baidu crawler...

mihari

mihari A query aggregator for OSINT based threat hunting. Mihari can aggregate multiple searches across multiple services in a single rule & persist findings in a database. Mihari supports the following services by default. Censys CIRCL passive DNS / passive SSL crt.sh dnstwister Fofa GreyNoise...

melting-cobalt

melting-cobalt 👀 A tool to hunt/mine for Cobalt Strike beacons and "reduce" their beacon configuration for later indexing. Hunts can either be expansive and internet wide using services like SecurityTrails, Shodan, or ZoomEye or a list of IP's. Getting started 1. Install melting-cobalt 2. Configu...

Exploit for Deserialization of Untrusted Data in Facebook React

Zoomeye Next.js RCE Scanner Author: im-ezboy Scanner for Nex...

PT-2024-9206

Name of the Vulnerable Software and Affected Versions: Apache Airflow versions before 2.10.3 Description: The issue is related to the exposure of sensitive configuration variables in task logs. This could allow unauthorized users to access critical data, potentially compromising the security of t...

PT-2024-7225 · Pfsense · Pfsense

Name of the Vulnerable Software and Affected Versions: pfsense version 2.5.2 Description: A cross-site scripting XSS vulnerability in pfsense allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $pconfig variable at "interfaces groups edit.php". This...

Exploit for Command Injection in Telesquare Tlr-2005Ksh_Firmware

🚀 CVE-2024-29269 Exploit This repository contains an exploit...

Exploit for Unrestricted Upload of File with Dangerous Type in Hashthemes Hash_Form

🚀 HashForm Exploit Script This script demonstrates the exploi...

Exploit for Command Injection in Telesquare Tlr-2005Ksh_Firmware

🚀 CVE-2024-29269 Exploit This repository contains an exploit...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity

Cyberspace Mapping Dork Fofa app="JETBRAINS-TeamCity...

pocsuite3

This is a Python-based framework for remote vulnerability testing and proof-of-concept development, called pocsuite3. It is developed by the Knownsec 404 Team and is designed for penetration testers and security researchers. The framework comes with a powerful proof-of-concept engine and various...

pocsuite3

This is an open-sourced remote vulnerability testing and proof-of-concept development framework developed by the Knownsec 404 Team. It comes with a powerful proof-of-concept engine, many nice features for the ultimate penetration testers and security researchers. The framework supports various...

Exploit for OS Command Injection in Wago Compact_Controller_100_Firmware

CVE-2023-1698 WAGO Remote Exploit Tool Description This sc...

PT-2023-4877 · Jscape · Jscape Mft Server

Name of the Vulnerable Software and Affected Versions: JSCAPE MFT Server versions prior to 2023.1.9 Description: The issue is related to unsafe deserialization in the JSCAPE MFT Server, which allows an attacker to execute arbitrary Java code, including OS commands, via its management interface...

Exploit for Deserialization of Untrusted Data in Spip

CVE-2023-27372 SPIP -v -o report.txt 🔍 Reconnaissance M...