CVE-2025-55182-zoomeye

Zoomeye Next.js RCE スキャナ 作成者: im-ezboy Zoomeye検索を使用したNext.js RCE CVE-2025-55182 のスキャナです。Zoomeyeクエリでターゲットを見つけ、提供されたエクスプロイトペイロードでテストします。 特徴 デフォルトで2つのZoomeye dorkを使用します: http.header="Vary: RSC, Next-Router-State-Tree" vul.cve="CVE-2025-55182" 並列スキャン（デフォルト20スレッド）とリクエストタイムアウト制御。 脆弱なターゲットを...

CVE-2021-22986

CVE-2021-22986 これは、大量のIPアドレスの中から、このCVEに対して脆弱なIPかどうかを判定するシンプルなスクリプトです。 大量のIPアドレスを見つけるには、shodanまたはzoomeye cliを使用してください。 すべてのIPを "testips.txt" というファイル名で保存してください。...

Mass-exploit-CVE-2022-29464

ニャーニャーニャー！ WSO2 Carbon Server のPython PoCに基づいた大量エクスプロイトです CVE-2022-29464 認証前RCEバグ CVE-2022-29464. ニャーニャーニャー？必要なもの？ Python3 Shodan Zoomeye 頭脳 このツールは何ですか？ これは、第三者によってPythonで書かれたPoCに基づいた、CVE-2022-29464の大量自動スキャンエクスプロイトです。 Pyファイルは利用可能で読み取り可能です。また、エンコードされた文字列を含まないbashスクリプトも参照してください。...

mihari

mihari A query aggregator for OSINT based threat hunting. Mihari can aggregate multiple searches across multiple services in a single rule & persist findings in a database. Mihari supports the following services by default. Censys CIRCL passive DNS / passive SSL crt.sh dnstwister Fofa GreyNoise...

Joomla3.7-SQLi-CVE-2017-8917

概要 ZoomEye APIを使用してJoomla 3.7のSQLインジェクション（CVE-2017-8917）をバッチスキャンするためのシンプルなスクリプトです。 使用方法 git clone https://github.com/brianwrf/Joomla3.7-SQLi-CVE-2017-8917.git cd Joomla3.7-SQLi-CVE-2017-8917 python CVE-2017-8917.py 実行!!! 参照 https://blog.sucuri.net/2017/05/sql-injection-vulnerability-joomla-3-7.ht...

mec

mec MassExploitConsole Intended for mass exploiting Follow thewiki to get started Features Easy-to-use CLI UI Execute adpated exploits with process-level concurrency Built-in exploits automated Hide your IP using proxychains4 and proxypool ZoomEye host scan 10 threads Simple Baidu crawler...

cloudbunny

CloudBunny CloudBunny는 WAF를 프록시 또는 보호로 사용하는 원본 서버를 캡처하는 도구입니다. 도구에 대한 자세한 내용은 여기에서 확인할 수 있습니다: https://tinyurl.com/y8p48wb3 작동 방식 이 도구에서는 도메인 정보를 검색하기 위해 세 가지 검색 엔진Shodan, Censys, Zoomeye을 사용합니다. 도구를 사용하려면 API 키가 필요하며, 다음 링크에서 얻을 수 있습니다: root@kitploit: Shodan - https://account.shodan.io/ Censys -...

melting-cobalt

melting-cobalt 👀 A tool to hunt/mine for Cobalt Strike beacons and "reduce" their beacon configuration for later indexing. Hunts can either be expansive and internet wide using services like SecurityTrails, Shodan, or ZoomEye or a list of IP's. Getting started 1. Install melting-cobalt 2. Configu...

Exploit for Deserialization of Untrusted Data in Facebook React

Zoomeye Next.js RCE Scanner Author: im-ezboy Scanner for Nex...

PT-2024-9206

Name of the Vulnerable Software and Affected Versions: Apache Airflow versions before 2.10.3 Description: The issue is related to the exposure of sensitive configuration variables in task logs. This could allow unauthorized users to access critical data, potentially compromising the security of t...

PT-2024-7225 · Pfsense · Pfsense

Name of the Vulnerable Software and Affected Versions: pfsense version 2.5.2 Description: A cross-site scripting XSS vulnerability in pfsense allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $pconfig variable at "interfaces groups edit.php". This...

Exploit for Command Injection in Telesquare Tlr-2005Ksh_Firmware

🚀 CVE-2024-29269 Exploit This repository contains an exploit...

Exploit for Unrestricted Upload of File with Dangerous Type in Hashthemes Hash_Form

🚀 HashForm Exploit Script This script demonstrates the exploi...

Exploit for Command Injection in Telesquare Tlr-2005Ksh_Firmware

🚀 CVE-2024-29269 Exploit This repository contains an exploit...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity

Cyberspace Mapping Dork Fofa app="JETBRAINS-TeamCity...

pocsuite3

This is a Python-based framework for remote vulnerability testing and proof-of-concept development, called pocsuite3. It is developed by the Knownsec 404 Team and is designed for penetration testers and security researchers. The framework comes with a powerful proof-of-concept engine and various...

pocsuite3

This is an open-sourced remote vulnerability testing and proof-of-concept development framework developed by the Knownsec 404 Team. It comes with a powerful proof-of-concept engine, many nice features for the ultimate penetration testers and security researchers. The framework supports various...

Exploit for OS Command Injection in Wago Compact_Controller_100_Firmware

CVE-2023-1698 WAGO Remote Exploit Tool Description This sc...

PT-2023-4877 · Jscape · Jscape Mft Server

Name of the Vulnerable Software and Affected Versions: JSCAPE MFT Server versions prior to 2023.1.9 Description: The issue is related to unsafe deserialization in the JSCAPE MFT Server, which allows an attacker to execute arbitrary Java code, including OS commands, via its management interface...

Exploit for Deserialization of Untrusted Data in Spip

CVE-2023-27372 SPIP -v -o report.txt 🔍 Reconnaissance M...