84 matches found
Joomla3.7-SQLi-CVE-2017-8917
Summary It is a simple script to use ZoomEye API to batch-scan Joomla 3.7 SQL injection CVE-2017-8917. Usage git clone https://github.com/brianwrf/Joomla3.7-SQLi-CVE-2017-8917.git cd Joomla3.7-SQLi-CVE-2017-8917 python CVE-2017-8917.py Go!!! Reference...
mihari
mihari A query aggregator for OSINT based threat hunting. Mihari can aggregate multiple searches across multiple services in a single rule & persist findings in a database. Mihari supports the following services by default. Censys CIRCL passive DNS / passive SSL crt.sh dnstwister Fofa GreyNoise...
CVE-2025-55182-zoomeye
Zoomeye Next.js RCE Scanner Author: im-ezboy Scanner for Next.js RCE CVE-2025-55182 using Zoomeye search. Finds targets via Zoomeye queries and tests them with the supplied exploit payload. Features Two focused Zoomeye dorks by default: http.header="Vary: RSC, Next-Router-State-Tree"...
cloudbunny
CloudBunny CloudBunnyใฏใWAFใใใญใญใทใพใใฏไฟ่ญทใจใใฆไฝฟ็จใใฆใใใชใชใธใณใตใผใใผใ็นๅฎใใใใผใซใงใใ ใใผใซใฎ่ฉณ็ดฐใฏใใกใใใ่ฆงใใ ใใ: https://tinyurl.com/y8p48wb3 ๅไฝใฎไป็ตใฟ ใใฎใใผใซใงใฏใใใกใคใณๆ ๅ ฑใๆค็ดขใใใใใซ3ใคใฎๆค็ดขใจใณใธใณ๏ผShodanใCensysใZoomEye๏ผใไฝฟ็จใใฆใใพใใใใใใฎใใผใซใไฝฟ็จใใใซใฏAPIใญใผใๅฟ ่ฆใงใใไปฅไธใฎใชใณใฏใใๅๅพใงใใพใใ root@kitploit: Shodan - https://account.shodan.io/ Censys -...
CVE-2021-22986
CVE-2021-22986 This is a simple script to determine whether an IP is vulnerable to this CVE from a mass ip addresses. For finding mass ip addresses use shodan or zoomeye cli. Save all the ips in a file name here "testips.txt"...
Mass-exploit-CVE-2022-29464
ๅตๅตๅต๏ผ ๅชๆฏไธไธชๅบไบ Python PoC ็ๆน้ๅฉ็จๅทฅๅ ท๏ผ้ๅฏน WSO2 Carbon Server CVE-2022-29464 ๆช่ฎค่ฏ RCE ๆผๆด CVE-2022-29464. ๅตๅตๅต๏ผ่ฆๆฑ๏ผ Python3 Shodan Zoomeye ไธไธชๅคง่ ่ฟๆฏไปไนๅทฅๅ ท๏ผ ่ฟๆฏไธไธช้ๅฏน CVE-2022-29464 ็ๆน้่ชๅจๆซๆๅฉ็จๅทฅๅ ท๏ผๅบไบ็ฌฌไธๆน็จ Python ็ผๅ็ PoCใ Py ๆไปถๅฏ็จไธๅฏ่ฏป๏ผๅฆ่ฏทๅ่ง bash ่ๆฌ๏ผๅฎไธๅ ๅซไปปไฝ็ผ็ ๅญ็ฌฆไธฒใ Massexploit ไผไธไผ ไธไธช shell ๅไธไธชๅๅผน shell๏ผๅนถๆๅฐๅบ่ฎฟ้ฎ่ทฏๅพใ็ฎๅใๅฟซ้ใ้ ทใ...
mec
mec MassExploitConsole Intended for mass exploiting Follow thewiki to get started Features Easy-to-use CLI UI Execute adpated exploits with process-level concurrency Built-in exploits automated Hide your IP using proxychains4 and proxypool ZoomEye host scan 10 threads Simple Baidu crawler...
melting-cobalt
melting-cobalt ๐ A tool to hunt/mine for Cobalt Strike beacons and "reduce" their beacon configuration for later indexing. Hunts can either be expansive and internet wide using services like SecurityTrails, Shodan, or ZoomEye or a list of IP's. Getting started 1. Install melting-cobalt 2. Configu...
Exploit for Deserialization of Untrusted Data in Facebook React
Zoomeye Next.js RCE Scanner Author: im-ezboy Scanner for Nex...
PT-2024-9206
Name of the Vulnerable Software and Affected Versions: Apache Airflow versions before 2.10.3 Description: The issue is related to the exposure of sensitive configuration variables in task logs. This could allow unauthorized users to access critical data, potentially compromising the security of t...
PT-2024-7225 ยท Pfsense ยท Pfsense
Name of the Vulnerable Software and Affected Versions: pfsense version 2.5.2 Description: A cross-site scripting XSS vulnerability in pfsense allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $pconfig variable at "interfaces groups edit.php". This...
Exploit for Command Injection in Telesquare Tlr-2005Ksh_Firmware
๐ CVE-2024-29269 Exploit This repository contains an exploit...
Exploit for Unrestricted Upload of File with Dangerous Type in Hashthemes Hash_Form
๐ HashForm Exploit Script This script demonstrates the exploi...
Exploit for Command Injection in Telesquare Tlr-2005Ksh_Firmware
๐ CVE-2024-29269 Exploit This repository contains an exploit...
Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity
Cyberspace Mapping Dork Fofa app="JETBRAINS-TeamCity...
pocsuite3
This is a Python-based framework for remote vulnerability testing and proof-of-concept development, called pocsuite3. It is developed by the Knownsec 404 Team and is designed for penetration testers and security researchers. The framework comes with a powerful proof-of-concept engine and various...
pocsuite3
This is an open-sourced remote vulnerability testing and proof-of-concept development framework developed by the Knownsec 404 Team. It comes with a powerful proof-of-concept engine, many nice features for the ultimate penetration testers and security researchers. The framework supports various...
Exploit for OS Command Injection in Wago Compact_Controller_100_Firmware
CVE-2023-1698 WAGO Remote Exploit Tool Description This sc...
PT-2023-4877 ยท Jscape ยท Jscape Mft Server
Name of the Vulnerable Software and Affected Versions: JSCAPE MFT Server versions prior to 2023.1.9 Description: The issue is related to unsafe deserialization in the JSCAPE MFT Server, which allows an attacker to execute arbitrary Java code, including OS commands, via its management interface...