301761 matches found
filebuster
Filebuster An extremely fast and flexible web fuzzer What is it? Filebuster is a HTTP fuzzer / content discovery script with loads of features and built to be easy to use and fast! It uses one of the fastest HTTP classes in the world of PERL - Furl::HTTP. Also the thread modelling is optimized to...
Scanner-and-Patcher
Scanner and Patcher Overview: The Scanner and Patcher project is built as part of the AlphaSecure framework, which has been presented and published at ACM IC3 2024 under the title AlphaSecure: A State-of-the-Art Framework for Web Application Vulnerabilities Detection and Patch Recommendation Usin...
procrustes
Procrustes A bash script that automates the exfiltration of data over dns in case we have a blind command execution on a server where all outbound connections except DNS are blocked. The script currently supports sh, bash and powershell and is compatible with exec style command execution e.g...
sudo-snooper
sudo-snooper sudo-snooper acts like the original sudo binary to fool users into entering their passwords. It will show a fake prompt just like the original to the user to enter their sudo password. This can be useful in penetration tests or security evaluations for testing user knowledge...
NetAlertX
NetAlertX - Network Visibility & Asset Intelligence Framework š· Click for more screenshots Head to https://netalertx.com/ for even more gifs and screenshots š·. NetAlertX is a network visibility and asset intelligence platform for homelabs, IT teams, MSPs, and distributed environments. It provides...
CVE-2026-82796
SolarView Compact (Contec) contains a cross-site scripting vulnerability in the Image Management component. An attacker with valid login credentials can exploit it to execute an arbitrary OS command , achieving impact on a subsequent system due to changed scope . The CVSS 3.1 base score is 5.4 (M...
CVE-2026-82796
SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
EUVD-2026-77252
SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
CVE-2026-82795
SolarView Compact (Contec) contains a cross-site scripting (XSS) vulnerability in its Schedule Settings and Mail Send Setting features. If exploited, the XSS can be leveraged to execute an arbitrary OS command by an attacker who has valid credentials to log into the product. The CVSS v3.1 score i...
CVE-2026-82795
SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
EUVD-2026-77251
SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
CVE-2026-82794
SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
CVE-2026-82794
SolarView Compact (by Contec ) contains an OS command injection vulnerability in its Schedule Settings feature. An attacker with authenticated access can execute arbitrary OS commands on the host system. The CVSS v3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indic...
EUVD-2026-77250
SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
secbutler
Essential utilities for pentester, bug-bounty hunters and security researchers Features ā¢ Usage ā¢ Installation ā¢ License ā¢ secbutler is a utility tool made for pentesters , bug-bounty hunters and security researchers that contains all the most used and tedious stuff commonly used while performing...
CVE-2026-82791
Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
EUVD-2026-77246
Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
CVE-2026-82791
An OS Command Injection vulnerability affects the Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit . An attacker who can authenticate to the product may execute arbitrary OS commands, leading to high impact on confidentiality, integrity, and availability (CVSS 3.1: 8.8 HIGH ; CVSS ...
CloakQuest3r
If you find this GitHub repo useful, please consider giving it a star! āļø CloakQuest3r is a Python-based security research tool designed to analyze and identify potential origin IP exposure of websites protected by Cloudflare and other reverse proxy or CDN services. Websites often rely on...
awesome-web-hacking
awesome-web-hacking This list is for anyone wishing to learn about web application security but do not have a starting point. You can help by sending Pull Requests to add more information. If you're not inclined to make PRs you can tweet me at @infoslack Table of Contents Books Documentation Tool...