hakoriginfinder

hakoriginfinder Tool for discovering the origin host behind a reverse proxy. Useful for bypassing WAFs and other reverse proxies. How does it work? This tool will first make a HTTP request to the hostname/URL that you provide and store the response, then it will make a request to every IP address...

Scythe

Scythe scythe：账户枚举器 账户枚举器的设计目的是简化账户枚举操作， 使其成为安全测试的一部分。该框架提供了轻松创建新模块 （XML 文件）并加快测试过程的能力。 该工具的创建主要基于两个用例： - 能够在一系列网站（例如 社交媒体、博客平台等）上测试一系列电子邮件地址，以找到这些目标 在哪些网站拥有活跃账户。这在社会工程测试中很有用， 当你拥有某公司的电子邮件账户，并希望列出这些用户 将工作邮箱用于哪些第三方网络服务时。 - 能够快速创建自定义测试用例模块，并使用它来枚举 一组活跃账户。可使用已知用户名、电子邮件地址列表 或常见账户名字典。...

fail2ban

/ | | | | / | | |/ /| ' / | ' \ || ,||/|./,|||| v1.1.0.dev1 20??/??/?? Fail2Ban: ban hosts that cause multiple authentication errors Fail2Ban scans log files like /var/log/auth.log and bans IP addresses conducting too many failed login attempts. It does this by updating system firewall rules to...

ph0neutria

ph0neutria ph0neutria malware crawler v1.0.1 https://github.com/phage-nz/ph0neutria Note: This project is not actively maintained. About ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability. This projec...

internalblue

Broadcom chips are used in approximately a billion of devices, such as all iPhones , MacBooks , the Samsung Galaxy S series, the older Google Nexus series, older Thinkpads , Raspberry Pis , various IoT devices, and more. In 2016, Cypress acquired the IoT division of Broadcom. Since then, firmware...

cloudlist

Features • Installation • Usage • Configuration • Running cloudlist • Supported providers • Library • Join Discord Cloudlist is a multi-cloud tool for getting Assets from Cloud Providers. This is intended to be used by the blue team to augment Attack Surface Management efforts by maintaining a...

sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

iovyroot

iovyroot 一个基于 CVE-2015-1805 漏洞 的 root 工具 它支持 32 位和 64 位，但需要绝对内核地址（请参见 offsets.c） PoC 由 idler1984 完成 https://github.com/idl3r/testcode...

mwebfp

LNHG - Massive Web Fingerprinter mwebfp Introduction The "LowNoiseHG LNHG Massive Web Fingerprinter " "mwebfp " from now on was conceived in July 2013 after realizing the usefulness of webserver screenshots to pentesters, during an engagement with large external or internal IP address ranges, as ...

surf

Surf - Escalate your SSRF vulnerabilities on Modern Cloud Environments surf allows you to filter a list of hosts, returning a list of viable SSRF candidates. It does this by sending a HTTP request from your machine to each host, collecting all the hosts that did not respond, and then filtering th...

CVE-2026-33626-Lab

CVE-2026-33626 — LMDeploy 视觉语言 SSRF 实验环境 概述 本仓库重现了 CVE-2026-33626 ，即 LMDeploy 视觉语言图像加载路径中的服务器端请求伪造（SSRF）漏洞。 漏洞行为发生在 LMDeploy 接收图像 URL 时，服务器端图像加载器在不正确阻止内部、私有、回环或链路本地地址的情况下直接获取该 URL。 本实验环境对比： 服务| 版本| 用途 ---|---|--- vuln| LMDeploy 0.12.0| 展示存在漏洞的行为 patched| LMDeploy 0.12.3| 展示修复后的行为 internal| 本地金丝雀服...

sniffles

Sniffles--Packet Capture Generator for IDS and Regular Expression Evaluation Sniffles is a tool for creating packet captures that will test IDS that use fixed patterns or regular expressions for detecting suspicious behavior. Sniffles works very simply. It takes a set of regular expressions or...

bluemonday

bluemonday bluemonday is a HTML sanitizer implemented in Go. It is fast and highly configurable. bluemonday takes untrusted user generated content as an input, and will return HTML that has been sanitised against an allowlist of approved HTML elements and attributes so that you can safely include...

KNOXout

KNOXout 基于 CVE-2016-6584 漏洞 的 Galaxy S6 root 概念验证 它使用 dosomder/idler1984 的 iovyroot 来利用初始内核写-什么-哪里漏洞。...

mcp-atlassian < 0.17.0 - Server-Side Request Forgery

MCP Atlassian 0.17.0 contains a server-side request forgery caused by improper validation of custom HTTP headers in the HTTP middleware, letting unauthenticated attackers force outbound requests to arbitrary URLs, exploit requires access to the mcp-atlassian HTTP endpoint. id: CVE-2026-27826 info...

Mailpit < 1.28.3 - Server-Side Request Forgery

Mailpit = 1.28.0 contains a server-side request forgery caused by insufficient validation of internal IP addresses in the /proxy endpoint, letting attackers make requests to internal network resources, exploit requires crafted HTTP GET requests. id: CVE-2026-21859 info: name: Mailpit 1.28.3 -...

automato

automato.rb automato uses native LDAP libraries to automate the collection and enumeration of various directory objects. This is incredibly useful during an internal penetration test. automato can also conduct password spraying attacks, and identify if a user is a local administrator against any...

CVE-2019-19781_IOCs

CVE-2019-19781IOCs CVE-2019-19781 的 IOCs citrixhoneypotnslookup.txt 包含 ips.txt 中列出的 IP 地址的 whois 查询结果。 这些是在以下文章中讨论的蜜罐日志中出现频率最高的地址： https://www.digitalshadows.com/blog-and-research/cve-2019-19781-analyzing-the-exploit/...

webscan

webscan webscan is a browser-based network IP scanner and local IP detector. It detects IPs bound to the user/victim by listening on an RTP data channel via WebRTC and looping back to the port across any live IPs, as well as discovering all live IP addresses on valid subnets by monitoring for...

RansomCoinPublic

RansomCoin 从勒索软件中提取元数据和硬编码的攻击指标（IoC），以可扩展、高效的方式实现，并集成了 Cuckoo。理想情况下，它在 Cuckoo 动态分析期间运行，但也可用于对大量勒索软件进行静态分析。设计目标为快速、低误报率（针对加密货币地址）。对电子邮件、URL、Onion 地址和域名存在有限的误报（这些很难做到完美）。 简而言之，如果您只关心货币化向量，这是一个快速且简单的初始分类工具。 安装说明 请确保您已安装 Python3。 在 Linux 虚拟机中 建议下载并安装一个虚拟机软件，例如 VirtualBox。安装您所需的 Linux 虚拟机（如 Lubuntu、Ka...