stegcloak

StegCloak The Cloak of Invisibility for your texts StegCloak is a pure JavaScript steganography module designed in functional programming style, to hide secrets inside text by compressing and encrypting the secret before cloaking it with special unicode invisible characters. It can be used to...

CVE-2021-45232-RCE

CVE-2021-45232 CVE-2021-45232 Apache apisix Dashboard api unauth rce Version: 2.10.1 Fofa: title="Apache APISIX Dashboard" POC: IP:PORT/apisix/admin/migrate/export...

AnonX

NOTE AnonX script was based on we-transfer public API and has stopped working after three weeks from its release. “All good things must come to an end, so it’s with a heavy heart and through held-back tears that we must announce that we’ll be retiring our Public API. Sad times.” says Stephen. For...

CVE-2022-1442

CVE-2022-1442 WordPress Plugin Metform = 2.1.3 - Improper Access Control Allowing Unauthenticated Sensitive Information Disclosure Description The is vulnerable to sensitive information disclosure due to improper access control in the /core/forms/action.php file which can be exploited by an...

bbrecon

This project is no longer maintained and I took the crawling infrastructure offline. The audience was not big enough to justify maintaining it. Bug Bounty Recon bbrecon is a free Recon-as-a-Service for bug bounty hunters and security researchers. The API aims to provide a continuously up-to-date...

CVE-2021-41805

CVE-2021-41805 Hashicorp Consul RCE via API HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has Incorrect Access Control. An ACL token with the default operator:write permissions in one namespace can be used for unintended privilege escalation in a differe...

CVE-2019-15043

CVE-2019-15043 POC Description Proof of concept scan to check if a Grafana server is vulnerable to CVE-2019-15043. Checks the Grafana server version number and checks to see if the snapshot API allows for unauthenticated requests. CVE-2019-15043 CVE-2019-15043 is a Denial-of-service vulnerability...

CVE-2022-22947

Spring Cloud Gateway Actuator API SpEL表达式注入命令执行（CVE-2022-22947） Spring Cloud Gateway Actuator API SpEL Code Injection CVE-2022-22947 使用方法: -t http://vuldomain.com //单个IP -f urls.txt //读取文件批量扫描，采用多线程，速度快 -c command //自定义命令，默认是whoami...

Zena-CVE-2021-45026

Zena - POC de Exploit de XSS Almacenado a RCE Exploit POC para la aplicación Zena de Rocket Software v. 4.2.1 - XSS Almacenado a RCE CVE-2021-45025 CVE-2021-45026 https://phoenix-sec.io/2022/06/17/Zena-CookieMonsteRCE.html Proceso del POC: Inicia sesión en la página webconfig de Zena usando...

CVE-2026-41091-PoC-Exploit

CVE-2026-41091 - RedSun SolarFlare - Microsoft Defender 本地提权漏洞利用 法律免责声明与负责任使用 本工具仅供教育和授权渗透测试目的使用。 作者和贡献者不对因使用本软件而造成的任何误用或损害负责。用户须自行确保在测试前已获得目标所有者的明确书面许可。未经授权访问计算机系统在适用的联邦、州和国际网络犯罪法律下均属违法。 使用本软件即表示您同意： 仅在您拥有或已获得明确测试许可的系统上使用。 遵守所有适用的地方、州和联邦法律。 不将其用于任何恶意、破坏性或非法活动。 ! 警告： Active Directory...

cve-2022-22947

cve-2022-22947 Spring Cloud Gateway is an API gateway in Spring. Versions 3.1.0 and 3.0.6 inclusive and earlier contain a SpEL expression injection vulnerability. When an attacker can access the Actuator API, they can exploit this vulnerability to execute arbitrary commands. Usage: ➜...

bing-ip2hosts

Bing-ip2hosts Bing-ip2hosts is a Bing.com web scraper to discover hostnames by IP address. Description Bing-ip2hosts is a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search. It provides a feature...

metlo

Metlo API Security Secure Your API. Metlo is an open-source API security platform Metlo is an open source API security tool you can setup in 15 minutes that inventories your endpoints, detects bad actors and blocks malicious traffic in real time. Detect API attacks in real time. Automatically blo...

metlo

Metlo API Security 保护您的API。 Metlo 是一个开源的API安全平台 Metlo 是一个开源API安全工具，您可以在15分钟内完成部署，它能够盘点您的端点、检测恶意行为，并实时拦截恶意流量。 实时检测API攻击。 自动拦截恶意行为者。 创建所有API端点和敏感数据的清单。 在API投入生产前主动进行安全测试。 免费开始使用！ 如果您想部署我们的开源产品，我们提供了面向 AWS、GCP、Azure 和 Docker 的部署说明。 功能特性 端点发现 - Metlo 扫描网络流量，为您API中的每一个端点建立清单。 敏感数据扫描 -...

CVE-2025-54914-PoC

CVE-2025-54914 Azure Route Exploit Overview This is an improved implementation of the CVE-2025-54914 Azure Networking Route exploit. This version maintains the core CVE functionality while adding more features including persistence, evasion, multi-target scanning, and error handling. Features Cor...

pyhunter

pyhunter Tool to search possible emails indexed throught API's Hunter.io https://hunter.io Instalation You can download the latest version of pyhunter by cloning the GitHub repository: git clone https://github.com/n4xh4ck5/pyhunter.git Install the dependencies via pip: pip install -r...

snowpick

snowpick es un escáner de exposición de ServiceNow que detecta ACL de widgets mal configuradas, controles de acceso de la API REST y exposición de datos no autenticada. ServiceNow expone datos a través de dos superficies públicas comunes: los widgets de Service Portal y la API REST de tablas...

CVE-2022-45354

Download Monitor = 4.7.60 - Sensitive Information Exposure via REST API CVE-2022-45354:version found on http://wordpress.lan Details : CVE-2022-45354:version matched at http://wordpress.lan Protocol : HTTP Full URL : http://wordpress.lan/wp-content/plugins/download-monitor/readme.txt Timestamp :...

wpUsersScan

wpUsersScan Acerca de wpUsersScan Enumera la lista de usuarios de sitios WordPress a través de la API REST / CVE-2017-5487, WordPress 4.7.1 - Enumeración de nombres de usuario Uso $ python wpUsersScan.py URL Cómo instalar Clonar Clona el repositorio con: $ git clone...

CVE-2026-48017

CVE-2026-48017 — Remote Code Execution in DbGate via functionName injection Severity : High CVSS 8.8 CWE : CWE-94 — Improper Control of Generation of Code 'Code Injection' Affected : dbgate-api ≤ 7.1.8 patched in 7.1.9 Advisory : GHSA-hv83-ggc4-v385 NVD :...